Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/QOWhGgMmUnBoyy4vzwm5LpkB3Mc.roa
File: QOWhGgMmUnBoyy4vzwm5LpkB3Mc.roa (raw, json)
Hash identifier: mEQ1XVExCle1d+6gfGPRbRkI944+etdFBLZL2OtfmP4=
Subject key identifier: 40:E5:A1:1A:03:26:52:70:68:CB:2E:2F:CF:09:B9:2E:99:01:DC:C7
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 018CC794C9466057703D6DBA923F636EA0B6
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/QOWhGgMmUnBoyy4vzwm5LpkB3Mc.roa
Signing time: Tue 02 Jan 2024 00:31:05 +0000
ROA not before: Tue 02 Jan 2024 00:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136744
IP address blocks: 185.192.22.0/24 maxlen: 24
185.192.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 09:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:c9:46:60:57:70:3d:6d:ba:92:3f:63:6e:a0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jan 2 00:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40e5a11a0326527068cb2e2fcf09b92e9901dcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:84:33:50:af:8e:96:59:dd:55:e1:e2:f4:
6d:26:f7:39:3d:35:69:95:2f:b1:67:39:41:ea:8d:
21:f3:ff:66:f0:fc:f9:3d:9d:af:32:c6:9a:1a:85:
60:30:e2:5d:35:56:c9:7d:90:0d:dc:1c:0b:53:28:
0c:33:92:d1:04:55:0a:fb:a5:82:40:78:65:17:0c:
d4:b4:fd:e2:c0:53:a4:37:45:67:b8:44:7d:07:bc:
8d:dc:cf:81:a6:90:96:4a:38:5a:56:fe:b0:94:33:
51:a6:fc:5b:ce:18:c4:bd:f0:a4:6c:44:41:86:14:
50:f9:7c:9b:5c:5b:2b:80:eb:1b:b6:0d:3f:5a:bf:
8b:12:eb:ee:a7:a6:15:77:a1:55:ec:6c:2a:5d:e6:
e4:64:97:1b:09:66:6f:81:7c:58:aa:fe:e1:67:c0:
43:59:61:85:2b:15:a6:3f:3f:c5:0e:46:6b:83:43:
54:82:fb:70:8f:7f:e3:3f:e6:1f:8d:f0:70:82:71:
d0:78:1b:ad:65:7f:1d:55:77:e2:f5:57:4f:47:08:
3b:cf:05:c9:18:69:72:82:c5:84:32:de:05:6b:c4:
ac:b8:7e:c1:28:cf:d5:39:6b:ff:bd:f9:51:ab:a3:
db:9d:25:c8:84:98:f9:40:03:ce:52:ec:71:78:91:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E5:A1:1A:03:26:52:70:68:CB:2E:2F:CF:09:B9:2E:99:01:DC:C7
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/QOWhGgMmUnBoyy4vzwm5LpkB3Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.22.0/23
Signature Algorithm: sha256WithRSAEncryption
89:f3:0c:2d:53:45:b9:b0:e3:ae:93:75:04:78:61:7f:fc:a8:
08:12:4a:d2:e3:6c:41:57:0d:69:36:3d:9b:33:ec:c1:37:20:
b5:2c:59:64:3f:a9:3a:f3:31:59:a2:0d:c2:bc:cb:07:f4:05:
a1:f3:55:07:ba:a2:6c:01:6a:24:ab:40:54:8f:6d:ab:5d:aa:
2f:6d:a5:62:12:cb:da:6b:e2:15:96:3a:1b:d8:69:39:95:c0:
64:9d:6a:c6:24:52:fc:b9:ba:f4:07:34:1a:cc:dc:00:af:10:
2f:1e:7e:6b:5f:fa:43:82:21:0e:8c:21:24:b0:06:0e:ff:2d:
aa:69:65:89:eb:c2:7c:99:8a:28:f3:eb:0b:dc:b5:28:07:84:
9d:53:f2:0f:18:b8:33:86:b9:f4:0a:f5:b1:4c:c4:ea:09:f7:
c8:43:af:a2:1f:f8:47:73:b9:72:7d:1d:40:69:5b:41:88:0b:
e8:af:51:66:eb:ba:6d:35:da:7b:d8:44:8b:94:93:e8:bc:32:
ba:57:7d:c2:37:25:c9:c7:16:49:b6:bc:e2:9d:33:bb:6c:6d:
c1:e3:a6:15:12:f4:35:e6:7b:91:57:2b:0b:e5:1f:12:b3:20:
3f:8b:47:46:9e:32:46:d0:a1:74:25:bd:ad:e8:60:de:3f:22:
16:fc:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org