Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/qysUfCoc99ZBF7uG6kEbbGiAW5w.roa
File: qysUfCoc99ZBF7uG6kEbbGiAW5w.roa (raw, json)
Hash identifier: hF7RR2OSocL1HVhzioiZbvDTMeepjl4vCyvev+3WyBA=
Subject key identifier: AB:2B:14:7C:2A:1C:F7:D6:41:17:BB:86:EA:41:1B:6C:68:80:5B:9C
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 018CC9BCBA1AB3FFACF704C6AC814A933217
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/qysUfCoc99ZBF7uG6kEbbGiAW5w.roa
Signing time: Tue 02 Jan 2024 10:33:57 +0000
ROA not before: Tue 02 Jan 2024 10:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 85.31.41.0/24 maxlen: 24
85.31.42.0/24 maxlen: 24
85.31.43.0/24 maxlen: 24
85.31.40.0/24 maxlen: 24
2a0d:da40::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 07 Jan 2024 17:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ba:1a:b3:ff:ac:f7:04:c6:ac:81:4a:93:32:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: Jan 2 10:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab2b147c2a1cf7d64117bb86ea411b6c68805b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:79:30:da:78:39:19:64:d9:3b:59:be:e6:
01:9a:16:e0:2d:8c:f9:ac:87:7d:99:85:dc:00:4f:
5c:95:53:83:f3:0c:b3:e7:10:70:40:ed:1a:52:18:
f0:75:ed:dc:03:d3:76:30:15:ad:82:46:c1:a3:85:
27:67:0c:a0:6b:4d:12:95:99:cf:d1:fe:70:8d:1b:
67:32:bf:7f:70:8c:36:17:b3:37:06:0a:ee:28:b0:
24:bd:55:0b:f0:f8:0f:83:99:31:85:e3:1b:f8:05:
49:67:e8:b8:a5:0c:65:aa:c1:ae:e1:fa:d3:96:6a:
60:e4:d9:fb:cf:c2:71:da:7a:dd:72:76:c8:ba:d3:
cb:56:7e:bd:35:eb:b6:8a:db:45:f4:9e:36:f2:f3:
d5:5a:83:4f:c9:62:18:ca:5d:99:dd:4d:07:95:15:
f7:e8:8d:da:2f:1d:ef:90:73:d1:47:09:96:84:f9:
df:85:d9:ab:8b:a6:b9:8d:4e:17:48:fd:34:71:6b:
01:e3:76:75:d8:cf:2e:a5:8a:79:18:35:42:3f:97:
a5:5d:f1:e1:93:a3:36:18:5d:43:c0:a0:4a:bb:53:
32:4b:22:c3:12:ec:ac:87:a2:68:80:19:e0:43:78:
31:8f:95:b8:98:d3:91:ec:43:ce:8a:8c:ac:bb:69:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2B:14:7C:2A:1C:F7:D6:41:17:BB:86:EA:41:1B:6C:68:80:5B:9C
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/qysUfCoc99ZBF7uG6kEbbGiAW5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.40.0/22
IPv6:
2a0d:da40::/29
Signature Algorithm: sha256WithRSAEncryption
c9:44:99:92:d1:5e:85:c6:e5:de:be:a2:4f:da:f9:71:e2:bd:
71:00:ac:04:a5:e1:42:2e:8b:cd:68:f5:c7:5a:3b:56:a0:b9:
02:de:91:e8:9b:e9:32:35:0f:ba:e8:d2:95:b1:7e:e3:b3:3f:
38:a3:66:9b:15:c3:50:11:5e:8e:2b:91:68:05:9c:5a:84:35:
8f:92:8e:4f:6e:7e:56:83:fd:ae:db:fa:eb:c8:ad:fc:9b:cb:
4e:8e:87:4f:1a:0e:53:d8:19:72:2e:43:49:11:52:80:76:5d:
a1:d1:71:98:37:30:78:97:63:2c:d5:57:35:31:bc:01:27:81:
b8:82:7a:9a:ca:c1:67:79:93:3b:23:50:fd:10:00:b8:dc:b0:
ef:dd:0c:ec:e4:24:c2:11:a1:28:f7:18:e9:3a:1a:e2:ab:52:
f6:17:37:04:0a:a2:62:25:e8:db:5f:31:70:8b:f9:f1:52:b8:
c4:d1:3f:f9:fb:34:40:d4:14:6d:d3:1f:3e:a5:50:7e:5b:6a:
12:92:db:c1:33:fd:d1:9b:a2:4e:91:02:43:f2:d7:b9:c0:41:
6b:97:a5:4c:8c:ec:4b:79:ba:6e:4e:42:90:1b:dd:00:33:7a:
e9:5c:d6:22:b6:75:a9:41:87:19:5f:09:19:d4:59:c6:7b:67:
b5:1b:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 21:10:46 2024 by rpki-client on console-ams.rpki-client.org