Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/cqs40G2r9riySNVCiVAU5fO5ANM.roa
File: cqs40G2r9riySNVCiVAU5fO5ANM.roa (raw, json)
Hash identifier: BCEH9fUTEaYqo33siX5kESTEm6pysWCsT0bu9bvYU9w=
Subject key identifier: 72:AB:38:D0:6D:AB:F6:B8:B2:48:D5:42:89:50:14:E5:F3:B9:00:D3
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 01856F14A0DE9510538AC7EBA726117B165C
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/cqs40G2r9riySNVCiVAU5fO5ANM.roa
Signing time: Sun 01 Jan 2023 20:45:00 +0000
ROA not before: Sun 01 Jan 2023 20:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208711
IP address blocks: 185.92.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:a0:de:95:10:53:8a:c7:eb:a7:26:11:7b:16:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Jan 1 20:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72ab38d06dabf6b8b248d542895014e5f3b900d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a7:71:c9:15:c5:98:6d:62:4e:d2:de:d4:17:
93:96:c9:e1:5b:a8:64:88:1b:e4:bf:c7:e1:e8:19:
ac:3f:e9:50:48:88:84:dd:21:96:0a:60:f8:3d:a8:
06:01:be:46:a5:0a:21:9e:a1:83:1c:c7:05:eb:9e:
58:ce:62:c8:e6:32:4e:b5:86:c4:2c:e7:ce:b4:6c:
c2:f3:9b:46:cf:04:c9:d9:85:f0:89:8c:e8:79:8f:
03:2b:2a:4b:ef:dc:b0:44:92:0d:95:02:01:dd:69:
0d:c7:7e:37:0f:db:2b:98:af:a4:52:6c:23:5b:d7:
e9:f3:ff:63:35:5b:d8:f2:19:20:a7:2d:67:23:4a:
a1:8a:95:c8:8e:f5:43:92:4b:02:36:03:c1:e3:fe:
71:a7:47:f9:34:eb:fc:41:49:26:fa:f5:ae:e3:34:
8f:e6:4a:27:d8:37:70:af:c5:3d:7a:49:96:fb:b5:
04:90:7b:1c:3b:e5:1f:7f:e2:e7:00:a5:6a:84:3f:
be:96:fe:e6:9f:a3:4a:53:a7:de:07:0e:d7:f8:ab:
cd:a0:93:20:8a:db:60:d6:ee:8f:88:e2:95:2c:cd:
8e:c0:0b:c2:3d:3a:97:76:3a:29:ca:cd:fe:a4:3a:
6f:d8:8e:2d:68:bf:35:51:d5:19:c8:f8:9c:b8:01:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AB:38:D0:6D:AB:F6:B8:B2:48:D5:42:89:50:14:E5:F3:B9:00:D3
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/cqs40G2r9riySNVCiVAU5fO5ANM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.247.0/24
Signature Algorithm: sha256WithRSAEncryption
be:be:8b:11:d9:7f:2e:11:fc:fc:0a:3e:60:3c:53:58:96:ce:
3b:5f:b3:ad:3c:7f:07:f6:2b:af:a3:91:35:13:cc:7d:8e:37:
fb:c4:98:38:db:ca:b6:41:d5:ab:2e:23:ae:66:20:24:7b:9c:
37:53:ad:ef:8b:00:e2:44:5f:1d:96:9f:a8:82:41:bd:4c:83:
0f:55:28:df:6a:27:ce:98:1c:28:69:56:02:05:a5:4c:0c:43:
42:47:86:70:b0:69:24:03:e2:95:87:e7:b4:3f:19:f2:f9:a3:
04:3f:43:ac:71:1e:4f:1d:45:8f:75:a1:12:c7:bc:47:76:74:
c1:aa:78:db:0d:70:03:1e:66:ac:df:83:1f:40:00:57:49:9b:
f0:b7:e1:3b:ca:59:16:76:f1:60:37:43:d3:ed:2f:d2:f0:c8:
16:f0:27:49:23:dc:3b:2d:b5:6e:42:46:57:87:77:59:6c:6b:
ac:6f:16:71:b8:c1:8b:f4:5a:8b:00:a1:00:c6:41:e9:db:1b:
59:3f:52:e8:97:22:ee:cd:f9:66:57:4d:72:47:67:4a:34:1e:
a5:11:32:b1:8d:5a:99:41:ad:35:8d:9a:ad:26:5f:da:31:90:
08:91:80:2c:60:3a:58:f7:f8:da:88:bb:a7:1c:ff:f5:46:58:
3e:20:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:01 2024 by rpki-client on console-ams.rpki-client.org