Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/QNq5KxpAQJSiTd-S8P5ydf5Stx4.roa
File: QNq5KxpAQJSiTd-S8P5ydf5Stx4.roa (raw, json)
Hash identifier: An+7vjrpf5yOZD1X3uCh1vUzGJSifgiFndgbbo2ByQQ=
Subject key identifier: 40:DA:B9:2B:1A:40:40:94:A2:4D:DF:92:F0:FE:72:75:FE:52:B7:1E
Certificate issuer: /CN=a674015d509b5d4f396ea363369e9d74ffad7593
Certificate serial: 0185720320C5701A70F68AC323BBDF2F07D3
Authority key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/QNq5KxpAQJSiTd-S8P5ydf5Stx4.roa
Signing time: Mon 02 Jan 2023 10:24:45 +0000
ROA not before: Mon 02 Jan 2023 10:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200804
IP address blocks: 185.94.112.0/23 maxlen: 23
185.94.114.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:20:c5:70:1a:70:f6:8a:c3:23:bb:df:2f:07:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Validity
Not Before: Jan 2 10:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40dab92b1a404094a24ddf92f0fe7275fe52b71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:fc:ad:33:d2:76:2e:63:1f:d7:22:55:fa:
20:5b:ab:79:56:c6:04:29:15:c9:3c:fd:6c:4c:3e:
4d:7a:74:c5:11:22:c5:81:73:5e:52:c8:61:59:8d:
23:6a:13:3a:bb:9b:fe:21:8e:9c:fe:c8:16:61:2d:
0d:73:e6:93:60:c0:7f:f9:70:9d:b5:66:cc:0d:ce:
92:86:62:1f:5a:51:55:15:44:49:b5:6c:91:00:30:
73:c0:8d:51:37:1a:8a:95:f0:00:c7:4a:4e:e9:5d:
19:c4:b0:6b:47:32:9a:93:4d:88:1a:fd:b9:a4:02:
8e:9c:62:85:84:a1:0f:71:fe:db:90:51:07:51:95:
11:0a:fd:e4:63:d9:23:c1:73:ad:33:f8:92:97:cf:
c9:35:3f:8a:fd:7d:f5:60:d3:3f:eb:54:ed:ab:ec:
56:b0:28:6a:f3:c5:68:35:27:51:8a:ed:37:98:a3:
17:bf:69:17:2e:56:81:9b:ea:e4:17:ee:29:68:25:
91:b4:dc:1f:1f:51:26:d4:e2:e3:23:ce:1a:2d:02:
bd:05:0f:bf:06:d7:88:13:fe:32:45:c2:1a:0d:cb:
36:7d:f2:51:44:2c:b8:67:b6:71:b8:a1:48:c6:ec:
93:d5:ce:06:f3:8b:ff:d4:41:e9:4d:25:91:a6:27:
95:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:B9:2B:1A:40:40:94:A2:4D:DF:92:F0:FE:72:75:FE:52:B7:1E
X509v3 Authority Key Identifier:
keyid:A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/QNq5KxpAQJSiTd-S8P5ydf5Stx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.112.0/22
Signature Algorithm: sha256WithRSAEncryption
58:bf:c3:d0:58:ef:fa:e3:2e:40:24:f3:0b:53:81:4d:21:8e:
fa:0f:f2:e7:18:cc:58:ac:43:14:df:52:dc:93:ca:17:13:c7:
36:f9:82:76:bb:87:1a:9c:b4:d0:93:ba:20:32:c5:15:90:2d:
bd:38:02:81:d0:5a:01:bc:f6:08:cf:44:e1:f3:b5:88:9f:39:
86:94:43:08:43:5a:89:b0:71:57:4b:13:35:41:7e:24:3d:1c:
77:4b:56:a7:f4:51:a3:e4:ea:7b:1d:a3:9c:d2:69:a4:23:83:
36:1c:2d:bf:d4:57:7e:e5:e9:a7:69:fd:df:21:cc:45:1e:48:
2f:64:d0:33:66:7d:0a:b6:97:0e:b5:35:3d:64:0f:30:53:b4:
d6:42:95:cc:1f:db:df:0a:ec:85:05:57:d2:f8:1e:9f:0b:f3:
71:24:c8:66:8d:1e:61:49:35:f0:34:5f:5c:15:71:b6:20:4b:
e1:06:5b:97:08:61:91:e9:c3:92:2c:13:c8:81:95:40:40:23:
3f:f8:dd:f8:d0:20:8a:02:51:8e:fe:f7:2a:00:2b:e2:d5:0a:
d1:26:d0:29:7e:bc:e9:ea:bb:db:06:8a:21:5c:e2:96:e1:8e:
3a:36:6a:f2:ae:fc:32:91:53:f6:0e:ee:ad:82:ef:15:8e:17:
31:19:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:05 2024 by rpki-client on console-ams.rpki-client.org