Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qMG_dELWUZIYQtVnWcb1CHMIgN4.roa
File: qMG_dELWUZIYQtVnWcb1CHMIgN4.roa (raw, json)
Hash identifier: WgRPXb2ffRbx9k3rQ4zSAHfTsXgHWy5FT02yq5VVEPU=
Subject key identifier: A8:C1:BF:74:42:D6:51:92:18:42:D5:67:59:C6:F5:08:73:08:80:DE
Certificate issuer: /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial: 018B3D09FC3732ABCC5E6D3995C2548792E0
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qMG_dELWUZIYQtVnWcb1CHMIgN4.roa
Signing time: Tue 17 Oct 2023 09:49:06 +0000
ROA not before: Tue 17 Oct 2023 09:49:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48846
IP address blocks: 85.8.180.0/23 maxlen: 24
93.191.136.0/21 maxlen: 24
87.253.224.0/21 maxlen: 24
185.190.111.0/24 maxlen: 24
185.76.212.0/22 maxlen: 24
2a05:5c80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:09:fc:37:32:ab:cc:5e:6d:39:95:c2:54:87:92:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Validity
Not Before: Oct 17 09:49:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8c1bf7442d651921842d56759c6f508730880de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:17:b5:55:70:5d:0f:f3:b7:5e:b3:01:bf:
1e:e6:f9:96:3c:cc:1f:ec:88:ac:8f:14:c9:78:22:
d2:fc:7c:eb:11:c8:e1:a7:30:dd:f9:58:68:e9:6c:
1b:aa:eb:b4:70:20:a7:6b:64:8b:8c:2e:f5:54:f7:
15:14:96:96:2d:2f:2f:4c:9e:8e:4d:2f:a1:60:c6:
9b:d7:b3:bd:a9:92:76:d9:ff:6a:76:b6:2d:a6:39:
7f:28:50:e5:46:9e:e2:db:be:e2:fc:7c:8b:49:24:
41:94:c3:d6:fe:cd:c5:df:d8:1c:6f:10:01:e3:27:
c2:61:13:79:1e:c4:bb:f2:78:0c:8e:15:1e:59:82:
26:50:4e:6e:87:9d:da:91:fa:52:f6:e8:01:f7:85:
4e:57:31:ef:2d:27:a8:77:04:f8:2f:db:99:f4:97:
ac:c8:e8:7d:23:fe:39:e6:72:18:52:8b:75:05:12:
f3:62:f6:dd:5f:04:04:6d:42:d6:33:93:6b:74:0d:
fc:76:e3:94:25:a4:92:1a:4f:d3:2c:a3:cc:e9:96:
e3:bb:c6:aa:9a:e7:a6:7f:41:e8:0c:05:a7:a1:49:
93:0a:9c:ff:09:72:b1:34:e2:41:92:8d:f9:12:2d:
b3:76:a4:ab:86:d0:d1:db:be:ea:5f:19:42:42:d9:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C1:BF:74:42:D6:51:92:18:42:D5:67:59:C6:F5:08:73:08:80:DE
X509v3 Authority Key Identifier:
keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qMG_dELWUZIYQtVnWcb1CHMIgN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.180.0/23
87.253.224.0/21
93.191.136.0/21
185.76.212.0/22
185.190.111.0/24
IPv6:
2a05:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
54:cf:b3:5d:2a:62:33:0d:65:ff:5f:c5:ca:e8:5d:2e:85:e3:
17:d8:0e:fc:ed:8b:2f:2d:4e:30:29:bc:0e:eb:e2:77:b7:de:
be:00:34:cd:9f:7a:d9:d5:5c:93:2f:ba:48:83:0b:85:09:ea:
ee:76:a7:a1:93:2b:5b:cf:3b:5c:53:f1:4d:d4:e9:cb:ac:41:
e1:aa:02:e6:37:6f:74:65:3e:4b:06:d2:24:f9:e1:c6:e6:89:
39:75:27:e1:77:e5:f9:4d:fe:41:6c:98:08:6b:a2:1d:67:92:
67:9e:0c:66:dc:f1:d8:8f:cf:d8:07:8d:b6:9a:85:2b:10:ba:
cf:1a:94:6c:5e:fe:92:57:a0:d9:87:6f:c6:52:e0:28:2f:e3:
e8:de:ed:a6:0a:18:da:45:de:b1:cc:3c:e6:54:21:91:b4:a7:
a4:0a:71:25:ae:bc:1a:2b:a2:8b:b7:34:bb:c7:bc:e3:df:67:
a5:76:02:37:fa:6f:65:22:36:93:23:78:1d:83:47:00:b8:cd:
ca:87:f8:9a:6e:9d:15:b3:fb:93:91:2f:6b:88:11:ac:55:b3:
59:6c:e4:e6:41:41:c2:63:d6:03:9b:54:d2:25:d6:7a:39:66:
5c:bc:97:ca:68:65:04:48:7c:0f:52:ec:59:7a:6c:a9:0d:9a:
bf:ba:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 10:46:35 2023 by rpki-client on console-fra.rpki-client.org