Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/qBOk2BzRKdjcDab4gi71yihzxCo.roa
File: qBOk2BzRKdjcDab4gi71yihzxCo.roa (raw, json)
Hash identifier: VQNjELlQNPtvmx1Bo47vOh2v3IiZqhT8zsin9dxN2o0=
Subject key identifier: A8:13:A4:D8:1C:D1:29:D8:DC:0D:A6:F8:82:2E:F5:CA:28:73:C4:2A
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 01857230FF75982666339B0824112CFC67D0
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/qBOk2BzRKdjcDab4gi71yihzxCo.roa
Signing time: Mon 02 Jan 2023 11:14:51 +0000
ROA not before: Mon 02 Jan 2023 11:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42687
IP address blocks: 185.182.168.0/22 maxlen: 22
185.182.170.0/23 maxlen: 23
185.219.242.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:ff:75:98:26:66:33:9b:08:24:11:2c:fc:67:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Jan 2 11:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a813a4d81cd129d8dc0da6f8822ef5ca2873c42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:6b:05:54:59:db:f5:1d:ef:3d:a4:5c:8d:
b9:02:93:ef:5b:9b:8a:89:2d:e3:db:5c:52:ed:05:
8f:27:eb:46:cf:51:40:e4:a6:ac:f3:3e:e7:d5:4c:
8a:e0:78:53:bd:21:b2:55:69:bd:18:50:40:d5:73:
1f:3b:6b:d4:5a:c6:b5:dd:35:71:d4:bc:59:75:13:
85:e6:38:b1:53:97:0b:f1:b6:f4:52:b8:07:5e:5f:
a9:6a:ec:86:47:be:4b:ca:14:d0:31:b5:e6:54:2b:
aa:08:61:f7:6e:4e:00:71:e0:54:07:a0:2a:bb:20:
05:04:43:29:44:46:02:a6:50:82:f0:b3:d9:2d:69:
37:77:67:8f:da:d9:ea:28:13:57:15:6b:d6:6e:d1:
8f:c4:62:20:be:39:30:db:83:f6:52:4a:74:89:ba:
e0:f7:04:7f:50:9a:6f:a5:d2:55:e6:27:32:ad:d5:
81:b4:3b:11:55:b0:63:38:96:42:17:22:19:eb:95:
0f:06:1f:eb:a4:43:de:7e:3e:c2:4d:8d:e0:3e:b6:
f0:4d:17:e0:0a:a4:95:2b:9e:04:8c:72:cf:0e:e3:
f0:02:68:bb:d1:e1:81:a7:04:00:50:fe:92:15:65:
a7:c8:74:a1:1d:44:5e:dc:2d:b4:1d:96:e3:45:96:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:13:A4:D8:1C:D1:29:D8:DC:0D:A6:F8:82:2E:F5:CA:28:73:C4:2A
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/qBOk2BzRKdjcDab4gi71yihzxCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.168.0/22
185.219.242.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:a7:8c:d2:95:68:6a:ba:fc:69:93:5d:3a:d0:a4:ae:63:9e:
85:ef:8c:d8:06:7e:f3:25:b3:b1:a9:57:a3:98:71:01:74:98:
db:25:93:cf:12:cb:90:1b:38:a0:3f:a5:f2:17:31:4e:71:39:
9a:11:97:02:3c:67:56:0a:d6:04:2c:bb:53:84:c6:bd:57:c7:
da:28:87:30:26:e1:17:43:92:29:13:4a:b7:ad:6c:c5:d5:61:
0f:39:0c:8e:26:83:ee:09:65:d7:c2:88:27:f0:2f:a9:fe:e3:
27:ac:95:27:5b:eb:0b:a8:7e:db:e4:d0:4e:47:5c:80:2d:72:
6b:5e:74:79:ad:c4:68:44:3e:70:98:fb:61:05:f5:b3:5b:d8:
01:c0:69:6f:45:75:69:c3:48:34:c1:1c:ac:95:d6:bb:8b:f2:
8f:14:8a:22:3c:b4:3c:82:18:ed:1b:5c:cb:a0:d3:4c:93:bc:
56:22:d0:b6:cf:30:72:f5:d4:8f:6c:84:c0:ae:ab:de:e2:a3:
de:28:d4:d3:15:3d:ec:f7:05:89:32:72:bc:38:bd:8b:6f:ad:
21:17:93:bd:a3:9e:53:a6:d9:36:8b:a5:56:26:06:1b:53:1c:
56:a0:90:3e:97:e0:4d:59:94:3c:22:f4:05:2c:d0:42:13:04:
15:78:7d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:23 2024 by rpki-client on console-ams.rpki-client.org