Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/Q30QrM3SybvjTafTUPTx6XXRnCY.roa
File: Q30QrM3SybvjTafTUPTx6XXRnCY.roa (raw, json)
Hash identifier: f+Wq6pOHxmoNpleYBT9YT8VF8cFi/NmYNPFMQkyK1lw=
Subject key identifier: 43:7D:10:AC:CD:D2:C9:BB:E3:4D:A7:D3:50:F4:F1:E9:75:D1:9C:26
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 018571D7D1EEC2EF1606673B5816EF19B4B9
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/Q30QrM3SybvjTafTUPTx6XXRnCY.roa
Signing time: Mon 02 Jan 2023 09:37:27 +0000
ROA not before: Mon 02 Jan 2023 09:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203457
IP address blocks: 185.132.136.0/22 maxlen: 23
185.132.136.0/23 maxlen: 23
185.132.138.0/23 maxlen: 23
2a03:a320::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d1:ee:c2:ef:16:06:67:3b:58:16:ef:19:b4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Jan 2 09:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=437d10accdd2c9bbe34da7d350f4f1e975d19c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:20:d4:4c:04:38:06:67:ed:5c:c1:f1:63:ed:
fa:32:fa:20:42:a7:8d:74:9a:cc:bc:45:fb:f6:64:
1e:79:c3:3f:9a:9b:f8:d2:25:22:60:e9:37:60:51:
ce:61:8c:ca:6b:b7:44:9c:15:15:7a:cc:01:40:f2:
36:fc:9f:a2:03:d6:bf:3f:b1:a8:38:c7:cf:33:4e:
e1:94:84:58:36:0f:64:67:6c:87:ac:b6:86:fd:0a:
61:0d:fd:83:c9:53:2f:97:a1:7d:ff:0c:73:d0:3d:
08:b7:7b:31:f0:d5:a4:57:fa:54:b9:88:31:56:7b:
3e:a6:59:9f:5e:cc:31:a1:d7:4c:63:eb:69:9e:66:
a0:89:f5:ca:12:05:aa:1c:0e:c2:ca:3c:b3:0d:77:
a3:59:6a:3c:e7:d4:aa:08:8b:17:cf:b3:35:9f:b1:
e4:d8:3c:b5:80:28:d4:4d:cb:08:5d:b2:bf:65:73:
7d:69:e0:e1:93:e0:bc:e3:6f:7b:6f:e8:df:5a:9c:
d8:38:fd:7f:55:64:24:59:b8:27:ab:fc:c3:55:38:
1c:82:4a:13:c9:04:18:5d:d5:93:19:4e:67:77:5a:
0d:52:f6:25:9d:29:8e:4a:74:a7:41:19:a7:66:d0:
fd:41:30:da:41:04:ba:f6:88:c5:0c:68:a7:e9:c2:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7D:10:AC:CD:D2:C9:BB:E3:4D:A7:D3:50:F4:F1:E9:75:D1:9C:26
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/Q30QrM3SybvjTafTUPTx6XXRnCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.136.0/22
IPv6:
2a03:a320::/32
Signature Algorithm: sha256WithRSAEncryption
5e:06:6e:93:84:35:9c:91:2e:6b:4a:03:08:d6:dd:1a:bb:dd:
e1:40:ac:45:1e:b0:53:5f:60:6f:df:0e:5d:38:ce:a9:80:30:
49:f5:dc:a8:65:b3:98:50:ac:4b:73:3d:9c:9c:be:bf:aa:4a:
15:12:8b:17:10:ab:2b:03:33:75:50:d8:4f:46:2d:ad:78:07:
e6:18:3b:f4:ad:b2:f2:c7:ce:19:76:13:88:3a:71:33:5b:b1:
f4:8b:7d:73:11:f1:cd:d4:02:d4:d0:3a:9f:03:25:b2:94:61:
f0:83:a5:51:84:2a:5f:c1:f2:c5:f5:fd:0b:6f:9a:7a:18:a2:
53:d4:f8:31:4a:b7:5e:1c:67:e4:5a:fe:de:fa:75:00:20:db:
e4:51:23:e7:ca:ba:1a:f6:29:0c:ab:f9:d4:79:4d:03:de:c2:
c6:0a:38:64:e4:e2:44:99:46:4f:0f:e0:2a:77:f3:49:5e:e7:
4a:ea:3a:86:df:0c:c6:85:83:a1:77:91:b4:b9:89:a1:aa:48:
66:f4:ce:c7:4c:b3:17:67:a2:ca:e1:bf:e7:dd:8f:55:9c:16:
91:82:23:f9:6b:13:49:81:b0:0b:d0:e6:a4:aa:5c:ec:77:15:
fd:6f:b9:c2:dd:f2:ba:9d:f9:8d:5e:1a:60:05:c8:9f:00:f1:
f9:d5:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org