Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/QTz4KRv_I9TMoSMXPxLJUXzX3TE.roa
File: QTz4KRv_I9TMoSMXPxLJUXzX3TE.roa (raw, json)
Hash identifier: Y9RJtAPfFk8BoMcen9FY0IuhDHPPu9fwZZoh8z9qQ/g=
Subject key identifier: 41:3C:F8:29:1B:FF:23:D4:CC:A1:23:17:3F:12:C9:51:7C:D7:DD:31
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 018CC8705A969E9056E88EC68EDE107A84AF
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/QTz4KRv_I9TMoSMXPxLJUXzX3TE.roa
Signing time: Tue 02 Jan 2024 04:30:55 +0000
ROA not before: Tue 02 Jan 2024 04:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61055
IP address blocks: 185.10.73.0/24 maxlen: 24
185.10.72.0/24 maxlen: 24
185.10.75.0/24 maxlen: 24
185.10.74.0/24 maxlen: 24
2a02:dfc0:1::/48 maxlen: 48
2a02:dfc0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Feb 2024 03:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:5a:96:9e:90:56:e8:8e:c6:8e:de:10:7a:84:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Jan 2 04:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=413cf8291bff23d4cca123173f12c9517cd7dd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5f:2d:ca:23:5f:a8:1b:41:83:14:4a:5d:0d:
e1:b6:28:f3:d6:08:e8:29:53:d0:d6:42:e5:9c:5c:
ba:13:e7:ad:f0:8b:e6:fc:93:28:26:5f:0f:24:6e:
03:9d:f4:00:be:b1:a2:7b:f4:8f:91:9c:87:fa:4b:
55:5e:71:9e:eb:57:5d:77:b7:bd:0d:6d:ff:2a:64:
16:18:5d:8f:1a:d1:05:1b:d6:9a:0c:bd:70:04:9a:
f5:18:69:f5:a1:fa:df:80:ef:9f:13:60:d6:82:47:
6f:73:bb:ed:70:ef:97:1a:4b:c0:ba:44:52:70:13:
10:9c:5e:00:4d:0e:70:03:55:4e:de:a0:6b:bc:2f:
c6:0a:82:ff:b8:50:d9:ef:95:f6:f7:5a:05:de:61:
44:de:cd:28:40:90:0e:d0:83:99:03:32:41:af:c3:
8d:2c:75:05:ff:2d:e1:1f:ec:26:1c:ec:98:ec:93:
d2:4d:6a:0e:9e:6b:25:46:26:4b:d3:85:80:f1:cb:
fe:69:9e:14:08:27:d8:be:43:e9:8b:36:ad:a1:a9:
1d:51:00:f8:de:eb:8b:f5:5c:d6:17:26:8d:7a:11:
f6:c9:ff:bf:59:8c:f2:33:70:74:df:da:21:ec:f4:
61:6e:9c:85:bd:7e:4b:eb:1a:a0:b0:b2:fa:07:5c:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3C:F8:29:1B:FF:23:D4:CC:A1:23:17:3F:12:C9:51:7C:D7:DD:31
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/QTz4KRv_I9TMoSMXPxLJUXzX3TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.72.0/22
IPv6:
2a02:dfc0:1::-2a02:dfc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
04:82:e3:69:aa:34:26:52:f1:fa:f3:fe:3f:b8:9c:e1:2c:02:
4e:53:ca:dd:2a:41:e2:42:db:da:e7:c2:5c:e6:70:10:f5:99:
58:8d:c2:3d:1a:b8:b9:b1:19:48:64:b6:87:1f:1b:1e:21:f0:
ac:8f:19:1c:da:f4:a8:f4:43:15:0d:68:10:dd:30:d8:c4:9d:
a2:e8:5e:a0:6c:a8:db:a3:43:02:5d:dc:52:3f:00:28:2f:d2:
d4:03:a9:4e:57:c8:73:6f:d5:86:5e:00:e2:7b:e7:9f:b2:76:
12:05:77:92:c9:19:d9:01:13:10:0f:07:7f:b6:19:1f:44:bf:
3b:24:11:b1:df:62:f1:a2:d9:88:31:7d:97:a4:b1:7b:2d:8f:
e5:fd:f1:8d:4b:c4:d6:2b:28:f8:18:89:50:33:8a:ac:89:80:
8e:d3:ba:e2:4c:77:dc:6b:02:76:73:ee:84:b2:e9:94:bb:26:
c0:60:f9:a4:16:ff:36:3e:50:8d:3f:55:0e:a5:74:b0:84:70:
47:24:9e:1d:64:8e:a7:fb:ec:83:6f:95:38:0a:49:87:eb:6d:
48:3e:fa:28:4a:06:75:e0:b1:2b:61:72:cb:93:77:47:a2:72:
e2:f4:f1:e4:98:45:54:cc:42:d4:96:bb:2d:32:5c:18:40:74:
16:b3:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:19 2024 by rpki-client on console-ams.rpki-client.org