Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/qRjJfr8aW21KnRgZCvzXZg-q5Z4.roa
File: qRjJfr8aW21KnRgZCvzXZg-q5Z4.roa (raw, json)
Hash identifier: P99Muy9UdjsnFlh4cb8yn5AXRg3RnzcX8wAEnyQqZZw=
Subject key identifier: A9:18:C9:7E:BF:1A:5B:6D:4A:9D:18:19:0A:FC:D7:66:0F:AA:E5:9E
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 018A5FF14F1D2C8047DBBC915D7592FF346C
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/qRjJfr8aW21KnRgZCvzXZg-q5Z4.roa
Signing time: Mon 04 Sep 2023 11:26:04 +0000
ROA not before: Mon 04 Sep 2023 11:26:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8376
IP address blocks: 212.34.0.0/19 maxlen: 24
185.98.224.0/22 maxlen: 24
213.139.32.0/19 maxlen: 24
2a00:18d8::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Sep 2023 05:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:f1:4f:1d:2c:80:47:db:bc:91:5d:75:92:ff:34:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Sep 4 11:26:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a918c97ebf1a5b6d4a9d18190afcd7660faae59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:31:0b:eb:bd:b8:c0:24:c6:41:32:4e:c9:
fb:ee:20:48:a9:e7:80:0d:4c:97:11:cd:f2:af:62:
40:b1:02:da:a2:12:51:66:40:f7:ea:dd:e9:7d:3a:
ce:37:7c:0c:23:42:b6:ba:a4:dc:23:b6:dd:2e:58:
16:ed:50:39:4b:ba:f9:63:3d:08:89:fd:6d:4f:9c:
86:00:83:b1:32:f2:c8:5d:3e:78:31:9b:55:7d:24:
07:b5:d9:11:f2:2e:bd:77:d0:4e:a6:d0:c3:4f:f9:
95:9f:6e:76:4d:bc:14:24:a9:ae:a2:4f:51:08:84:
8a:83:f7:0c:14:22:2b:4b:a9:49:55:00:9f:14:fc:
88:e2:32:6b:82:07:46:a5:dc:a6:1c:ba:93:54:dd:
48:79:85:86:16:62:39:1e:83:34:25:07:c0:6a:68:
e6:90:23:84:78:f3:b8:fc:36:14:b1:a8:0e:cd:bf:
f0:f7:2c:b7:24:e8:85:45:7b:6d:11:d4:8f:ef:25:
9d:d3:47:bc:36:c7:ed:94:1b:82:6c:36:ee:c4:3b:
e3:fb:40:ba:5c:66:28:e7:9f:d1:19:3d:e7:da:9a:
42:1c:95:36:a3:87:28:8c:fe:04:94:ae:44:f2:7c:
24:32:67:a9:48:e2:e0:f8:06:5b:83:9e:f9:08:10:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:18:C9:7E:BF:1A:5B:6D:4A:9D:18:19:0A:FC:D7:66:0F:AA:E5:9E
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/qRjJfr8aW21KnRgZCvzXZg-q5Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.224.0/22
212.34.0.0/19
213.139.32.0/19
IPv6:
2a00:18d8::/32
Signature Algorithm: sha256WithRSAEncryption
22:03:17:43:cc:56:55:41:6f:07:54:ba:67:25:9d:2e:76:f0:
13:a7:86:d8:b1:d0:55:82:21:e8:33:fb:b3:7b:27:7b:6a:7c:
d2:aa:1f:ad:72:8f:ae:c1:8b:40:a5:8f:82:b0:0a:78:8c:e1:
52:c7:07:9e:29:41:2e:c9:02:82:97:70:80:49:87:e0:89:b2:
90:69:97:69:75:bb:10:d4:db:12:48:4e:75:98:87:68:e2:cc:
04:12:56:9b:7d:93:a3:34:76:5f:e9:09:86:94:dc:b9:fd:59:
82:67:9a:0b:c9:f8:15:75:4a:05:22:86:2e:1d:54:89:7b:27:
af:47:19:fc:2e:e1:c7:f3:1a:3f:9b:27:5c:42:a2:eb:80:a3:
dc:81:c5:6e:f2:a3:3a:4f:6d:4f:40:6b:29:cf:4c:25:31:22:
26:2a:46:79:a2:d9:1d:5f:17:db:49:67:66:ac:3d:c3:7c:5b:
e4:45:8c:2d:a2:ae:8e:7d:65:b3:ac:c5:4f:3e:6c:9e:d7:58:
1b:10:15:fa:47:ec:62:57:d1:8b:10:a9:07:3b:fd:11:81:b4:
60:f5:03:99:74:78:29:1b:27:ec:1c:10:f7:0f:56:a5:27:39:
fd:03:fe:8f:98:6a:da:69:19:96:f2:36:6c:c1:e3:d2:63:d5:
13:1a:60:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:49 2024 by rpki-client on console-fra.rpki-client.org