Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/qM6kFsHlUegZJNE1cWbxkCxNlSA.roa
File: qM6kFsHlUegZJNE1cWbxkCxNlSA.roa (raw, json)
Hash identifier: 8khE+P2FkfPhK1nw535exGnO7Q9mBuVN+QQdJZLM1D0=
Subject key identifier: A8:CE:A4:16:C1:E5:51:E8:19:24:D1:35:71:66:F1:90:2C:4D:95:20
Certificate issuer: /CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Certificate serial: 01856CEF40211D11103005BA3D976D82C79E
Authority key identifier: 6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/qM6kFsHlUegZJNE1cWbxkCxNlSA.roa
Signing time: Sun 01 Jan 2023 10:44:56 +0000
ROA not before: Sun 01 Jan 2023 10:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210247
IP address blocks: 192.166.38.0/24 maxlen: 24
192.166.36.0/22 maxlen: 22
192.166.36.0/24 maxlen: 24
192.166.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:40:21:1d:11:10:30:05:ba:3d:97:6d:82:c7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Validity
Not Before: Jan 1 10:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8cea416c1e551e81924d1357166f1902c4d9520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:e2:64:53:6e:7e:36:b3:bd:88:5a:97:3e:
aa:7a:e3:2e:ec:0b:92:bb:d7:af:d6:c9:4b:19:78:
1e:33:32:2d:95:a5:a3:ef:79:3a:45:91:50:bf:e8:
93:f5:68:d8:85:35:e8:93:91:17:17:88:2e:30:f9:
72:ad:8c:e2:2c:e6:04:e3:53:69:01:6d:03:3a:90:
7a:d0:c2:16:4d:cb:27:97:e2:3f:2c:b0:0a:14:8e:
a6:b6:3d:e6:56:af:3d:53:c2:90:ac:2b:14:a8:22:
ed:6d:64:e0:7a:e3:88:ac:be:11:60:9b:13:e1:17:
63:4e:1a:fa:94:ba:88:06:23:b1:6a:59:bf:67:b1:
0f:54:a4:0d:ef:bc:5f:91:e0:b2:2c:26:88:d4:26:
42:ac:ec:ec:a8:74:54:b1:84:fb:0f:fd:60:e4:1e:
b8:10:5e:92:01:66:b6:1d:16:d0:d0:86:55:09:a3:
29:b5:4c:2c:09:62:8c:c5:5a:74:44:52:2f:03:7c:
ec:ff:f9:1b:5b:e3:cd:17:67:4e:72:59:9a:ef:6f:
b1:a0:07:92:c9:3d:c2:92:56:74:49:fd:7f:73:4e:
52:ec:45:4b:d8:33:fd:51:cc:12:1b:16:ce:e4:06:
0b:5f:4a:bf:1d:06:8e:b5:53:c0:7d:f0:f1:f7:7e:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CE:A4:16:C1:E5:51:E8:19:24:D1:35:71:66:F1:90:2C:4D:95:20
X509v3 Authority Key Identifier:
keyid:6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/qM6kFsHlUegZJNE1cWbxkCxNlSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:61:69:00:5b:cb:b7:14:4f:42:7c:4c:f3:bc:4d:bb:1b:26:
58:78:0a:e7:04:9b:11:0d:0c:4c:2a:92:c3:fc:aa:7d:2a:11:
f3:16:3a:f9:5d:fb:f5:3f:37:6c:b1:ff:18:69:08:c8:c9:25:
19:66:b5:92:cd:61:e0:45:33:71:0b:ca:a5:7e:ab:71:f1:4f:
3c:9c:bb:e9:e6:27:cc:aa:69:15:e9:2c:16:60:7c:35:af:d9:
80:87:7e:54:93:90:0e:89:e2:da:8c:de:5e:9a:4d:94:9e:b5:
6c:22:96:45:45:28:90:95:f5:82:17:29:d5:2f:0c:b7:3d:cb:
d5:9f:9d:d8:ee:28:63:b6:94:77:2d:6c:09:b6:da:26:21:3e:
4b:7f:50:96:13:fb:7b:d6:3a:d6:f5:e9:48:49:34:62:f6:80:
d9:c5:0e:7b:2a:8d:3b:eb:6e:31:1a:8b:91:c5:cf:e6:54:a4:
0a:b3:fb:d3:80:d3:f4:01:43:17:8c:41:c0:7f:ea:46:15:a0:
84:de:0d:2c:d0:b3:bf:b9:d9:b8:13:b1:5c:c8:76:64:4f:5a:
38:48:b8:aa:da:9b:4a:cc:bf:76:37:12:4a:f9:da:5b:76:e2:
77:b0:3f:84:78:a1:18:d9:9a:c4:67:cf:99:3a:53:98:97:28:
cb:42:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:04 2024 by rpki-client on console-fra.rpki-client.org