Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QWtpzpVUs1L_gS110EEOVNK-l2w.roa
File: QWtpzpVUs1L_gS110EEOVNK-l2w.roa (raw, json)
Hash identifier: faGAvgNxOPJfwyNVtEKj1O1IeT2bWdPF5ypS/fpBQo0=
Subject key identifier: 41:6B:69:CE:95:54:B3:52:FF:81:2D:75:D0:41:0E:54:D2:BE:97:6C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192592E721BBDB43EEE87E09A0AD1A307AF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QWtpzpVUs1L_gS110EEOVNK-l2w.roa
Signing time: Fri 04 Oct 2024 20:17:48 +0000
ROA not before: Fri 04 Oct 2024 20:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 85.204.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 19:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:59:2e:72:1b:bd:b4:3e:ee:87:e0:9a:0a:d1:a3:07:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 4 20:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=416b69ce9554b352ff812d75d0410e54d2be976c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:95:e4:d1:78:c6:cf:fb:05:ec:25:68:4a:
7c:87:c9:28:fe:c0:d2:1f:a0:96:29:4d:03:dc:c6:
4c:d0:17:67:8d:de:06:2c:b2:61:b7:47:e4:29:3c:
60:23:bd:72:17:c9:59:70:7c:77:26:43:ce:8b:76:
85:a8:ee:ea:40:ea:a6:08:0d:22:2e:fd:96:8c:dc:
62:a7:a8:27:3b:f2:a0:0c:42:c7:86:dc:cc:aa:e1:
0d:6f:44:30:37:a2:ce:08:30:f9:77:08:6a:13:7d:
24:f3:18:fe:60:80:6e:33:78:76:2b:bc:70:0c:d9:
72:2f:55:dc:08:5f:32:9c:6f:d9:36:5c:00:ef:ea:
7d:c5:12:fb:07:ce:e3:8a:bd:ad:8e:4a:0f:08:36:
6d:c1:dd:71:a5:b4:5e:0b:66:60:ed:b3:79:a5:43:
95:9d:47:57:6d:13:8a:f3:96:90:0a:8b:f4:3f:f4:
21:30:48:6d:31:db:9a:6f:e1:74:d0:2a:85:71:b1:
89:62:b5:7e:0e:0d:1a:f4:ab:cc:48:ff:52:af:51:
c6:78:a1:42:6e:4a:38:5b:35:00:42:9c:2b:05:e9:
10:c3:1d:85:53:ad:11:ec:20:7d:c4:0b:72:50:69:
06:68:a7:3b:ea:b4:1e:fc:eb:cd:ab:32:75:38:df:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:69:CE:95:54:B3:52:FF:81:2D:75:D0:41:0E:54:D2:BE:97:6C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QWtpzpVUs1L_gS110EEOVNK-l2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.22.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d1:a6:bc:ef:8e:d4:e2:51:72:05:7b:8d:82:ee:f1:a9:a1:
60:a5:99:13:b6:75:d1:1d:9e:18:8e:f9:fd:43:8e:0c:23:14:
d2:eb:e7:26:4e:d0:ee:53:d7:bb:b1:5c:54:13:be:e9:a1:4b:
c9:fd:47:cc:c5:96:c8:af:76:ea:6f:8e:96:f4:fc:c8:9d:6b:
d4:f2:2b:35:10:56:b1:cf:ad:74:20:99:86:61:b2:f1:ef:98:
ec:5f:04:a9:5f:e4:94:a3:dc:f9:b0:2c:76:db:ea:71:84:45:
7b:f9:e0:94:4a:bb:db:38:70:10:33:6a:b5:f8:d0:31:15:7d:
fc:15:13:3e:11:85:f0:bc:cb:c8:b9:bf:64:07:a3:5e:b5:4f:
f1:db:8f:98:4e:58:70:c6:c9:b2:d3:4b:6b:df:50:20:96:a9:
0a:43:8f:2b:83:2a:9f:44:5d:56:0b:a5:d3:a7:f8:6c:4f:59:
92:76:4a:6e:32:82:b3:2a:e3:1d:8c:66:a4:ca:49:39:2d:fc:
65:a6:12:c6:d1:ec:1a:ae:76:1d:17:d3:99:6d:8e:c0:66:c8:
4e:2f:86:79:ec:5d:6c:36:9e:ad:4e:ca:3d:29:a6:e9:ca:ea:
ad:71:bf:b9:79:b3:41:6c:55:90:42:fb:f3:d3:f3:0b:d2:6a:
db:7b:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 20:57:39 2024 by rpki-client on console-fra.rpki-client.org