Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/QHFbZSLtV73J2su6bYiH0hKdPso.roa
File: QHFbZSLtV73J2su6bYiH0hKdPso.roa (raw, json)
Hash identifier: n/JJ2/XVf1F5ZqE5yNHmulXu+9TwixrFx4Vqr7VwBpQ=
Subject key identifier: 40:71:5B:65:22:ED:57:BD:C9:DA:CB:BA:6D:88:87:D2:12:9D:3E:CA
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 01856FC2865E8915AF8286A38236838E534F
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/QHFbZSLtV73J2su6bYiH0hKdPso.roa
Signing time: Sun 01 Jan 2023 23:54:57 +0000
ROA not before: Sun 01 Jan 2023 23:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 185.155.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:86:5e:89:15:af:82:86:a3:82:36:83:8e:53:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 23:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40715b6522ed57bdc9dacbba6d8887d2129d3eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:a4:e6:b9:26:ba:1d:18:98:f3:93:c2:62:
1e:3b:a1:02:99:0d:8f:2e:76:e8:1b:07:9c:b9:45:
88:f7:2f:f6:70:84:2d:3d:6e:a3:a0:e6:26:09:95:
75:97:b2:75:fe:d8:e9:f9:08:cc:90:de:f5:1f:71:
8e:b2:15:1a:d2:e7:62:59:94:06:60:a5:4e:66:af:
8d:72:ae:3b:29:e4:a5:ea:64:a3:48:82:24:3f:ee:
24:cd:22:67:f6:c8:b2:77:c4:73:5d:7c:83:62:05:
c2:7b:ed:03:c7:56:90:a2:b2:fb:38:8b:8a:d7:35:
c3:3c:e8:30:32:15:52:08:ef:79:e7:7d:ba:f5:7b:
bf:b1:a8:92:04:91:d5:8c:fa:9f:22:66:f6:3b:a9:
ad:d5:89:a2:47:9a:8d:ed:0c:1d:de:60:72:89:98:
5f:84:16:de:46:2b:5b:46:ae:06:36:f5:ad:80:75:
91:b3:f5:fd:bc:cc:54:fb:b1:51:4b:e7:77:ad:e0:
74:b5:da:bb:e5:76:96:5d:ea:29:07:22:9c:37:0f:
26:28:c0:ba:7e:ee:20:09:fc:1d:c4:29:ee:8c:9f:
73:1b:d4:d5:c9:6f:5a:9d:0b:74:82:c3:45:81:0d:
13:a5:0a:1c:32:6e:c8:5c:17:fc:4c:59:98:b5:4b:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:71:5B:65:22:ED:57:BD:C9:DA:CB:BA:6D:88:87:D2:12:9D:3E:CA
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/QHFbZSLtV73J2su6bYiH0hKdPso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.52.0/24
Signature Algorithm: sha256WithRSAEncryption
46:55:b7:0b:ca:af:7e:44:fc:00:86:13:62:f8:a7:0b:23:4a:
a3:cd:31:16:b0:90:90:c8:a1:09:5f:8e:fd:1d:74:e1:0d:1c:
cb:44:f6:12:ea:79:4f:ba:bb:76:c3:e4:b0:50:83:a2:f4:eb:
4d:39:8c:c7:26:c2:9f:18:ce:d8:af:a3:f7:1d:78:4f:d3:23:
f7:bd:3e:da:e3:c2:21:51:15:f7:6a:b8:d4:49:cf:d9:23:7d:
35:ac:95:ec:0f:19:14:9b:ad:b1:d3:94:cb:ec:7e:e7:b6:18:
1e:1c:89:f9:77:74:c8:2a:21:3b:96:88:a2:1f:b2:f2:c0:44:
71:30:88:ca:3f:1b:6e:ea:f1:50:c4:21:fb:b9:71:b4:20:a4:
89:f9:b7:18:8e:58:80:6d:17:01:1f:eb:f1:a7:9d:92:db:31:
4e:ec:18:10:49:c9:6a:2b:30:42:43:a2:d0:da:3a:72:29:16:
62:d9:c7:3e:53:15:4d:9a:b2:1c:06:7f:de:30:d1:4d:b1:2f:
23:aa:d3:f2:a0:5e:4f:3f:6c:8e:ae:cb:9f:05:4d:52:3c:94:
1f:8b:fc:77:16:79:3c:85:5f:79:56:e9:d4:3a:09:c7:66:07:
87:55:4d:a2:5c:24:8d:20:63:46:26:9f:8c:da:42:ef:9a:47:
97:84:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org