Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QroM2DmAo5SQWAiXoCpEXM-wkzY.roa
File: QroM2DmAo5SQWAiXoCpEXM-wkzY.roa (raw, json)
Hash identifier: pr54VGPKnzbZktX7geN3QJSB7DUJwX8V43Qf7Q4PGs0=
Subject key identifier: 42:BA:0C:D8:39:80:A3:94:90:58:08:97:A0:2A:44:5C:CF:B0:93:36
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 018BD6ACE82C86551B1915E52053AA312E90
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QroM2DmAo5SQWAiXoCpEXM-wkzY.roa
Signing time: Thu 16 Nov 2023 05:48:57 +0000
ROA not before: Thu 16 Nov 2023 05:48:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51517
IP address blocks: 185.219.6.0/24 maxlen: 24
2a10:e300::/32 maxlen: 32
2a10:e300:8411::/48 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:ac:e8:2c:86:55:1b:19:15:e5:20:53:aa:31:2e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Nov 16 05:48:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42ba0cd83980a39490580897a02a445ccfb09336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:48:7b:d7:a6:50:89:84:ea:5b:9c:e9:f7:4f:
f2:7f:cb:26:d1:04:23:95:da:33:46:4e:09:2f:10:
12:4e:ca:e8:2b:a7:69:18:07:1a:8a:bf:31:23:56:
4a:bf:7f:04:9e:ba:3e:af:c2:31:bc:06:83:d3:7c:
48:aa:eb:24:ef:1a:30:7c:ac:ed:43:e0:18:bb:0f:
03:fa:03:4e:ea:0f:02:fe:de:15:00:1c:39:bb:48:
61:43:1a:a4:11:2b:d3:00:f7:e3:88:86:7c:1c:56:
d9:36:c8:2f:d8:b8:06:46:cc:27:2d:ff:e3:b2:0e:
6b:74:e1:68:a1:3f:b1:a7:67:78:69:9e:4a:7b:5a:
fc:60:f2:fd:2e:e1:ba:4f:03:d7:03:1c:2a:88:b7:
3d:31:99:71:91:61:4d:bd:c9:89:2d:0b:95:e2:f3:
2b:8d:a5:83:d8:03:2f:57:bd:b2:c1:4f:60:86:ee:
67:e5:40:68:32:c8:76:4c:e6:9f:df:19:88:32:ff:
26:92:25:65:28:21:d8:9b:cd:89:5e:bf:8a:e3:36:
83:b2:e2:13:67:0d:06:03:44:68:06:d0:63:6f:f7:
68:61:36:60:d7:eb:57:33:a7:98:e5:47:45:92:37:
40:7b:f0:c9:bd:22:ba:e6:d2:40:16:79:c8:1c:9f:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BA:0C:D8:39:80:A3:94:90:58:08:97:A0:2A:44:5C:CF:B0:93:36
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QroM2DmAo5SQWAiXoCpEXM-wkzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.6.0/24
IPv6:
2a10:e300::/32
Signature Algorithm: sha256WithRSAEncryption
2d:61:4f:a6:4f:99:97:de:43:92:93:47:06:65:9d:7b:7c:86:
f0:b2:88:41:03:c1:b8:74:39:39:f3:83:de:6d:77:1c:dc:99:
c5:af:03:54:cc:49:93:25:b1:cd:67:bb:7f:00:de:cb:36:3c:
85:05:9b:08:90:43:c3:01:b1:e1:8e:6d:45:fb:66:d2:f9:86:
00:ed:68:55:77:00:ea:fe:d3:a7:6d:66:6d:aa:a9:f2:55:47:
03:ab:a5:f7:2a:a3:fc:e7:a3:bc:0f:7c:39:c4:84:0f:d7:4c:
81:c6:9d:80:04:78:f0:38:82:36:00:71:6b:2c:4c:5f:d4:8d:
7f:47:fd:52:b3:e4:5b:40:69:7a:01:ee:9a:29:7f:e7:f1:4c:
7f:60:e5:5e:55:ab:8b:d3:8e:e3:4d:96:5a:3a:88:25:79:2a:
b5:48:0d:48:b5:15:37:23:5b:87:71:f9:84:15:1f:85:35:61:
ad:57:b3:21:ea:e9:81:2f:0f:1d:e8:e8:fc:4d:c8:17:f2:3e:
76:81:0d:41:a4:25:0f:ec:63:26:24:2b:41:56:03:15:13:59:
05:c9:c1:1e:41:69:f5:1f:d1:c7:ad:cd:db:7e:d0:54:95:e3:
c5:5e:17:f9:b1:9d:26:68:c6:e0:bd:82:9b:a6:2e:8c:01:24:
58:ab:fc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:15 2024 by rpki-client on console-ams.rpki-client.org