Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/QBif60zFSPxMIG8ykFDzPJ0ZvI4.roa
File: QBif60zFSPxMIG8ykFDzPJ0ZvI4.roa (raw, json)
Hash identifier: m3wChdI/az6ontKSXCa0dDgWv9qLf4+fSrZz15MyWzg=
Subject key identifier: 40:18:9F:EB:4C:C5:48:FC:4C:20:6F:32:90:50:F3:3C:9D:19:BC:8E
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 01856F3929EB7A18B91B485D65AD99183702
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/QBif60zFSPxMIG8ykFDzPJ0ZvI4.roa
Signing time: Sun 01 Jan 2023 21:24:55 +0000
ROA not before: Sun 01 Jan 2023 21:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205550
IP address blocks: 185.120.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:29:eb:7a:18:b9:1b:48:5d:65:ad:99:18:37:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Jan 1 21:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40189feb4cc548fc4c206f329050f33c9d19bc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:89:ac:ec:23:93:c5:c7:85:df:d6:e1:08:
0e:52:6c:5c:b0:d4:d3:14:a9:13:a4:7b:43:b0:dc:
62:5c:9e:a1:69:2e:7d:80:99:a2:db:4b:ec:e5:9f:
08:b7:e0:3b:26:e8:8d:b9:1a:33:1b:2e:fa:6b:8e:
f3:2f:73:27:fc:9b:33:1e:32:35:80:89:b1:24:3a:
9d:95:be:8a:06:86:11:8c:0c:11:02:9f:80:76:43:
69:b6:a7:f4:6b:d8:5b:46:07:3a:77:c7:96:98:9c:
14:a4:f0:3c:44:74:d5:d4:7a:d0:da:3c:c3:b0:12:
5a:d4:37:80:26:5f:6b:29:dc:4d:59:c7:b2:00:5d:
5d:c3:56:f5:8e:b4:a1:4c:fc:9d:f8:b0:3f:cb:99:
56:62:5f:de:6f:0b:fa:2e:e3:ff:3c:94:53:4e:93:
1f:e4:97:d6:f8:19:55:b2:dc:51:06:25:33:46:bc:
0b:28:2b:a4:cb:b3:4b:ff:1a:38:49:e7:89:ec:8a:
f5:c0:51:7c:99:6f:97:2e:d7:1c:9a:79:e5:de:d8:
c0:cc:69:6d:74:1b:1e:69:8a:cc:85:47:4f:f0:e4:
a5:e0:ba:dc:e1:d1:2d:bd:ba:eb:c7:47:4d:c5:a5:
c7:05:53:1b:76:51:d0:13:23:53:e2:82:b1:a6:0f:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:18:9F:EB:4C:C5:48:FC:4C:20:6F:32:90:50:F3:3C:9D:19:BC:8E
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/QBif60zFSPxMIG8ykFDzPJ0ZvI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.171.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f1:94:0f:67:17:82:68:cf:23:36:6f:5f:95:1c:e9:54:3e:
6f:f5:ea:db:65:54:ee:d8:e6:a4:b8:e7:72:b7:36:3f:92:f4:
97:21:87:ac:05:f9:82:4a:fb:f8:2d:ec:66:75:10:90:f7:42:
4b:1d:7c:dd:96:5d:0d:05:54:5b:10:6d:90:64:94:9e:79:76:
73:ea:71:14:a7:1f:80:7c:25:3d:24:30:cd:e4:66:ea:9a:ee:
23:a2:6b:1c:55:7c:78:6a:90:5d:7e:56:0c:fa:c3:56:5b:c2:
f9:4c:01:00:c8:f4:da:7d:80:c5:fe:05:9e:eb:ef:b9:11:0b:
92:f7:b6:de:69:73:17:0a:c1:d6:19:a0:02:bc:fa:55:65:58:
60:30:05:97:75:94:10:51:33:62:a7:47:8d:14:0b:95:79:4e:
9a:2d:6c:f1:d5:a8:63:d9:68:f0:3b:b5:3e:9f:c3:64:7e:6c:
84:0e:d0:84:e9:c8:1d:6a:e9:62:4e:1e:ff:c7:f9:d9:9b:d4:
0a:60:7d:46:c0:0d:e0:12:7a:45:a5:6e:32:95:32:a1:47:e6:
37:87:e8:ef:a8:d0:b4:cf:c4:ca:6c:dc:aa:63:39:d7:8d:19:
1d:a7:e7:53:42:4f:ad:33:ec:b8:95:08:5c:5a:9d:d5:c9:12:
c8:f6:c3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:07 2024 by rpki-client on console-ams.rpki-client.org