Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/Q2V7HCnVvUz6uoNfNaGa9A3G4BY.roa
File: Q2V7HCnVvUz6uoNfNaGa9A3G4BY.roa (raw, json)
Hash identifier: HHIlnRe48+eeHYQdp47yzAWn/SwwNLxgsvaT1W97Qzk=
Subject key identifier: 43:65:7B:1C:29:D5:BD:4C:FA:BA:83:5F:35:A1:9A:F4:0D:C6:E0:16
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 01856FF0263143A17B3A929AD710447653DC
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/Q2V7HCnVvUz6uoNfNaGa9A3G4BY.roa
Signing time: Mon 02 Jan 2023 00:44:47 +0000
ROA not before: Mon 02 Jan 2023 00:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20493
IP address blocks: 193.108.21.0/24 maxlen: 24
185.113.160.0/22 maxlen: 24
2a06:6a00::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:26:31:43:a1:7b:3a:92:9a:d7:10:44:76:53:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Jan 2 00:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43657b1c29d5bd4cfaba835f35a19af40dc6e016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:5a:df:63:2a:4d:30:11:d4:84:46:b7:96:
f8:84:8d:45:2f:b1:9c:31:1d:ff:48:36:12:03:52:
26:28:ef:e9:4d:75:5f:fa:3e:14:46:05:2a:9d:ba:
0c:c2:00:fe:f7:bb:89:1f:f4:33:41:6d:8c:e7:b9:
b4:14:83:85:27:37:65:99:05:8a:f2:a1:f3:ec:5b:
90:9c:f7:26:77:a0:73:80:92:5a:a2:30:8a:82:77:
b1:ce:85:40:3c:db:44:27:88:06:69:e1:e3:96:79:
0b:18:75:56:e0:40:9e:65:8e:41:dd:31:18:b9:16:
ce:36:aa:06:97:6e:cd:cf:82:d9:c6:07:f7:74:4d:
aa:11:af:c4:8a:5c:ec:53:b9:07:20:31:aa:e9:25:
e0:b5:03:8b:4d:c2:fc:b5:63:10:9e:b3:a7:91:85:
c6:41:1f:a3:58:b7:fe:cd:00:e0:09:d5:65:94:b1:
24:c9:bf:c3:80:3e:ba:1d:59:3c:c6:ac:6d:3e:12:
74:db:24:09:9f:e2:2e:41:f3:a0:bc:7f:c1:c4:29:
7a:41:a9:98:b9:01:23:9a:0a:50:55:bf:2d:2c:37:
3d:6c:bd:55:a3:37:55:ec:40:cb:77:ad:da:ea:1e:
2b:b8:19:eb:c4:d4:d4:49:11:a7:ff:38:f5:2e:f0:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:7B:1C:29:D5:BD:4C:FA:BA:83:5F:35:A1:9A:F4:0D:C6:E0:16
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/Q2V7HCnVvUz6uoNfNaGa9A3G4BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.160.0/22
193.108.21.0/24
IPv6:
2a06:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
61:fc:17:e4:d4:fe:f1:20:8f:fe:69:bc:33:33:c0:07:3a:78:
95:5b:ba:d4:6d:31:2a:6d:94:fc:43:bf:12:3b:df:ad:cf:38:
aa:cb:96:d7:c5:63:7b:d6:13:c9:d1:19:91:b7:7e:3a:51:8a:
15:25:38:54:ba:0e:09:ee:b2:70:fe:85:3d:a1:1d:2b:69:97:
52:3c:b4:21:c0:e3:2e:ef:f3:2c:14:23:15:70:5b:f9:29:5d:
40:d2:9a:3c:a9:73:51:ee:69:79:9d:58:61:8b:9f:7d:86:1d:
1b:77:5f:19:f7:03:12:4f:01:3c:ed:93:c3:8d:25:5c:77:5a:
0f:00:24:8c:f5:97:48:28:69:a0:af:0d:c9:ed:13:5d:3b:da:
b1:e7:8c:e3:0f:6d:a7:b4:eb:84:34:52:34:ed:d7:ad:ec:6b:
de:a5:33:d4:21:9b:85:9e:40:97:ab:be:da:cc:f6:15:93:b6:
0f:35:4b:e0:5e:a9:cd:22:71:d2:2f:66:ca:2c:0f:ac:32:2b:
5d:49:f0:70:17:00:48:bd:4a:90:e7:f4:e2:6b:f2:88:cb:71:
40:1f:1a:bf:da:8f:c9:f4:ad:54:72:b2:ac:23:b9:c5:0a:ea:
53:51:02:0c:02:0f:5c:54:ba:37:ad:76:92:42:4a:f6:75:9a:
cc:59:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:35 2024 by rpki-client on console-ams.rpki-client.org