Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/qkZLhOXo1O5zLWLZxrNRBRwIAQk.roa
File: qkZLhOXo1O5zLWLZxrNRBRwIAQk.roa (raw, json)
Hash identifier: QUPvQTK+QgXI9gDRas4UT2N4Hhs00mS5+INDnzh1awE=
Subject key identifier: AA:46:4B:84:E5:E8:D4:EE:73:2D:62:D9:C6:B3:51:05:1C:08:01:09
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AEB15E78B8F3DA4443A17D5EE80C9
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/qkZLhOXo1O5zLWLZxrNRBRwIAQk.roa
Signing time: Sun 01 Jan 2023 11:15:10 +0000
ROA not before: Sun 01 Jan 2023 11:15:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51562
IP address blocks: 85.143.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:eb:15:e7:8b:8f:3d:a4:44:3a:17:d5:ee:80:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa464b84e5e8d4ee732d62d9c6b351051c080109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:8a:b4:79:ed:60:03:dd:fc:64:ab:7d:da:
62:9a:f6:7b:d1:66:43:73:3c:9c:43:5d:0b:9f:93:
79:98:36:37:d4:30:87:6e:6c:33:91:3c:37:1f:66:
73:b7:1e:e3:b2:cb:6b:5b:b9:a0:23:bf:2e:8f:5b:
06:ed:dd:ee:d7:4d:ed:f2:1a:37:db:77:4c:2b:69:
4d:52:f9:ec:c0:7f:59:a2:df:15:7a:a7:8c:d4:a3:
57:f7:f1:77:a5:b3:b8:a1:64:67:de:c5:c2:86:79:
67:77:17:b8:ec:f7:c9:ee:08:93:da:76:4e:51:b7:
dd:9b:8a:ad:25:a0:1d:6a:90:f1:1d:dc:cb:10:71:
52:1c:37:15:2f:3c:95:57:f3:f4:17:dd:40:f0:df:
24:a3:8e:42:e2:9d:80:ab:79:f7:a1:3d:ef:3d:4f:
0f:86:36:6b:e4:c5:50:b2:1d:17:a2:b4:af:77:52:
34:ef:fb:81:62:cc:fc:b5:41:df:ee:ce:c8:45:9f:
e5:03:c4:8a:3c:f5:a3:85:ba:36:06:b1:35:6c:9d:
6f:80:d9:59:6f:ec:50:69:62:e0:ae:22:95:28:8f:
fe:0c:e2:c2:74:4c:67:49:56:1c:65:63:aa:c6:b9:
9f:8b:74:b4:40:0b:ed:aa:58:c9:4e:18:cc:b2:ef:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:4B:84:E5:E8:D4:EE:73:2D:62:D9:C6:B3:51:05:1C:08:01:09
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/qkZLhOXo1O5zLWLZxrNRBRwIAQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ca:e1:0c:4b:63:c9:a6:e7:c9:ba:21:1c:7f:f9:33:3d:17:
15:92:fb:68:5b:30:e3:b2:60:69:c7:3e:e0:32:8b:a0:e9:8f:
f5:07:13:0b:cd:ac:1c:34:8e:b5:ad:1a:03:d1:8b:f4:ed:d7:
b8:42:21:30:8c:75:b4:21:ed:06:e7:8d:e3:b5:40:78:d6:a9:
78:a8:c1:a4:b4:7a:c2:47:6c:d5:61:67:f7:58:9e:c7:aa:c2:
ec:30:c0:00:c9:1f:49:75:70:14:2d:4a:e9:1f:14:ac:69:8c:
dc:a1:81:a9:ad:8c:c7:49:2b:e1:70:d1:8e:47:dc:3b:f1:f8:
51:92:2c:d4:f9:ae:5d:82:9a:53:90:ce:df:38:df:00:06:c6:
8f:73:45:a5:87:d3:6a:f1:f2:3f:e6:3b:f4:ab:b1:01:5b:ed:
05:15:f8:98:76:18:97:ec:00:d5:a9:71:77:c2:31:8b:a6:ed:
cc:31:d4:f3:9b:13:f4:1a:04:d7:0b:ca:16:23:a5:3e:30:70:
1e:54:70:86:9c:50:bb:e9:8b:64:f0:0a:90:b3:74:a5:98:a6:
ac:fe:6e:20:90:00:07:fa:42:77:8e:f4:29:36:1a:68:24:3b:
2a:23:c0:dc:5a:04:25:20:e3:81:bd:79:46:80:76:ca:df:0d:
ae:54:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org