Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/qc4wZn2KelrF86hDjasCY5f9DX8.roa
File: qc4wZn2KelrF86hDjasCY5f9DX8.roa (raw, json)
Hash identifier: 0AxRvFVCqpsELmr92HPox0eOUJK0FIIpd5StzMBAhS4=
Subject key identifier: A9:CE:30:66:7D:8A:7A:5A:C5:F3:A8:43:8D:AB:02:63:97:FD:0D:7F
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 018B6F9288210EDA68B521B7AA4F4F96FF0D
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/qc4wZn2KelrF86hDjasCY5f9DX8.roa
Signing time: Fri 27 Oct 2023 05:19:15 +0000
ROA not before: Fri 27 Oct 2023 05:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200852
IP address blocks: 185.93.196.0/22 maxlen: 22
185.93.196.0/23 maxlen: 23
185.93.197.0/24 maxlen: 24
185.93.198.0/23 maxlen: 23
2a02:ea00::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 07 Nov 2023 09:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:92:88:21:0e:da:68:b5:21:b7:aa:4f:4f:96:ff:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Oct 27 05:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9ce30667d8a7a5ac5f3a8438dab026397fd0d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2d:5e:48:f0:26:bb:9a:61:70:ff:32:01:f3:
98:4f:a6:25:10:b2:62:ff:49:aa:11:09:de:86:49:
74:6b:71:fa:7b:4b:9b:30:80:00:df:d1:bc:fa:71:
3f:6b:60:62:0f:1b:c1:1c:d0:6d:2e:5a:14:a8:5c:
03:e9:7c:65:29:d2:f8:67:2e:fd:9b:4a:1e:af:fe:
bc:f4:6f:67:93:ec:bb:15:64:38:84:ce:2e:51:2a:
2d:6f:25:c3:a6:1a:a3:07:bd:27:44:95:9a:5e:1c:
b3:dd:3b:b8:9e:00:90:0b:3b:0c:a7:9b:4d:6b:26:
83:01:45:03:f7:72:7e:8d:5e:0d:2c:d0:73:fc:3a:
cc:19:c8:1e:f6:6d:91:44:f4:63:f2:a4:0b:f0:a3:
32:62:e4:78:d3:f5:e7:3c:e8:cc:ed:c3:64:17:f3:
89:02:17:9f:b0:15:a2:7c:1f:18:d9:7b:79:5a:e9:
7e:fe:a2:fd:a3:86:38:88:73:91:eb:49:1c:1e:ee:
6a:cb:86:52:74:2b:7a:83:86:aa:9a:fb:bd:e4:f5:
e3:4a:a8:a5:47:a2:24:df:47:6b:35:59:84:f3:e7:
86:fe:51:85:ac:0d:29:6b:d2:11:30:24:b0:f0:bd:
70:c4:22:81:d0:01:ff:c8:cc:9c:32:eb:88:52:44:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CE:30:66:7D:8A:7A:5A:C5:F3:A8:43:8D:AB:02:63:97:FD:0D:7F
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/qc4wZn2KelrF86hDjasCY5f9DX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.196.0/22
IPv6:
2a02:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
4d:e8:01:b2:67:fa:bb:d3:f8:f4:08:13:86:c7:8b:b6:c0:c2:
2c:36:37:1c:21:5b:b9:69:81:43:97:e9:db:6f:2b:c6:20:21:
0a:8b:14:28:cf:8b:51:b6:56:c9:4c:f2:6d:09:6b:a1:1c:1b:
dc:fd:8f:b1:89:cd:81:3e:61:f6:6a:ff:33:88:45:62:51:40:
eb:81:f6:4c:e2:b5:8f:cd:44:cf:0e:c7:91:02:95:db:7e:da:
b3:8c:83:1c:4e:a5:10:6f:00:78:90:3c:2d:7e:01:ad:94:d6:
10:87:22:76:8e:33:6c:d7:e9:6b:ad:11:77:9c:da:6b:6a:d6:
d0:8d:17:7f:ca:54:79:5a:61:a3:87:72:6f:ce:27:cd:44:2c:
9c:ea:3e:af:9a:47:f9:3c:41:12:1c:54:28:0c:e9:da:12:0c:
04:e9:50:cb:da:a6:b5:02:a1:40:78:5a:a3:51:bb:25:41:4e:
11:8c:40:0c:14:c3:86:60:53:56:a6:85:26:9f:e2:13:04:d5:
bc:6a:64:0d:a4:b1:f8:92:e7:79:e3:0e:38:b7:5e:19:bc:f6:
85:ba:8d:b9:32:37:d8:a0:9f:fc:88:9d:c7:2b:2e:80:f6:ea:
78:63:d5:33:64:91:7b:81:b4:d0:44:c2:4f:14:ab:d3:7f:a0:
1f:ae:e4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:00 2024 by rpki-client on console-ams.rpki-client.org