Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/QMpDH_Y6RJ6E2_sG4BXRMmTcl-E.roa
File: QMpDH_Y6RJ6E2_sG4BXRMmTcl-E.roa (raw, json)
Hash identifier: rl2IzMwOka2Ne5ujpYpZAKS2zHpmD23k0w7/XkPqiVI=
Subject key identifier: 40:CA:43:1F:F6:3A:44:9E:84:DB:FB:06:E0:15:D1:32:64:DC:97:E1
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 01856DDD51E4B4134D4CE36D87A563AFE4CF
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/QMpDH_Y6RJ6E2_sG4BXRMmTcl-E.roa
Signing time: Sun 01 Jan 2023 15:04:58 +0000
ROA not before: Sun 01 Jan 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 185.48.80.0/22 maxlen: 24
5.154.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:51:e4:b4:13:4d:4c:e3:6d:87:a5:63:af:e4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Jan 1 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40ca431ff63a449e84dbfb06e015d13264dc97e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:06:89:c5:7f:8d:0d:de:0c:b7:29:b2:73:
ae:5a:84:33:d2:14:85:5a:33:39:37:e3:85:6d:9a:
bd:ed:9a:f0:eb:15:67:2e:6d:84:5c:ac:c5:9c:6c:
f6:49:8f:a2:73:44:ad:6c:c1:17:10:ef:08:51:7f:
f4:2a:a3:51:1e:cd:a5:0c:f6:80:6a:da:09:25:87:
e4:30:6f:68:7b:f6:bc:df:c6:06:e6:ae:72:4b:17:
ec:08:52:90:39:64:35:25:77:36:fa:09:5e:48:55:
30:e1:f0:eb:46:90:39:5d:7c:16:39:46:1f:43:50:
bd:8a:b2:ee:76:6c:0c:a6:50:b5:61:d3:5d:af:8f:
e9:78:ab:6c:b3:d6:9d:5b:f3:3b:88:b1:7a:a6:93:
12:97:a4:dd:5e:de:3d:16:d1:7d:a4:b3:89:e2:2f:
9e:35:e6:ce:68:78:6c:64:cf:78:aa:3a:de:13:e6:
a2:c2:ac:26:61:d7:28:de:f1:81:99:a6:8d:34:3a:
f5:b7:1a:f0:a5:9d:5d:62:05:2d:cc:d3:b5:27:68:
29:35:b7:cd:f7:7b:5c:fc:45:35:83:fe:6e:a1:69:
05:2a:eb:24:70:6f:1e:59:c2:f0:3d:f9:01:3a:57:
4b:56:80:41:04:ef:15:05:b6:b6:39:a6:66:5e:a1:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CA:43:1F:F6:3A:44:9E:84:DB:FB:06:E0:15:D1:32:64:DC:97:E1
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/QMpDH_Y6RJ6E2_sG4BXRMmTcl-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.244.0/22
185.48.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:10:16:c3:27:24:7d:49:27:5c:ad:71:8a:96:eb:cc:ce:69:
5e:92:d1:97:e8:31:c4:ba:13:64:90:e2:f4:97:e3:2f:ee:86:
f3:60:fa:26:6d:33:ca:25:1f:18:62:a9:74:6c:36:73:cd:99:
02:8a:1a:69:90:db:8a:a4:b6:62:22:41:84:06:61:5c:07:1b:
3b:14:6c:84:47:fd:f5:d4:31:aa:50:d9:74:23:6b:97:b6:b3:
14:c8:87:d5:32:c3:d1:a0:36:10:42:23:d7:91:f0:1d:6a:fe:
4d:0b:91:b0:36:de:64:8b:0c:4f:5f:71:3e:8a:a5:fa:04:ce:
5e:aa:27:fa:64:4a:82:48:d9:54:0f:a7:84:e9:ce:6d:cc:f1:
fb:3e:1a:98:f6:b5:ad:4a:71:ef:3e:c0:dc:1d:47:f4:98:05:
b4:11:82:df:6a:79:07:a1:2b:4c:3f:7f:c8:63:07:fc:ae:0e:
28:39:d5:ee:03:9c:11:82:36:c3:35:bb:0a:c7:bc:37:cf:6a:
e0:f8:2d:dc:64:05:ce:06:23:52:c5:96:82:df:c0:45:a9:fb:
eb:2d:83:77:9f:a5:7d:d9:9a:d7:b8:48:a6:b3:a4:38:01:ef:
05:3c:25:b1:9c:7b:91:49:60:ef:e0:6e:a5:62:55:02:3a:0c:
43:64:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:21 2024 by rpki-client on console-fra.rpki-client.org