Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/kqryz9OTFvhOTsXZ76pCjLnjIuo.roa
File: kqryz9OTFvhOTsXZ76pCjLnjIuo.roa (raw, json)
Hash identifier: QGecq6MM/YHkr1UVN7DvbMySws6Ognq+nYBcFC8TjNw=
Subject key identifier: 92:AA:F2:CF:D3:93:16:F8:4E:4E:C5:D9:EF:AA:42:8C:B9:E3:22:EA
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 018B49C8273BA8FBDBC3374ABE58CD615F94
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/kqryz9OTFvhOTsXZ76pCjLnjIuo.roa
Signing time: Thu 19 Oct 2023 21:12:15 +0000
ROA not before: Thu 19 Oct 2023 21:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58010
IP address blocks: 185.71.124.0/24 maxlen: 24
185.71.125.0/24 maxlen: 24
185.71.124.128/25 maxlen: 25
185.71.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:c8:27:3b:a8:fb:db:c3:37:4a:be:58:cd:61:5f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Oct 19 21:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92aaf2cfd39316f84e4ec5d9efaa428cb9e322ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:36:b3:ea:28:b9:ab:61:49:93:97:cb:33:
5c:98:4c:62:04:9e:6d:b3:f3:4b:40:7b:3f:a1:08:
94:b1:c2:27:ff:9a:dd:51:2d:d5:a3:c2:e8:03:c6:
93:0f:d3:fe:87:0e:6e:5b:35:fa:f2:b9:68:42:b9:
fe:c9:64:11:8d:09:01:e2:e7:6f:b7:f7:aa:27:1b:
de:db:6c:64:34:00:c0:e0:25:03:4b:88:ac:c6:a6:
57:47:06:36:1c:c6:58:e1:26:77:76:27:46:3a:3d:
4f:64:87:bc:56:32:60:be:0a:68:3c:17:d3:55:4a:
92:c9:c4:f1:ef:e3:e7:2b:54:cd:e8:d4:20:ce:2b:
5a:5a:a0:1f:03:61:c9:76:55:e2:f2:bb:58:3f:4e:
a5:53:2d:a7:5d:29:11:7c:76:7a:2b:9f:54:53:d6:
68:ee:e4:7b:37:f7:c0:1d:24:ce:34:9a:a4:44:13:
7b:21:76:5b:5b:26:24:fb:1e:d9:4a:78:02:b6:2c:
a2:00:3f:71:94:ed:f9:46:52:ca:d9:ce:7a:90:dc:
37:6e:ed:0e:39:3b:4d:6c:b2:44:7b:82:f9:01:bd:
2c:c4:60:60:8f:c7:0a:51:5c:8f:91:15:1c:58:48:
a5:4f:24:f7:47:26:27:5c:46:10:a5:08:6e:1c:f3:
d3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AA:F2:CF:D3:93:16:F8:4E:4E:C5:D9:EF:AA:42:8C:B9:E3:22:EA
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/kqryz9OTFvhOTsXZ76pCjLnjIuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.124.0-185.71.126.255
Signature Algorithm: sha256WithRSAEncryption
64:33:ab:ca:01:f0:81:10:72:93:8a:04:4b:f6:a7:b1:ff:36:
31:70:e8:55:59:0d:72:f7:0a:3a:08:57:c9:70:64:82:c5:f6:
e5:71:3f:cc:4f:ad:bc:7c:17:74:81:30:81:0f:a3:b3:d9:a4:
2d:99:ad:36:5f:d7:0f:f2:91:04:d1:54:ae:ca:6f:b8:6c:80:
08:56:b5:42:fd:b5:87:90:33:7c:b7:9f:a2:e6:50:d8:16:aa:
0a:a6:d5:ae:5c:53:9a:7b:39:87:91:9b:51:eb:e8:b0:2a:94:
c0:61:b3:bb:6c:a9:fa:aa:a6:8f:ce:70:7d:1a:56:8d:1e:ec:
15:69:8e:e1:ea:e6:1a:84:22:b3:9f:9f:b8:19:ab:11:51:04:
83:ff:ad:4d:0a:f5:7e:2e:c6:49:9e:38:29:27:c7:04:e5:69:
34:3a:ff:8d:9d:97:6b:b8:44:a7:8d:56:1c:b3:a4:7e:c3:76:
06:f0:41:0a:7b:f0:14:7c:eb:11:db:7c:61:a7:c2:8b:40:6e:
ab:fb:99:f4:3d:e2:18:81:d4:f1:8a:a3:6a:c0:c3:0f:b7:a9:
5d:25:6e:bd:88:06:89:f1:56:d8:48:77:4c:74:1e:7c:93:32:
66:04:dc:a2:74:e5:b0:4b:06:d2:1c:ae:85:e9:88:bd:3c:c3:
97:ca:10:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 10:06:41 2023 by rpki-client on console-fra.rpki-client.org