Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/1-QwINtQfhC0ilM-OCvY0lDKZGqU.roa
File: 1-QwINtQfhC0ilM-OCvY0lDKZGqU.roa (raw, json)
Hash identifier: qK/R6Xryh5Nhjh6zQlKfxLUFdqzZKFoe6BDtm9tvee0=
Subject key identifier: F9:0C:08:36:D4:1F:84:2D:22:94:CF:8E:0A:F6:34:94:32:99:1A:A5
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 01857246C89115BBDB195BA5490E3A21FBC2
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/1-QwINtQfhC0ilM-OCvY0lDKZGqU.roa
Signing time: Mon 02 Jan 2023 11:38:39 +0000
ROA not before: Mon 02 Jan 2023 11:38:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199527
IP address blocks: 85.208.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c8:91:15:bb:db:19:5b:a5:49:0e:3a:21:fb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 11:38:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f90c0836d41f842d2294cf8e0af6349432991aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:aa:22:dd:ce:03:de:ae:77:e0:a4:05:a7:
3e:7a:84:26:36:11:de:eb:25:8b:69:3f:e4:0e:d9:
4c:a0:a0:99:5c:4b:63:e3:0c:82:b3:c9:0f:3a:c0:
b1:4c:33:a0:0a:8e:97:ea:b7:5e:2b:2e:c5:8b:98:
22:20:a2:40:8d:40:c0:ea:9d:62:5f:fe:0c:c3:a2:
42:59:a7:5a:24:72:fc:22:52:44:6c:27:86:0e:52:
63:86:6e:03:b4:26:fc:af:43:43:4c:3a:be:4a:d2:
29:bd:71:8a:34:f2:4d:e6:a6:67:8a:29:14:e0:ca:
f5:da:24:6c:0d:77:11:01:1e:df:5b:6b:08:b5:d9:
6a:d1:89:fe:7f:8e:45:69:a0:00:9f:0e:a1:7a:fe:
18:c9:a9:7a:53:13:f5:cd:34:2f:8d:3b:a5:0e:0f:
7b:ec:ed:78:04:88:08:26:84:38:82:a4:6a:e5:27:
09:cc:e5:1e:fe:11:81:29:3a:d2:de:fd:e5:c6:5b:
cb:fa:db:ad:fc:4c:b7:5d:03:54:df:33:d6:5a:ce:
70:10:25:3e:ff:3f:80:a2:36:96:c1:30:24:68:22:
91:25:27:54:3f:30:35:33:c0:d0:3c:c1:c4:b3:a0:
37:a9:05:f4:b8:4d:27:dc:cf:7e:3a:93:78:86:c9:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:08:36:D4:1F:84:2D:22:94:CF:8E:0A:F6:34:94:32:99:1A:A5
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/1-QwINtQfhC0ilM-OCvY0lDKZGqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.224.0/22
Signature Algorithm: sha256WithRSAEncryption
70:bc:37:84:15:ed:5e:7d:4f:6f:89:3d:2b:09:e3:04:bc:85:
22:d7:d3:75:6a:3c:bc:11:60:72:19:c0:cc:9d:70:18:b1:91:
bd:6c:52:64:e7:de:df:d7:6c:f4:dd:27:21:6b:a7:59:93:33:
7c:80:05:c5:ec:47:ec:c5:58:12:09:16:25:cd:b0:60:59:79:
e7:ea:82:cd:90:e3:7b:1a:f0:24:e4:90:60:c3:82:2b:ff:cc:
af:45:5b:74:67:fd:aa:5c:a2:3e:fd:6d:dc:6e:57:dd:60:9e:
81:53:13:7a:96:25:f1:64:55:d6:aa:ec:c3:20:5a:d7:d7:b6:
d9:6a:f6:c2:68:85:ba:d6:52:2c:8b:a2:85:34:df:66:e1:d3:
66:ed:d2:4f:8f:6b:a0:ff:47:c6:4f:5e:4e:1e:b6:8a:23:b8:
49:dc:49:05:f2:73:b8:47:95:c7:39:35:e2:3d:2c:ef:50:c8:
24:98:8b:36:24:4a:b0:3a:1d:2d:a3:da:7d:9c:ce:f0:a1:58:
1e:da:ff:58:05:36:cf:19:1c:05:42:09:d3:7b:f9:63:b1:0c:
6d:3c:f4:a3:cc:6a:a1:62:d2:44:b5:be:22:99:38:70:24:1a:
62:7b:01:d2:9c:10:84:f2:ae:3b:92:75:dc:02:0f:8a:22:a6:
a1:a9:8a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:56 2024 by rpki-client on console-fra.rpki-client.org