Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/qwXQhSfQNvVPslhAzwxQ2eqG6wc.roa
File: qwXQhSfQNvVPslhAzwxQ2eqG6wc.roa (raw, json)
Hash identifier: b7Y6DOXPQqOnPi1ehozTxm0WfFlPg9MU0ybpU1opFdI=
Subject key identifier: AB:05:D0:85:27:D0:36:F5:4F:B2:58:40:CF:0C:50:D9:EA:86:EB:07
Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial: 01856D6636686353DA1BBDE92A2750D58DED
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/qwXQhSfQNvVPslhAzwxQ2eqG6wc.roa
Signing time: Sun 01 Jan 2023 12:54:53 +0000
ROA not before: Sun 01 Jan 2023 12:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50818
IP address blocks: 185.9.21.0/24 maxlen: 24
82.196.16.0/22 maxlen: 24
82.196.20.0/24 maxlen: 24
82.196.20.0/22 maxlen: 22
185.20.42.0/24 maxlen: 24
2a03:42c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:36:68:63:53:da:1b:bd:e9:2a:27:50:d5:8d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Validity
Not Before: Jan 1 12:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab05d08527d036f54fb25840cf0c50d9ea86eb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:60:01:20:cd:76:fe:fc:00:eb:98:51:f2:
8f:f9:8e:92:8b:b8:c9:8d:3e:91:ce:9d:59:f2:03:
17:17:9e:ef:c6:df:32:c7:d5:db:37:a9:0f:27:b8:
45:63:fa:25:e6:af:bc:3a:8a:10:28:4f:35:f2:d6:
a1:02:cd:84:3c:48:7b:9f:4b:26:5d:e9:0a:20:1b:
22:9f:48:87:b0:fc:1f:c6:cc:b7:df:ac:68:50:04:
4f:0c:9d:3a:4c:e6:15:d2:c1:12:00:a1:42:8b:02:
a2:1d:6c:dc:78:fe:d0:ed:a6:df:77:0a:46:20:17:
87:f6:97:04:bf:e0:c5:cb:cd:c3:00:71:cd:c6:87:
bd:4a:93:0b:ce:8d:58:67:7a:66:c4:6e:df:e5:26:
1f:53:f0:d5:7c:03:25:be:e5:0c:2a:8d:2f:02:d7:
54:75:4d:ea:79:88:6e:a4:75:36:bb:95:01:26:e0:
46:f5:b7:c7:86:53:b8:af:8e:ce:0c:cc:1a:41:2a:
36:88:90:01:12:ca:05:9d:5f:7d:38:7b:ce:6a:0a:
e7:60:53:bb:e2:6a:c1:27:08:79:8f:d1:55:95:d1:
cd:b1:3c:2e:85:38:25:5c:dd:3a:e8:68:e8:cb:3c:
63:8e:46:77:b5:16:04:ff:60:c2:ef:19:bd:ab:61:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:05:D0:85:27:D0:36:F5:4F:B2:58:40:CF:0C:50:D9:EA:86:EB:07
X509v3 Authority Key Identifier:
keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/qwXQhSfQNvVPslhAzwxQ2eqG6wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.16.0/21
185.9.21.0/24
185.20.42.0/24
IPv6:
2a03:42c0::/32
Signature Algorithm: sha256WithRSAEncryption
43:9e:14:7c:70:7a:68:10:48:de:5b:4e:d7:c3:8e:4f:5f:f9:
b5:80:51:26:15:8e:37:0a:e7:2e:2d:ba:f2:c3:a7:f1:23:dd:
aa:a8:fe:d2:13:11:a6:e5:01:85:b6:27:31:f1:41:f5:03:aa:
e1:11:80:7f:c2:1b:24:91:51:f5:f5:cf:87:cb:f0:8e:5a:48:
42:09:e5:93:35:79:4f:76:ac:ea:46:38:a1:61:9c:3e:5d:d1:
fd:eb:c3:05:0f:07:34:7e:f9:1e:1b:6b:99:c6:7a:18:13:f0:
a5:0e:63:89:6d:55:bc:d5:24:b7:d0:c8:dc:91:83:e1:23:bf:
a0:a6:e0:68:fb:9c:6c:4a:27:b7:1e:ed:6f:8e:60:96:22:42:
b6:cd:f8:d9:79:b1:b4:d5:78:3d:b3:68:c5:a2:0b:52:91:f1:
01:a4:78:76:8c:dc:06:ea:79:39:f2:3e:bf:5c:ed:81:86:68:
04:b8:2b:75:38:b0:63:cc:78:44:8d:86:bc:05:c9:98:68:28:
d9:13:aa:56:ae:bd:95:09:a8:12:15:fe:2d:1c:14:22:7a:ef:
ad:e9:f4:77:40:4a:4d:b5:5e:08:d4:d4:d8:fc:af:1f:7f:40:
43:c7:c7:f4:a4:54:de:9c:82:49:de:17:30:e0:cb:e9:4f:41:
df:08:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:27 2024 by rpki-client on console-fra.rpki-client.org