Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/QKY_DjkNLLshANQrqeBrUp8op38.roa
File: QKY_DjkNLLshANQrqeBrUp8op38.roa (raw, json)
Hash identifier: Wyl2yod2dYOtSNOGM1zwBMq80s09cc592gvagMxN4i0=
Subject key identifier: 40:A6:3F:0E:39:0D:2C:BB:21:00:D4:2B:A9:E0:6B:52:9F:28:A7:7F
Certificate issuer: /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial: 01856F5DE1FDEF71D2DD2A667C8C18F55AAF
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/QKY_DjkNLLshANQrqeBrUp8op38.roa
Signing time: Sun 01 Jan 2023 22:05:01 +0000
ROA not before: Sun 01 Jan 2023 22:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203187
IP address blocks: 185.82.80.0/24 maxlen: 24
185.82.83.0/24 maxlen: 24
185.82.80.0/22 maxlen: 22
185.82.81.0/24 maxlen: 24
185.82.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 05:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e1:fd:ef:71:d2:dd:2a:66:7c:8c:18:f5:5a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Validity
Not Before: Jan 1 22:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40a63f0e390d2cbb2100d42ba9e06b529f28a77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:8c:3e:5a:af:55:45:e2:ad:43:aa:cc:d3:
5e:4c:9f:18:ff:18:59:9b:58:1c:4b:78:9a:86:80:
75:e1:9c:09:4e:69:2b:ba:16:91:20:ee:0f:26:32:
ae:84:d7:31:6d:48:5b:81:fb:49:26:69:43:a2:9d:
6f:1e:c5:20:b7:d4:32:2a:2b:85:e4:1f:f0:ea:1a:
c6:48:c0:57:3b:d5:6d:20:af:c6:8f:48:9a:43:97:
b6:e0:93:7b:b2:44:56:fc:68:58:f3:09:9a:b6:4a:
c4:c6:4c:50:05:61:3c:4a:66:68:e0:6e:f6:25:d0:
99:df:32:63:81:7b:28:c3:ed:c8:67:b8:91:c6:e7:
8e:4a:8c:24:ce:36:c8:b8:b4:05:5a:8c:f2:a9:f8:
26:f0:bf:40:8b:85:40:91:6f:d4:aa:29:58:82:ec:
dd:b0:6f:83:5c:bd:9b:08:55:ee:b2:bb:70:d2:f8:
82:02:a0:25:5e:2a:2d:bf:6e:ac:6f:3b:8e:08:5e:
d9:4d:1d:27:21:91:8d:91:82:22:a9:d6:af:2a:01:
6f:ea:7e:44:27:dd:1c:91:0f:d7:ef:53:22:d9:5f:
2f:4a:7e:7d:89:fc:87:15:ba:2d:0a:9a:1a:d1:43:
a0:ab:c3:06:a4:8b:64:c1:ca:fe:71:73:16:47:83:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A6:3F:0E:39:0D:2C:BB:21:00:D4:2B:A9:E0:6B:52:9F:28:A7:7F
X509v3 Authority Key Identifier:
keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/QKY_DjkNLLshANQrqeBrUp8op38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.80.0/22
Signature Algorithm: sha256WithRSAEncryption
65:b0:40:43:ce:96:e4:29:cb:29:66:02:e1:5a:ec:c1:23:72:
43:98:82:13:5c:79:99:f9:0c:ea:e1:23:91:62:23:49:cf:35:
f7:28:95:0f:a9:90:92:c4:94:97:3c:c4:32:4f:0b:53:37:b9:
90:14:13:57:ad:45:7d:7d:a8:53:7a:22:e8:86:63:35:37:5e:
33:e4:18:f6:1d:3e:25:b5:c2:0c:ff:d6:98:2e:1a:a8:23:64:
6f:bf:3d:0c:68:04:2a:f0:36:c3:bb:d0:21:a6:d7:ee:5b:dc:
f3:e6:5b:da:ea:5d:28:6f:b3:33:d5:b4:53:7e:f9:89:72:02:
78:3f:6e:8d:e2:03:08:c2:13:66:76:73:20:0d:cf:d3:79:6f:
09:b7:39:1d:fb:46:43:0c:97:df:e6:b2:54:6b:33:08:5c:c5:
a3:59:79:ec:da:10:6f:4f:50:86:72:3f:58:48:3d:01:dc:c1:
df:69:cf:63:b6:e7:99:d2:f3:ee:25:7d:24:13:5b:07:b4:78:
c9:3c:48:52:49:6a:a8:42:0b:34:fe:bd:d9:aa:e9:fd:0e:78:
24:d6:55:1d:b2:ab:41:8d:97:4b:d8:6a:27:13:c5:0e:9e:ef:
8d:fa:f6:d4:21:a3:f8:65:d6:85:fe:9f:f6:8b:03:8f:34:d0:
15:a4:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-fra.rpki-client.org