Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/QqDqYs8Cp32jQOfNBHVt0dx5Xu8.roa
File: QqDqYs8Cp32jQOfNBHVt0dx5Xu8.roa (raw, json)
Hash identifier: qDZgqbu3K2JUALyrh51rDpnB/4KYB6DasczKX8Df1r0=
Subject key identifier: 42:A0:EA:62:CF:02:A7:7D:A3:40:E7:CD:04:75:6D:D1:DC:79:5E:EF
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0187776BBC2616991F045B3FD04C1D8A2AF4
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/QqDqYs8Cp32jQOfNBHVt0dx5Xu8.roa
Signing time: Wed 12 Apr 2023 21:42:41 +0000
ROA not before: Wed 12 Apr 2023 21:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.226.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 16:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:77:6b:bc:26:16:99:1f:04:5b:3f:d0:4c:1d:8a:2a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 12 21:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42a0ea62cf02a77da340e7cd04756dd1dc795eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:d9:30:38:06:16:a1:8c:d0:23:a3:18:08:
81:13:e9:ee:3a:9f:a1:cb:b1:c3:f5:41:b8:3a:5c:
2f:b5:32:5c:d7:8e:6e:13:c8:3a:4d:58:9e:01:11:
44:b4:a3:e3:84:da:21:9d:a1:ba:00:98:e9:a5:34:
96:31:38:c4:01:37:9c:4b:23:26:59:2b:83:46:33:
84:be:85:28:f7:ee:0a:6e:2b:b1:bd:41:0c:53:74:
20:ef:a2:dc:26:f5:cf:eb:5a:8a:01:1a:1d:34:a5:
79:ba:37:18:43:53:8e:3c:6f:4b:a6:6f:27:b2:54:
c4:08:a5:0c:da:fd:60:b0:0f:a3:7b:af:69:3b:fa:
d7:72:3c:bf:6e:cf:ab:06:6b:a7:10:00:50:52:37:
89:46:e3:fb:63:c7:47:ba:c3:f1:86:d6:95:7d:25:
49:ce:b1:9d:e6:ad:5c:a5:68:17:2b:96:2b:5a:74:
3c:f2:b6:2e:01:5c:5c:4b:b6:54:05:fd:12:98:12:
89:8d:8d:78:d8:22:da:77:3d:1f:cf:b5:2b:36:bf:
7d:43:a5:13:dc:55:a7:34:54:b7:f7:38:0e:46:62:
c3:6f:9d:dc:67:93:75:09:8b:70:08:a6:49:62:96:
7a:e9:48:dc:fc:0d:c0:b5:58:88:ea:a4:da:94:32:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A0:EA:62:CF:02:A7:7D:A3:40:E7:CD:04:75:6D:D1:DC:79:5E:EF
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/QqDqYs8Cp32jQOfNBHVt0dx5Xu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c4:91:56:66:f9:70:9f:31:a5:2b:03:d6:63:93:f4:3b:0f:
b0:da:5e:ce:e0:f6:74:ff:d4:00:39:b8:4a:69:19:0d:57:3f:
06:e1:1f:cc:a1:56:22:21:83:28:ee:d3:2c:f5:5d:75:6c:19:
7f:0f:53:d0:1b:b2:c1:e2:5a:e7:c2:a4:75:47:1b:29:ed:6b:
8d:94:7d:cb:cc:47:33:07:8a:d9:a2:dd:29:99:59:d2:33:95:
d4:56:e6:4f:95:d8:50:fe:bd:d4:0b:22:c7:63:e4:cd:b7:47:
c7:26:c2:19:29:93:f6:8a:7d:e5:4d:37:53:40:d2:4f:63:d1:
31:eb:b4:1a:77:32:98:72:f7:d4:da:ad:f7:8e:64:8e:ee:66:
3b:9e:d0:d8:12:d5:89:8e:b4:61:42:cb:06:a6:7d:9f:8a:7d:
cf:0b:d1:89:7c:93:99:64:f2:7d:b0:36:b5:05:47:92:5b:ef:
06:1d:7c:ed:91:53:2b:96:b5:b7:f4:f7:76:a5:8e:6b:79:ae:
25:2f:e2:10:9c:34:9a:e7:95:d2:f5:c3:dc:ea:9b:6f:bf:1a:
d6:29:3d:cc:52:9e:71:ae:bc:e3:d7:6c:02:20:f2:9e:0e:a4:
c7:7b:5c:c2:c0:15:17:19:09:a5:35:87:4e:b3:37:ad:04:51:
87:2a:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org