Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qR-JgwPV977-L7t14rj_1zqh6ZM.roa
File: qR-JgwPV977-L7t14rj_1zqh6ZM.roa (raw, json)
Hash identifier: 22Q+5k6/6f4yvNvKXMBoMOYDlMmNRaM2tSu67Ehbnnk=
Subject key identifier: A9:1F:89:83:03:D5:F7:BE:FE:2F:BB:75:E2:B8:FF:D7:3A:A1:E9:93
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018C9164992D9BECE09607102EA8242CCCF2
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qR-JgwPV977-L7t14rj_1zqh6ZM.roa
Signing time: Fri 22 Dec 2023 11:58:58 +0000
ROA not before: Fri 22 Dec 2023 11:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.233.54.0/24 maxlen: 24
185.226.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:64:99:2d:9b:ec:e0:96:07:10:2e:a8:24:2c:cc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Dec 22 11:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a91f898303d5f7befe2fbb75e2b8ffd73aa1e993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:06:94:f7:8f:64:98:24:cd:56:27:09:76:
4f:59:1a:b8:0a:32:2d:fd:9a:24:63:54:40:1e:94:
49:66:f7:70:8b:71:c2:b7:d2:8a:33:d8:83:33:e5:
b8:5c:c2:12:26:b6:fd:1a:f9:62:4d:f0:88:c7:71:
41:67:a5:18:21:2d:1e:ef:9f:20:a2:80:e4:65:49:
76:6e:06:99:ac:91:d0:43:fb:9b:8e:9e:05:9c:b1:
19:bb:8c:32:28:61:a9:15:fb:42:7c:13:10:09:6e:
89:78:1c:d7:00:b9:dc:72:b5:ba:1e:ed:0d:4b:bb:
d0:1a:9a:c5:7d:42:d2:76:6b:bb:28:de:9b:58:51:
07:da:6d:69:d8:ff:71:a4:d4:e0:2e:05:9a:56:4e:
81:8d:7e:27:a8:23:05:f0:09:18:8b:59:c7:2b:55:
64:93:0a:26:81:98:20:25:23:8b:43:8f:d6:0b:49:
f9:f7:f3:61:b0:c5:06:4e:72:66:8a:bb:ea:8c:00:
f2:76:a7:17:62:b8:b7:18:f5:a5:2b:85:86:56:ff:
ca:f5:03:2d:a5:9b:db:9b:a8:f8:fa:68:13:bf:34:
1d:b6:54:1e:cd:9d:b6:ee:46:60:ed:88:28:a5:60:
a9:56:53:c4:56:26:ff:85:51:17:6a:b7:4e:ec:a1:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1F:89:83:03:D5:F7:BE:FE:2F:BB:75:E2:B8:FF:D7:3A:A1:E9:93
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/qR-JgwPV977-L7t14rj_1zqh6ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.54.0/24
185.226.183.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:fd:bf:a7:42:59:f3:3a:04:40:97:25:87:13:8f:9f:b6:e6:
be:6a:11:14:8e:97:35:5f:5b:49:d1:44:52:28:20:80:b4:30:
db:91:d5:24:98:42:12:cc:e1:04:da:81:2a:7b:34:64:da:4e:
ab:cd:c8:c1:ab:33:dc:20:f7:76:85:e2:b0:cc:2d:68:fd:77:
ec:e0:1c:56:70:90:87:56:87:8a:95:05:4b:93:44:41:85:2c:
21:4f:36:bb:e7:13:eb:30:f0:84:33:15:5d:cc:9f:d4:8b:96:
0b:ab:00:bc:d9:3d:a1:57:39:f1:a2:de:1f:c5:03:97:b9:16:
60:c7:72:3f:53:14:c0:60:23:51:ba:23:01:69:d3:c1:53:ed:
33:ca:6f:04:3d:c8:c4:5a:47:92:9e:ce:65:13:98:fa:e3:a0:
08:74:a9:7d:49:d5:c7:27:f5:1e:33:7d:ac:da:7b:61:77:39:
1b:5f:52:68:f6:d7:ee:e8:3d:c1:19:f7:5c:48:0a:0f:72:1f:
d0:52:98:59:54:cb:7f:27:25:9e:fe:06:7b:a1:4c:3d:7b:75:
d7:83:91:db:72:d8:57:56:8c:27:52:aa:1f:b1:7e:9f:c9:54:
b5:d8:5a:09:a5:79:ec:57:95:2b:ad:12:44:29:da:dc:31:75:
92:bb:f9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org