Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/QfNfRY9LX0ho_KyQLFESyNaZaPU.roa
File: QfNfRY9LX0ho_KyQLFESyNaZaPU.roa (raw, json)
Hash identifier: 6PrCpdeOV4b9j/fbNQpcxAbnPc4BaVojVM2gDg+/eoA=
Subject key identifier: 41:F3:5F:45:8F:4B:5F:48:68:FC:AC:90:2C:51:12:C8:D6:99:68:F5
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 018CC64B561B2BCD24F420717BE1DBDE7104
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/QfNfRY9LX0ho_KyQLFESyNaZaPU.roa
Signing time: Mon 01 Jan 2024 18:31:15 +0000
ROA not before: Mon 01 Jan 2024 18:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60422
IP address blocks: 185.208.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 09:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:56:1b:2b:cd:24:f4:20:71:7b:e1:db:de:71:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41f35f458f4b5f4868fcac902c5112c8d69968f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:ee:4c:43:fd:d8:e1:b3:1e:2c:b0:e4:aa:
f9:01:4d:bc:54:0c:fd:3b:75:34:5b:16:89:24:a6:
9c:ac:c8:7b:67:0b:67:08:ab:cb:f6:72:01:eb:2b:
67:26:d2:24:87:7d:bb:fd:67:00:1a:c6:6e:8a:2e:
d1:77:8a:b5:e0:fa:7a:aa:94:2c:66:34:d9:a3:6d:
b2:63:26:d9:91:89:22:34:4a:b2:2d:d4:4f:7c:23:
ef:41:a4:67:bc:df:e7:59:5f:94:e2:ab:db:5c:bc:
fb:91:5d:dd:72:01:a3:0c:93:45:50:29:a3:b0:24:
23:37:64:98:3b:ea:c3:6d:f8:d8:34:b3:7b:e3:f8:
cb:82:e1:58:96:af:1e:aa:80:7f:b0:4c:44:3a:5a:
87:eb:5b:47:46:b5:15:b8:08:78:db:8d:6f:7d:46:
9e:0c:4a:9e:54:c2:4f:7c:ef:99:4f:eb:0c:f2:c8:
cb:68:b9:4b:28:a3:7d:be:34:93:a1:08:38:8b:6a:
53:d7:5e:8f:30:f1:c8:47:3b:32:c1:c5:42:59:c5:
77:e3:a0:27:6a:de:13:87:c6:55:80:35:0b:ee:02:
4d:63:73:d7:13:bd:e5:5a:f3:80:5b:9b:bc:51:66:
5d:4e:d2:68:f2:94:89:33:f6:19:8f:54:3b:26:b8:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F3:5F:45:8F:4B:5F:48:68:FC:AC:90:2C:51:12:C8:D6:99:68:F5
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/QfNfRY9LX0ho_KyQLFESyNaZaPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:67:37:64:82:6c:f8:71:ad:8d:27:53:b8:d3:08:20:b1:41:
4f:c3:7b:41:30:84:06:98:d8:4b:ac:8e:f4:1d:b4:40:e0:dd:
4e:a9:8e:08:18:f9:5a:02:20:0f:83:82:04:77:bd:0b:5f:9b:
bc:f4:d4:1c:b7:c2:2b:74:88:27:4f:00:27:99:03:e8:ea:39:
da:e6:0e:12:89:01:7d:89:b2:51:e5:d6:d2:22:78:70:95:e0:
c5:5f:a8:f5:9f:01:16:c1:55:65:d7:55:e4:0d:dd:f0:53:df:
9c:24:c1:05:cc:24:28:ad:93:aa:c4:0f:c8:3b:1e:08:65:6f:
db:76:9c:1a:23:24:ac:0f:5f:4e:31:30:b2:80:95:f4:e0:d5:
01:a9:d2:95:6f:1c:7b:43:c4:40:66:35:ff:57:e1:de:3c:b7:
c8:01:09:be:ca:9e:b0:5f:15:73:a8:88:ff:d5:4f:8b:8f:a3:
83:42:17:fe:20:6b:44:33:a5:0c:dc:a5:3b:14:f5:dc:2f:92:
c6:79:fb:2f:53:60:b9:aa:be:40:c0:04:d9:97:ea:85:66:be:
f6:f2:34:be:e7:cb:56:40:3b:2a:7f:06:a3:9f:8d:09:39:d2:
40:4d:47:15:67:51:4f:69:9e:97:c3:af:e2:4b:94:71:56:a8:
98:da:81:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 12:42:50 2024 by rpki-client on console-ams.rpki-client.org