Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/Qt5kkqBgxM4icZBw0Bp1N4Guhlg.roa
File: Qt5kkqBgxM4icZBw0Bp1N4Guhlg.roa (raw, json)
Hash identifier: yBTutT52Xdh8P3gHaD8tmq6SalPFb37aWqjfvaCajOo=
Subject key identifier: 42:DE:64:92:A0:60:C4:CE:22:71:90:70:D0:1A:75:37:81:AE:86:58
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 0188A2ACCBEB1089D9B13D111172D37E181B
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/Qt5kkqBgxM4icZBw0Bp1N4Guhlg.roa
Signing time: Sat 10 Jun 2023 00:20:13 +0000
ROA not before: Sat 10 Jun 2023 00:20:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42615
IP address blocks: 185.186.11.0/24 maxlen: 24
2a0b:6b81:3::/48 maxlen: 48
2a0b:6b81:1::/48 maxlen: 48
2a0b:6b87::/32 maxlen: 32
2a0b:6b81:4::/48 maxlen: 48
2a0b:6b82::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a2:ac:cb:eb:10:89:d9:b1:3d:11:11:72:d3:7e:18:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jun 10 00:20:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42de6492a060c4ce22719070d01a753781ae8658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:04:b3:15:f8:93:a1:57:d1:0a:7e:3c:c9:
7f:d1:c5:9b:8e:65:5a:e8:24:1d:01:73:48:ef:56:
b5:b6:e3:70:99:d3:43:e5:5d:d8:e0:37:8d:ad:3d:
6c:6c:8c:41:5a:40:5f:97:ed:eb:98:00:5a:bc:4a:
65:de:a1:75:61:9e:b6:4c:b7:9e:9d:f7:db:77:ae:
2d:46:6f:52:ae:b9:44:ca:0c:a9:10:a8:bc:d4:dd:
d5:91:9d:0e:56:c4:6b:b4:0c:bf:cc:eb:32:13:04:
80:bd:19:af:66:23:37:ce:79:9b:62:11:61:97:37:
c9:17:fc:bb:d9:3b:01:46:50:d0:2d:d7:4f:31:c4:
d2:c8:ae:04:f7:1e:26:bd:1a:d7:d9:05:59:5a:4c:
ac:e6:f9:04:7b:1f:7a:75:c9:60:76:1b:71:17:30:
00:6a:d9:83:c8:8a:a7:2a:03:f5:f4:3e:9c:4f:e2:
ff:62:87:e0:59:bd:bd:96:54:4b:2b:3f:a0:cf:0d:
6a:e7:9c:10:42:2a:18:a1:f6:f8:74:62:60:e1:d1:
20:3b:aa:44:19:8c:9f:f2:82:17:0f:a2:a0:b0:e1:
ef:75:c9:6d:2f:ad:09:00:1f:a9:28:f3:fa:15:b4:
36:78:f3:d8:a5:19:65:83:b7:0e:0a:0d:a4:fe:f2:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DE:64:92:A0:60:C4:CE:22:71:90:70:D0:1A:75:37:81:AE:86:58
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/Qt5kkqBgxM4icZBw0Bp1N4Guhlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.11.0/24
IPv6:
2a0b:6b81:1::/48
2a0b:6b81:3::-2a0b:6b81:4:ffff:ffff:ffff:ffff:ffff
2a0b:6b82::/32
2a0b:6b87::/32
Signature Algorithm: sha256WithRSAEncryption
63:c3:31:db:60:0d:a2:8e:fc:8c:8e:6d:bc:76:65:ab:10:fc:
13:df:c0:72:79:08:8a:f8:49:4e:48:ba:b1:ed:04:16:35:95:
2b:5f:e8:c5:d8:e4:02:71:fb:22:64:d6:77:65:8c:dd:ed:ed:
6b:cf:4c:6a:e2:23:5b:81:f2:1c:c5:13:38:d3:50:8a:bf:39:
2b:c3:34:eb:51:9c:f8:f2:5f:b9:e0:86:31:07:5e:7b:a3:79:
3c:8d:8a:fe:5c:1e:a7:e2:71:bc:a4:1c:e1:fc:17:bf:67:92:
09:e0:aa:22:67:30:5a:17:72:95:bc:1a:75:91:4c:db:40:07:
1a:92:82:f1:cf:65:50:0b:9a:81:8b:41:af:b0:f9:41:e1:3b:
4a:0f:a9:d5:e8:4c:f3:21:3d:72:9f:8e:46:99:05:80:23:16:
47:93:39:67:69:8b:61:fe:ad:c1:4f:5d:0a:60:20:d1:8d:d3:
83:70:36:46:7b:34:19:4b:e7:67:0c:b1:19:31:7f:dd:04:17:
b1:31:40:d0:f4:cf:a9:02:41:4d:63:7b:a5:9e:fd:f4:be:b7:
0e:9a:3c:20:1c:8a:0a:cf:60:7f:8f:44:42:c4:ec:9b:44:ba:
7a:53:c7:32:bf:fe:ac:c1:f4:fc:39:5c:a8:8a:fc:51:00:dd:
de:12:69:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:50 2023 by rpki-client on console-fra.rpki-client.org