Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/q4h8hqZgGSlCo4qAolkUdi_MZfA.roa
File: q4h8hqZgGSlCo4qAolkUdi_MZfA.roa (raw, json)
Hash identifier: 9rNdgQ0BL21LHmeVoqgNWGH8Hw+FoqoR0LJd3zFVJck=
Subject key identifier: AB:88:7C:86:A6:60:19:29:42:A3:8A:80:A2:59:14:76:2F:CC:65:F0
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 018CB5577ABFA5171AB09BEEBA187A13A0F1
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/q4h8hqZgGSlCo4qAolkUdi_MZfA.roa
Signing time: Fri 29 Dec 2023 11:30:58 +0000
ROA not before: Fri 29 Dec 2023 11:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 85.11.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:57:7a:bf:a5:17:1a:b0:9b:ee:ba:18:7a:13:a0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Dec 29 11:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab887c86a660192942a38a80a25914762fcc65f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:8f:b0:ad:bf:c0:d6:b5:bd:a2:15:e5:90:
87:15:d5:d4:c8:e4:30:bf:80:32:b6:e7:d4:87:b7:
ac:66:57:c1:5d:87:b4:35:33:91:70:92:f2:cf:cb:
c7:85:b0:26:27:da:2c:ca:b7:e7:0f:42:5e:44:3e:
84:65:2a:4f:e7:d5:2d:89:0a:75:69:bd:c5:90:85:
4d:b9:d8:50:e0:dd:75:89:a6:d9:f7:23:aa:79:5f:
df:48:bd:95:b7:b7:6e:4d:22:97:2f:47:21:b0:9a:
27:ce:df:2b:fd:09:fb:dc:d6:ff:3b:dd:22:4d:20:
81:47:3e:cb:01:63:8f:a5:05:e6:7d:5e:ca:07:39:
48:43:3a:a1:ba:28:33:7c:62:72:7a:ff:ef:b8:1c:
cd:ae:13:b8:3e:7c:99:46:96:d7:5f:88:16:0c:e8:
46:0b:c9:c3:45:40:b6:16:92:32:9e:e8:59:7a:35:
fc:7d:53:89:c5:e4:86:48:01:27:73:26:81:da:3d:
ef:e3:7f:bc:6f:5a:ff:eb:c6:19:c5:a5:71:5c:7f:
2f:da:a9:dc:03:cd:ac:ee:83:56:a7:32:ee:92:b6:
73:2f:b1:ab:5d:f6:c5:68:72:de:46:78:e8:18:09:
c1:34:23:6d:19:f0:c7:90:88:e7:f1:ff:4b:0e:33:
ad:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:88:7C:86:A6:60:19:29:42:A3:8A:80:A2:59:14:76:2F:CC:65:F0
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/q4h8hqZgGSlCo4qAolkUdi_MZfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e2:70:f3:17:fa:64:2c:d6:a8:9d:45:26:97:62:58:cb:14:
2d:07:b5:da:75:4b:b2:ff:82:94:5f:d8:71:95:48:6b:36:34:
0d:a5:35:ca:3c:46:f9:83:5e:e0:ed:8d:e1:71:7e:ae:de:29:
66:5b:a2:09:9f:09:49:3c:b2:30:0b:e9:01:81:0a:d7:a7:9d:
04:a5:08:e5:7a:13:df:2c:da:a5:7b:d4:8b:bd:77:65:01:82:
34:8d:62:4a:06:d9:54:22:2f:97:e0:15:f1:5a:5b:91:bf:02:
b1:5a:04:ac:75:57:8e:cd:73:1e:2a:4e:90:42:0f:45:f9:2a:
05:c4:a9:89:3f:ae:11:91:4c:92:dc:92:5e:b4:10:35:33:7f:
e4:54:db:7a:09:2b:f8:1a:ff:9c:76:86:4e:85:40:a1:5c:c8:
a9:5e:c5:d3:36:b2:31:80:3c:eb:13:f3:f4:0d:ab:49:d5:ba:
5f:f4:e2:90:9f:25:96:ac:19:c2:44:97:5a:4b:a1:c2:3e:a1:
13:60:a3:aa:98:5d:9f:3f:ab:92:ef:16:c7:39:ad:af:f3:51:
de:cf:03:5d:2c:e7:6c:b9:de:e4:96:b5:c9:c1:25:61:b4:77:
f8:8d:e4:ee:8b:3f:fa:05:69:8f:56:1a:14:9e:7e:68:57:fc:
99:cf:60:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:39 2024 by rpki-client on console-ams.rpki-client.org