Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/qLg86mjKSkHEGSEe0eYlHkS9DRo.roa
File: qLg86mjKSkHEGSEe0eYlHkS9DRo.roa (raw, json)
Hash identifier: 3hAQ3lPY5JqMZE/yoMyQHUMbWl5tzRembeH8fK4bw6M=
Subject key identifier: A8:B8:3C:EA:68:CA:4A:41:C4:19:21:1E:D1:E6:25:1E:44:BD:0D:1A
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 01857079B1CA4B05C2610BC12725EDAAB19B
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/qLg86mjKSkHEGSEe0eYlHkS9DRo.roa
Signing time: Mon 02 Jan 2023 03:15:01 +0000
ROA not before: Mon 02 Jan 2023 03:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31493
IP address blocks: 185.76.36.0/22 maxlen: 22
212.124.192.0/19 maxlen: 19
2a00:19e8::/29 maxlen: 29
2a00:19e8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b1:ca:4b:05:c2:61:0b:c1:27:25:ed:aa:b1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 2 03:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8b83cea68ca4a41c419211ed1e6251e44bd0d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:fe:a5:94:b2:35:8f:f0:aa:3d:05:66:b1:
1b:3f:db:67:e3:84:4d:62:3a:43:54:fc:6c:7a:11:
64:3f:ce:08:45:9a:92:51:f5:0d:df:69:8d:1e:2f:
13:e6:55:7f:8a:1f:09:7e:75:73:b2:ed:15:52:f9:
05:50:ae:fd:79:80:8c:0f:99:c8:88:de:99:55:aa:
84:e2:8f:e5:b3:d6:b7:27:02:db:67:2e:ed:7c:dc:
21:1a:5b:48:cc:4f:d7:9f:28:c4:50:4c:5c:dd:ab:
75:a9:9c:9c:5c:29:42:db:c9:cd:73:91:4d:93:39:
5e:19:bc:a9:bf:b8:90:89:ba:a8:cf:71:1e:fc:77:
a3:65:b1:dc:18:e7:4e:f2:f5:1c:48:4f:81:1f:ba:
56:14:f4:d3:97:81:88:59:fb:1e:6a:59:37:4b:df:
91:bb:02:a1:1d:02:0f:97:cd:c9:0d:3a:79:c0:86:
02:e7:7c:ee:45:d5:74:79:11:17:bb:2a:87:7f:d0:
f3:ee:5a:16:c1:e7:2e:6e:13:32:ed:3d:08:c9:3b:
fb:74:af:71:3f:a2:eb:c0:40:1c:df:6b:de:49:75:
0e:0c:75:bf:0f:bb:d9:18:26:52:93:50:9f:13:8f:
3a:37:a4:97:95:bd:1a:90:d8:cf:61:44:3f:4d:0a:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:3C:EA:68:CA:4A:41:C4:19:21:1E:D1:E6:25:1E:44:BD:0D:1A
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/qLg86mjKSkHEGSEe0eYlHkS9DRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.36.0/22
212.124.192.0/19
IPv6:
2a00:19e8::/29
Signature Algorithm: sha256WithRSAEncryption
b5:fe:4a:18:0a:f1:ea:4f:d6:ff:ce:4d:4e:d6:d8:d0:2e:3b:
e8:a1:1c:3c:07:ef:b8:e4:ec:89:49:28:26:92:43:06:67:e0:
89:00:13:78:67:bc:39:11:0a:75:19:88:f8:20:f2:a9:5c:c4:
28:64:08:40:ba:41:75:fe:78:bb:52:34:4a:09:da:ae:d7:06:
99:10:7f:e6:79:7b:d1:0d:9c:c5:8e:79:22:e9:82:12:a8:1d:
3e:ad:07:cf:d3:97:24:70:72:51:5a:d1:25:bb:ce:30:2f:c4:
67:b1:39:63:03:e1:84:28:03:0d:cc:39:51:d1:4d:90:31:7a:
c1:bf:01:cf:db:8c:e5:aa:ef:9d:1d:dd:85:08:8e:18:cb:6d:
7d:37:0f:d0:99:f7:b2:69:c4:4a:d4:06:cc:89:53:6e:af:1e:
89:b3:31:61:c2:7c:bf:db:55:1d:95:af:91:a0:ca:98:fc:48:
fe:7c:83:ad:9b:ff:83:03:5f:b3:88:26:6a:76:c4:4d:96:5e:
0b:4e:ce:5d:28:5d:c2:ef:6c:7e:21:f3:e0:3e:4c:56:33:f2:
3c:fb:8a:51:16:3b:e9:81:8f:02:40:69:ee:92:5c:fd:a0:36:
b5:d2:56:40:36:04:1b:99:bd:83:80:36:04:6c:fb:e8:7f:c3:
fd:f8:be:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:42 2024 by rpki-client on console-fra.rpki-client.org