Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/QpFUJtQpIuHZ4LTYc-lbnxXCdr4.roa
File: QpFUJtQpIuHZ4LTYc-lbnxXCdr4.roa (raw, json)
Hash identifier: rd8pzzIOchJlvTqwzGfW0xtdCuzgn5VZfDMtbPUaSYs=
Subject key identifier: 42:91:54:26:D4:29:22:E1:D9:E0:B4:D8:73:E9:5B:9F:15:C2:76:BE
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 01856B936395782C58802E28A6199FA80E8D
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/QpFUJtQpIuHZ4LTYc-lbnxXCdr4.roa
Signing time: Sun 01 Jan 2023 04:24:59 +0000
ROA not before: Sun 01 Jan 2023 04:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206296
IP address blocks: 91.92.18.0/23 maxlen: 23
80.240.184.0/22 maxlen: 22
185.189.20.0/22 maxlen: 24
45.65.104.0/21 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:63:95:78:2c:58:80:2e:28:a6:19:9f:a8:0e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Jan 1 04:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42915426d42922e1d9e0b4d873e95b9f15c276be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:fa:0f:f0:af:64:8d:fd:77:f5:12:cb:93:
93:77:ed:80:5f:3f:d4:19:e7:90:87:a9:13:32:9b:
41:ac:08:88:83:52:a7:f7:0c:30:b7:ef:e8:f0:48:
0f:52:67:4f:c9:01:e3:f2:da:c3:89:d8:1c:6a:cd:
ad:89:f5:7c:b2:3b:44:92:89:f6:ba:7f:e8:cc:49:
8f:15:93:cc:7f:a3:94:52:69:a9:be:ec:48:a2:bc:
1f:71:67:cd:dc:a9:ce:15:ec:9f:d6:93:36:5e:27:
bc:20:f6:98:3e:4d:46:13:6d:1e:ed:2c:7f:dd:12:
45:46:66:d2:ab:fd:86:d6:f7:af:9e:ed:76:de:91:
28:99:89:e4:ef:5e:d1:1b:c7:3e:19:16:4d:b1:02:
f7:5b:a4:2a:cb:33:9e:ab:13:ba:ea:8c:bf:bd:c7:
8e:ca:61:1a:31:e8:70:68:1e:22:b8:71:93:5a:d9:
de:4d:9d:61:f3:6c:64:09:0f:de:d2:11:55:49:40:
d9:e9:0e:e5:ad:0b:a9:00:4d:2a:21:01:75:d8:7b:
6f:47:25:64:86:37:8f:7e:5b:55:0e:64:da:50:72:
42:b1:b9:21:99:86:9b:e4:1f:c1:d7:c2:4f:b1:09:
74:a0:56:f9:09:cc:73:0b:81:29:74:0f:76:2a:e7:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:91:54:26:D4:29:22:E1:D9:E0:B4:D8:73:E9:5B:9F:15:C2:76:BE
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/QpFUJtQpIuHZ4LTYc-lbnxXCdr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.104.0/21
80.240.184.0/22
91.92.18.0/23
185.189.20.0/22
Signature Algorithm: sha256WithRSAEncryption
10:17:9b:cd:6c:9b:78:35:a7:74:e6:a4:40:8c:43:c9:1c:af:
b2:43:99:31:31:4a:2f:15:b4:fa:fa:36:8a:8c:b9:aa:a9:4c:
5e:fa:07:91:fa:e0:3d:d6:cc:03:14:e9:cf:dd:3c:22:1a:b6:
fc:24:1c:a2:81:b9:62:1b:4b:34:74:27:a5:e2:a3:da:f9:bb:
c0:fc:7c:23:22:94:20:19:38:15:ba:10:e8:3f:f0:a3:83:2f:
f8:c6:0b:78:58:e1:27:61:70:21:64:22:3a:cb:82:90:88:b0:
d1:ee:28:73:fb:87:6a:99:a8:7e:7e:10:11:98:3c:ae:52:db:
4c:cd:10:cc:7a:e2:8c:c4:aa:a4:4e:1d:46:4d:23:74:f5:55:
36:45:7e:a1:ff:ee:7b:b5:41:fb:35:dd:0f:b4:f5:4d:fd:e7:
37:37:b7:07:b9:c0:6f:f9:e8:40:b1:4c:82:38:66:36:4f:52:
0d:2c:0a:ec:11:41:97:b6:ff:3d:39:f5:b0:52:28:cb:ca:21:
0c:75:c9:45:63:3e:5f:5c:18:f1:17:86:e0:4b:f0:f2:23:7d:
d2:83:3f:30:54:3a:cd:3d:2a:7e:fe:7f:f5:4a:4e:72:ec:e4:
f3:a8:d9:f4:ab:68:32:47:72:52:43:68:eb:6f:c2:a5:88:f4:
98:5a:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:13 2024 by rpki-client on console-ams.rpki-client.org