Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/qYi71VHIIcmqYdheCSKgUlrtr-c.roa
File: qYi71VHIIcmqYdheCSKgUlrtr-c.roa (raw, json)
Hash identifier: HVbOx5St5DrCWKb4c9i1qtLnM2i40fkAu7sufcH22G4=
Subject key identifier: A9:88:BB:D5:51:C8:21:C9:AA:61:D8:5E:09:22:A0:52:5A:ED:AF:E7
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 01874EA80EE17C68A72F34D34981D94977BA
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/qYi71VHIIcmqYdheCSKgUlrtr-c.roa
Signing time: Tue 04 Apr 2023 23:44:09 +0000
ROA not before: Tue 04 Apr 2023 23:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 185.213.171.0/24 maxlen: 24
185.213.170.0/24 maxlen: 24
185.213.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Apr 2023 19:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:a8:0e:e1:7c:68:a7:2f:34:d3:49:81:d9:49:77:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Apr 4 23:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a988bbd551c821c9aa61d85e0922a0525aedafe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:3c:d7:01:b6:99:a7:2e:90:51:33:93:39:
7e:6a:98:47:bc:d2:84:3b:92:9a:3a:e0:b1:ad:f4:
7e:e3:2a:e2:23:31:4d:0e:40:12:c0:72:21:19:7e:
65:de:a5:16:88:a2:84:26:d8:47:09:28:a2:cb:36:
f0:ba:ce:0b:76:32:bd:7b:5f:5d:0d:82:d0:e9:eb:
ac:52:69:d3:3e:3b:87:a3:c1:cb:81:8e:bb:23:39:
7f:2b:74:a2:50:1a:d6:46:00:ad:5a:02:04:9c:1d:
bc:ff:0c:8a:2b:a0:8d:e2:47:a3:f7:b9:6c:10:f9:
bf:d9:61:26:8c:84:0b:d1:74:76:79:12:90:55:a1:
b0:60:f4:6d:76:9a:5f:c4:79:bf:32:91:5d:65:ef:
b5:22:ce:1d:3b:a7:d0:a5:fe:64:e0:8c:a0:9b:18:
6d:b6:72:90:1e:7f:77:0d:ab:a2:2a:79:d7:8c:bc:
6f:f6:7b:89:85:eb:37:2b:8b:e1:bb:77:ac:c7:73:
c9:5f:58:b6:ad:24:af:8e:75:55:48:de:fc:03:14:
79:79:09:23:32:30:06:63:7c:6c:4d:81:9c:15:bb:
31:7e:d6:a1:37:cf:78:dd:08:c1:ee:7b:58:ee:5a:
5f:57:cb:c9:ac:d5:b2:3c:11:44:d0:cd:f6:cf:f7:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:BB:D5:51:C8:21:C9:AA:61:D8:5E:09:22:A0:52:5A:ED:AF:E7
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/qYi71VHIIcmqYdheCSKgUlrtr-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.169.0-185.213.171.255
Signature Algorithm: sha256WithRSAEncryption
48:bd:c0:ae:d9:a9:64:cc:36:83:10:b0:76:5d:83:fb:11:fc:
ec:89:30:dc:99:64:2c:ac:c6:22:78:62:3d:65:df:4e:5e:36:
36:8a:fb:cf:9b:e0:f3:b7:2a:7a:96:2c:90:bf:b5:78:c5:e0:
26:d3:6b:c6:ac:53:f6:22:22:1f:52:fb:77:d7:9b:99:98:3b:
ec:3e:ba:c7:b5:5a:5b:dd:77:5c:33:22:ac:a9:5a:a5:66:cc:
46:98:a1:fc:56:21:c6:be:12:ec:70:34:90:50:97:ac:a0:69:
07:f3:35:fc:95:4f:20:e5:5b:27:ed:3f:e7:d9:9c:58:bf:3a:
a0:36:23:3b:c7:52:1c:b1:6c:07:e1:2d:0e:b7:aa:51:67:79:
1f:fc:17:01:89:78:68:38:dd:aa:16:48:09:a5:3c:1e:bd:22:
11:cf:fe:ff:5c:42:3f:c2:fe:d0:88:f6:a9:65:73:a0:06:df:
bc:03:75:c1:99:60:5a:1e:21:21:bc:bc:6d:27:74:1f:46:fd:
e0:85:38:99:50:d4:0c:b8:9b:4f:bf:59:56:5b:4c:9a:32:c9:
a4:9d:0a:57:52:ec:fd:29:7e:a0:d5:85:6c:67:6d:fe:b7:cf:
96:df:9c:ce:50:47:65:84:6c:93:08:e0:f3:5e:eb:05:ed:bd:
36:6f:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:02 2024 by rpki-client on console-ams.rpki-client.org