Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/QQqyI_Rjn-F-UDEZXhlNVVuqxuw.roa
File: QQqyI_Rjn-F-UDEZXhlNVVuqxuw.roa (raw, json)
Hash identifier: QqScYEsUUFHF/Vy9obLzgXoDaQtaK+QZ9g908InqkAc=
Subject key identifier: 41:0A:B2:23:F4:63:9F:E1:7E:50:31:19:5E:19:4D:55:5B:AA:C6:EC
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 01856F0B4E2F5B09A769C9A48A478A9B4F8F
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/QQqyI_Rjn-F-UDEZXhlNVVuqxuw.roa
Signing time: Sun 01 Jan 2023 20:34:49 +0000
ROA not before: Sun 01 Jan 2023 20:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59862
IP address blocks: 176.223.92.0/22 maxlen: 22
188.215.20.0/22 maxlen: 22
188.215.20.0/24 maxlen: 24
93.119.20.0/24 maxlen: 24
93.119.20.0/23 maxlen: 23
188.215.22.0/24 maxlen: 24
93.119.22.0/24 maxlen: 24
188.215.21.0/24 maxlen: 24
93.119.21.0/24 maxlen: 24
188.215.23.0/24 maxlen: 24
85.204.172.0/22 maxlen: 22
85.204.172.0/24 maxlen: 24
85.204.173.0/24 maxlen: 24
85.204.175.0/24 maxlen: 24
85.204.174.0/24 maxlen: 24
185.63.88.0/24 maxlen: 24
185.63.88.0/22 maxlen: 22
176.223.88.0/22 maxlen: 22
176.223.88.0/21 maxlen: 21
185.63.90.0/24 maxlen: 24
185.63.89.0/24 maxlen: 24
185.63.91.0/24 maxlen: 24
153.92.176.0/22 maxlen: 22
153.92.177.0/24 maxlen: 24
153.92.176.0/24 maxlen: 24
153.92.178.0/24 maxlen: 24
153.92.179.0/24 maxlen: 24
2a03:a60::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:4e:2f:5b:09:a7:69:c9:a4:8a:47:8a:9b:4f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Jan 1 20:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=410ab223f4639fe17e5031195e194d555baac6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:eb:a0:60:55:c1:cd:d8:f4:fb:4d:d2:9c:
cd:b9:0f:88:04:d9:7c:f3:08:c9:9c:4c:7a:6e:e7:
c2:7a:30:a7:f7:a7:23:9f:c9:c2:b1:27:09:00:2a:
1e:ab:f2:2e:1c:b0:4d:34:f6:04:2c:e3:dc:22:db:
1f:76:ad:dc:41:c0:d9:97:c1:51:95:95:0a:50:89:
4f:16:d9:ce:4b:e1:2e:c9:d2:46:3d:36:48:87:c3:
82:fb:a9:db:f5:97:9b:78:ce:93:5c:46:ee:2e:3d:
55:ab:2b:3f:65:cb:09:0a:42:23:61:68:21:b7:4b:
ec:15:64:03:61:0a:4d:85:86:cb:f7:4a:87:21:30:
3c:bc:3a:6d:0e:40:62:79:dc:40:31:aa:7d:0d:d4:
b2:99:f2:4c:39:fd:29:7d:22:78:72:59:89:b0:97:
47:77:9b:95:fa:f3:bc:0f:ea:57:84:39:81:38:99:
f1:5b:07:1c:e6:e7:a2:b5:a3:85:6c:f3:75:50:ef:
28:61:17:aa:95:53:d0:bc:bd:47:d3:82:f8:8d:27:
c7:8b:15:9d:48:63:d4:c9:78:e6:a1:9d:f4:71:bb:
31:30:48:d6:4e:2b:d6:38:b0:f9:25:d1:2a:64:ca:
5f:de:07:2c:20:29:3b:b2:d9:62:93:71:64:a9:c7:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0A:B2:23:F4:63:9F:E1:7E:50:31:19:5E:19:4D:55:5B:AA:C6:EC
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/QQqyI_Rjn-F-UDEZXhlNVVuqxuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.172.0/22
93.119.20.0-93.119.22.255
153.92.176.0/22
176.223.88.0/21
185.63.88.0/22
188.215.20.0/22
IPv6:
2a03:a60::/32
Signature Algorithm: sha256WithRSAEncryption
5b:71:3d:c7:fb:85:39:12:d8:15:fd:3c:4c:f0:ba:c5:85:cd:
6e:df:b2:14:04:1e:e9:2d:d5:2a:ef:91:78:5c:bb:98:85:ff:
1b:99:8b:84:99:7b:20:b0:88:4c:a0:4c:5f:4f:fb:f8:fa:a2:
6d:2f:8d:c3:d6:a8:8c:eb:f8:2e:4a:85:32:d8:7a:a2:61:cf:
8b:80:68:26:93:0d:88:bf:21:84:96:2b:59:47:71:c8:fd:ae:
c8:70:74:c4:93:9a:67:6f:64:5b:c8:e6:1f:9d:a7:49:61:43:
09:6a:0c:a5:2a:dd:0e:38:f4:9e:41:af:5d:41:78:f0:5c:6a:
04:a8:e4:24:3e:b6:2d:f5:91:08:b7:e6:42:4d:46:c1:e6:f4:
c2:5d:ab:b1:08:4c:39:08:e3:1a:08:bf:c6:12:d3:f1:4a:4a:
31:79:5f:90:64:b5:70:d6:d8:de:7c:cc:5f:01:38:14:3f:1f:
e8:3a:ce:6f:10:24:7e:e3:b2:4f:ee:a3:e2:e0:6d:90:f2:e8:
58:22:d6:a0:2b:51:5f:e1:bf:dd:f3:de:c0:f5:21:52:0e:72:
c2:73:d5:7f:80:44:01:58:9e:9f:07:c8:4a:70:c5:19:b9:6c:
75:c4:c7:0b:43:9c:e9:80:5a:54:8c:1d:94:08:cb:c9:52:31:
63:be:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:39 2024 by rpki-client on console-fra.rpki-client.org