Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/qwlgwSoxevoLl6ok40ETHpgcUHI.roa
File: qwlgwSoxevoLl6ok40ETHpgcUHI.roa (raw, json)
Hash identifier: aGB3r9ZsMuzd/+vizWVJl0B+pR6I9gxq+UKVpVOtFxA=
Subject key identifier: AB:09:60:C1:2A:31:7A:FA:0B:97:AA:24:E3:41:13:1E:98:1C:50:72
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 01856BEED36C01871C8C32728B1C1F4F95A8
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/qwlgwSoxevoLl6ok40ETHpgcUHI.roa
Signing time: Sun 01 Jan 2023 06:04:51 +0000
ROA not before: Sun 01 Jan 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48954
IP address blocks: 185.220.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d3:6c:01:87:1c:8c:32:72:8b:1c:1f:4f:95:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Jan 1 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab0960c12a317afa0b97aa24e341131e981c5072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:0f:81:bf:74:fb:0b:69:2e:e2:f8:10:d2:
1d:b2:41:ac:79:2d:46:d9:d9:25:5b:ba:6c:95:55:
a6:48:8e:5a:f5:0a:d3:9a:96:48:06:ce:b0:bf:b3:
79:2b:db:0b:f1:70:74:89:79:2e:1a:22:c6:ad:96:
df:21:8c:2a:b1:32:34:e5:6f:90:4d:ff:0d:fa:e0:
69:35:25:dc:99:e6:91:cb:9c:b2:37:15:a9:e8:82:
84:15:b4:ce:3a:45:38:46:7d:1a:17:45:7c:c0:dc:
70:c3:d2:78:6c:fb:b0:03:5c:7f:79:25:51:b8:3f:
e3:58:d5:5b:1f:78:31:5a:b5:d4:b0:a0:27:0c:c3:
e2:34:35:d5:8d:f2:30:1d:ad:f5:3b:25:57:5f:3d:
2d:2f:10:fd:2f:51:7e:28:6a:db:36:c5:5c:61:bb:
6a:71:8c:1f:a7:9c:27:f6:c4:e1:bc:44:b9:f9:92:
6f:bd:e3:c2:95:d4:d0:9d:b4:42:ea:2d:95:48:ac:
df:77:c0:5d:20:5b:79:0e:54:13:3e:71:bd:6c:7b:
de:cd:c3:a4:eb:d7:39:26:9e:a4:29:cb:c6:9e:80:
98:b9:11:ae:62:27:4e:4d:c8:84:39:86:92:34:e5:
3d:fd:ce:32:f9:57:57:07:8c:c1:25:b9:3f:44:f6:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:09:60:C1:2A:31:7A:FA:0B:97:AA:24:E3:41:13:1E:98:1C:50:72
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/qwlgwSoxevoLl6ok40ETHpgcUHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.91.0/24
Signature Algorithm: sha256WithRSAEncryption
96:85:6e:99:f8:9a:e5:36:30:69:83:c2:87:cf:9b:68:66:68:
13:51:84:be:f6:31:24:e5:f4:02:f2:e1:c7:66:af:42:08:d6:
4f:79:2e:d4:ed:dd:28:ef:0f:9b:2f:b7:59:1a:1f:9b:2b:1a:
fe:fa:24:0d:cc:33:d9:22:c5:d2:97:70:e1:c5:5f:84:c1:9d:
58:b9:33:3c:6a:ce:fb:f2:c6:ef:1b:72:3f:41:3b:42:98:b4:
e3:c0:6d:22:b5:e6:32:84:2a:24:63:96:fa:37:4d:4d:0d:04:
ed:34:af:65:9b:04:b0:f0:76:cf:32:b0:5e:01:b1:7a:b2:af:
44:96:f3:46:c9:16:47:ae:26:f7:ed:c2:3e:a1:09:1a:7f:fe:
8b:17:1c:16:b6:1d:3a:0f:7f:ea:90:55:45:49:aa:70:0a:99:
9d:82:66:d5:65:70:44:81:96:7f:0d:ea:6c:c6:58:8e:0b:c8:
18:58:5a:c8:1c:d3:2e:be:8d:c4:aa:ef:e6:19:4c:f6:ff:1f:
0b:4e:80:93:8f:a8:4c:fc:02:13:83:d2:c7:85:e3:ce:1b:24:
06:4b:c4:2d:47:62:e6:b9:92:95:76:88:d4:9d:85:3f:3d:80:
7a:bd:ec:12:3b:15:2d:f1:41:48:55:55:9d:8c:4b:57:d7:c5:
5b:5f:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:11 2024 by rpki-client on console-ams.rpki-client.org