Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/QVdvJFtDhkqws7kG7xRGAzY5nLg.roa
File: QVdvJFtDhkqws7kG7xRGAzY5nLg.roa (raw, json)
Hash identifier: y+HgsukwiETU2xHk5A7tbdGh//JBwTj1J7vetz1y4I8=
Subject key identifier: 41:57:6F:24:5B:43:86:4A:B0:B3:B9:06:EF:14:46:03:36:39:9C:B8
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 0185703965208DEA503071B4E274EAC5EEE0
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/QVdvJFtDhkqws7kG7xRGAzY5nLg.roa
Signing time: Mon 02 Jan 2023 02:04:47 +0000
ROA not before: Mon 02 Jan 2023 02:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8752
IP address blocks: 95.182.32.0/19 maxlen: 19
185.35.168.0/22 maxlen: 22
46.38.96.0/19 maxlen: 19
212.46.0.0/19 maxlen: 19
2a03:3200::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:65:20:8d:ea:50:30:71:b4:e2:74:ea:c5:ee:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Jan 2 02:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41576f245b43864ab0b3b906ef14460336399cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:e7:76:c7:6f:15:11:82:4b:d0:50:18:60:
03:28:4a:30:0a:09:d3:44:66:a5:54:e0:8b:2b:3e:
18:65:24:9b:54:eb:bd:37:66:6f:89:3b:22:46:6f:
af:a8:13:53:28:af:65:4e:71:cd:63:fc:f8:58:02:
db:2f:d0:23:a6:3c:6c:2c:d6:64:01:ee:48:01:fd:
e3:50:99:f3:b3:a5:8b:98:1f:f1:9c:ea:a0:e0:bd:
64:bf:0b:b3:3a:ce:c9:b0:65:58:21:90:69:5f:51:
fd:b8:df:56:0f:c7:ef:9c:a2:04:de:e6:eb:87:20:
e9:ce:56:73:6d:ae:61:dd:a1:2e:be:80:5d:95:71:
8a:47:f1:30:11:40:29:63:bd:6b:60:8e:44:52:5e:
0b:3d:87:f9:d5:f6:f9:24:18:68:30:a9:56:4e:b8:
60:84:65:37:7a:e3:4f:01:3c:2d:9e:b9:ec:11:cd:
f1:2b:c0:0b:8d:2a:4a:21:b0:2a:9f:16:e0:92:7e:
ee:c1:12:d9:79:da:89:d8:5d:e6:16:dd:8c:56:1e:
fc:b9:54:4f:5f:64:9b:df:cc:cc:41:28:c3:a7:b7:
0c:af:09:74:db:9c:7f:dc:e3:4b:6b:15:3e:ce:aa:
ad:8a:d6:90:62:ce:39:23:89:76:7f:16:39:71:bd:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:6F:24:5B:43:86:4A:B0:B3:B9:06:EF:14:46:03:36:39:9C:B8
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/QVdvJFtDhkqws7kG7xRGAzY5nLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.96.0/19
95.182.32.0/19
185.35.168.0/22
212.46.0.0/19
IPv6:
2a03:3200::/32
Signature Algorithm: sha256WithRSAEncryption
27:ae:48:9f:3b:8b:e6:1b:e5:43:a7:f0:c4:dd:7b:86:ca:0a:
17:71:75:d5:6e:aa:af:9f:e7:ac:61:49:60:15:16:78:9f:65:
49:a9:ba:c4:86:c2:b6:6b:e8:a7:71:9d:58:c0:40:b6:9f:7b:
92:05:dc:2a:44:21:17:a2:9a:66:32:23:04:e0:a8:be:05:51:
ee:d4:97:4e:0c:dd:d2:f7:13:94:14:44:93:31:49:ca:21:79:
54:b5:17:e8:26:64:89:15:89:8b:a9:c1:97:51:49:4b:cf:d1:
ee:f5:43:10:39:e1:31:68:8c:20:0b:7a:e7:73:f3:b3:d9:6c:
3b:3b:c7:e8:cc:94:a6:81:a9:0d:bb:1a:2e:58:08:d4:6f:43:
a5:b7:04:e6:e9:6c:c9:f4:38:96:5a:f6:93:dc:15:d1:8b:14:
99:c8:9b:6c:65:c1:6d:c1:da:fa:c8:63:f5:83:50:c5:3f:ae:
ba:5e:be:d0:80:ec:ea:34:08:a3:ab:bb:b7:bd:b9:0a:e0:81:
3c:7e:5e:c2:a4:3d:55:6a:a7:3e:ec:9f:29:03:a5:0b:36:00:
d7:78:e4:d0:f7:cc:7d:31:71:e6:60:2f:15:1a:38:45:79:99:
b3:cb:fa:d9:05:3e:3e:e6:65:12:11:6d:17:e0:de:6e:1f:29:
49:65:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:57 2024 by rpki-client on console-ams.rpki-client.org