Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/qFkhrgk_VuVMEE6vLjVbbZJHKv0.roa
File: qFkhrgk_VuVMEE6vLjVbbZJHKv0.roa (raw, json)
Hash identifier: R5WAMZ76/b+WA0FO7+ytazc8TquVK8U6gjpnTnog7hs=
Subject key identifier: A8:59:21:AE:09:3F:56:E5:4C:10:4E:AF:2E:35:5B:6D:92:47:2A:FD
Certificate issuer: /CN=2b6b822eddcfd1219daa94fc43463ca8baaec780
Certificate serial: 01857142F2CD3A730B4E7195B8B5DC4B32D3
Authority key identifier: 2B:6B:82:2E:DD:CF:D1:21:9D:AA:94:FC:43:46:3C:A8:BA:AE:C7:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/qFkhrgk_VuVMEE6vLjVbbZJHKv0.roa
Signing time: Mon 02 Jan 2023 06:54:51 +0000
ROA not before: Mon 02 Jan 2023 06:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58075
IP address blocks: 185.186.172.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:f2:cd:3a:73:0b:4e:71:95:b8:b5:dc:4b:32:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b822eddcfd1219daa94fc43463ca8baaec780
Validity
Not Before: Jan 2 06:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a85921ae093f56e54c104eaf2e355b6d92472afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:9a:3b:5c:14:c8:c1:19:26:28:4a:33:45:
69:0e:f7:a8:5e:49:f1:11:bc:46:65:d3:bf:19:28:
ff:d2:c1:f0:9b:23:ac:41:e0:c3:61:5f:36:1e:6e:
6e:f2:62:c7:ee:31:f1:31:4b:74:f1:c3:dc:a0:b4:
f8:69:59:bf:10:91:49:65:f7:7c:a0:a2:aa:b7:44:
86:52:73:fb:28:f7:02:b2:10:15:bf:55:a0:60:ae:
f2:57:c0:d3:4b:ad:4b:79:55:59:c0:d3:1d:b0:f1:
b5:1a:35:d1:92:35:99:61:b5:eb:6a:93:91:4e:dc:
bf:d1:47:30:94:66:85:bf:3a:55:ea:2d:7b:bd:78:
39:b6:88:a5:d5:8b:c0:fc:50:58:52:14:d6:a2:d4:
e0:74:43:02:f2:af:41:61:e0:28:da:59:f6:5c:c3:
8e:43:99:81:2f:52:c6:a0:ce:6b:29:7b:d9:65:78:
d0:5a:27:89:37:84:51:b4:76:60:96:17:17:d3:d9:
1f:fb:67:83:40:88:eb:3e:18:04:e3:41:91:cc:11:
74:0a:cd:c7:28:b4:76:61:da:8b:2f:90:0c:c8:35:
7b:1d:fc:8f:53:c3:bc:30:43:d3:d9:78:5b:c9:ed:
2d:ce:8a:ab:9f:4d:89:7e:6f:b6:39:87:c8:5c:18:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:59:21:AE:09:3F:56:E5:4C:10:4E:AF:2E:35:5B:6D:92:47:2A:FD
X509v3 Authority Key Identifier:
keyid:2B:6B:82:2E:DD:CF:D1:21:9D:AA:94:FC:43:46:3C:A8:BA:AE:C7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/qFkhrgk_VuVMEE6vLjVbbZJHKv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.172.0/22
Signature Algorithm: sha256WithRSAEncryption
78:44:cd:84:87:e6:4b:48:d6:9d:7b:fa:21:ef:41:7e:53:99:
ab:fd:ad:ba:35:47:5e:7d:41:e6:91:5b:67:0b:91:44:fa:1b:
60:77:79:70:13:ec:59:f8:3d:a1:1c:94:23:c3:2a:8d:14:71:
bc:07:43:94:bf:29:de:7e:e6:e4:96:f2:23:2a:85:af:fe:ca:
f0:55:6c:cb:b7:d5:5e:31:f9:92:24:ec:8c:db:a0:2e:79:1a:
c7:40:22:99:13:cf:60:0e:53:b5:f3:3c:95:13:28:fc:cd:df:
9e:e6:73:43:c9:06:4a:04:e7:23:8d:38:a7:aa:6a:23:60:1e:
4d:24:d3:48:d6:34:d0:56:3b:1f:d2:42:07:a4:04:d1:1f:b4:
81:9d:bc:01:97:55:c3:2f:af:38:60:2c:96:fb:cb:40:64:70:
91:07:e0:95:2d:37:d5:78:03:9a:7f:a3:fb:6a:e2:3e:55:7b:
7a:eb:25:0b:9c:d7:2c:3e:05:62:de:56:a8:26:18:03:c4:c3:
05:4f:cd:ed:85:4d:06:26:e2:4d:8d:9f:8a:53:0a:67:4e:68:
33:54:fe:c4:85:70:67:3c:bf:85:2f:75:df:be:a7:88:55:1e:
7c:dc:b6:ed:a3:f8:fe:95:29:4f:4e:39:a6:3d:9a:8c:42:41:
11:d0:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:58 2024 by rpki-client on console-fra.rpki-client.org