Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/q0opYRghkYN3K0l_kUZI9M3Usi0.roa
File: q0opYRghkYN3K0l_kUZI9M3Usi0.roa (raw, json)
Hash identifier: f6id58/Jw1q0OQW7ihY1nljkHhFTTgvWjjLeb3eB6XE=
Subject key identifier: AB:4A:29:61:18:21:91:83:77:2B:49:7F:91:46:48:F4:CD:D4:B2:2D
Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial: 01856B9354127348F56F57F9F8FCD26AB6FE
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/q0opYRghkYN3K0l_kUZI9M3Usi0.roa
Signing time: Sun 01 Jan 2023 04:24:55 +0000
ROA not before: Sun 01 Jan 2023 04:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.1.107.0/24 maxlen: 24
2001:7f8:c1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:54:12:73:48:f5:6f:57:f9:f8:fc:d2:6a:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Validity
Not Before: Jan 1 04:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab4a296118219183772b497f914648f4cdd4b22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:3b:b4:e8:36:b6:5d:85:58:04:49:84:2b:
98:53:15:2a:0e:c9:d3:f0:76:d2:61:c1:5f:84:45:
d6:8c:5f:72:6f:5b:9b:3e:e5:8b:3d:b4:31:a6:2f:
ee:8e:c8:7a:f2:3d:53:0a:30:44:5f:03:7e:0d:9f:
32:14:cf:93:da:17:7b:35:ec:90:ad:20:6d:38:ba:
b6:d7:bb:3b:e1:0e:28:b1:45:f3:f1:4a:86:f8:2a:
43:7e:c9:39:27:d0:0e:89:0e:87:13:9c:39:d8:cc:
a8:f9:b9:95:24:aa:58:bd:be:f4:6d:55:2d:34:2e:
59:3b:a2:c7:d7:e0:80:3b:cd:81:25:de:43:94:9c:
86:ff:00:22:fe:8d:42:24:19:48:b0:94:d8:1b:5b:
a5:08:ff:10:d8:3d:05:97:61:4e:16:3d:83:03:db:
37:af:de:26:88:2c:01:fe:3c:06:41:97:14:73:d0:
39:2a:b2:90:cb:48:0a:d1:f5:d9:20:04:31:db:00:
6e:3a:c1:95:12:b1:2f:30:64:df:12:3e:18:13:bb:
25:4e:bd:da:cc:9f:5f:bc:3a:db:b5:da:6f:a9:21:
cc:53:c2:61:d9:f1:6d:2a:e2:26:13:f3:f3:91:b1:
49:ba:a3:b6:4b:5f:88:63:17:aa:eb:1f:11:f7:2e:
2a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4A:29:61:18:21:91:83:77:2B:49:7F:91:46:48:F4:CD:D4:B2:2D
X509v3 Authority Key Identifier:
keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/q0opYRghkYN3K0l_kUZI9M3Usi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.107.0/24
IPv6:
2001:7f8:c1::/48
Signature Algorithm: sha256WithRSAEncryption
50:1f:c4:3e:fb:9b:83:5c:45:53:83:8b:e2:55:58:1e:ff:28:
e1:55:0a:ad:12:91:1a:34:6b:27:0b:03:59:d7:5e:f5:07:bf:
83:e9:6f:59:60:da:29:47:e2:5d:93:27:23:28:4a:ba:e5:fc:
a8:38:0a:19:78:1b:45:b2:e5:9c:e6:5f:d8:41:47:37:7b:48:
71:78:c3:b3:62:da:03:38:f4:aa:74:0c:7e:95:5a:bb:cd:46:
05:96:f3:6e:90:b7:6a:c5:2d:e2:e2:87:ce:32:ad:a1:b1:78:
ef:dc:0f:e9:b8:16:0e:d5:c7:a9:dd:76:4c:5f:32:5c:60:ba:
41:de:19:9c:e5:0a:d2:5e:c0:af:4e:12:f1:7c:5d:d7:17:cc:
11:ff:39:d8:19:39:b3:a6:bc:0f:12:c3:e6:99:37:07:f8:6e:
ba:ce:9c:3f:75:cc:60:f7:2f:60:88:aa:d9:2c:d6:38:d9:ad:
56:61:d3:ae:d3:cc:f7:2f:4e:cc:45:4f:50:63:4c:6f:8d:fe:
cd:c4:6c:e3:fd:fd:b5:41:1b:7a:c7:b0:49:30:3b:7d:dd:14:
a9:c4:84:94:56:4d:ce:e0:1f:44:d4:af:9a:aa:1f:56:f3:4a:
aa:33:58:3b:61:d5:c8:20:a8:b9:ba:b6:39:0f:3e:bd:a9:53:
02:c8:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:55 2024 by rpki-client on console-fra.rpki-client.org