Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/qym8Lei0SWwoKRuChh5ck2kv1To.roa
File: qym8Lei0SWwoKRuChh5ck2kv1To.roa (raw, json)
Hash identifier: h9Y/+2vvVE+pd5lb04a9rqoMsPIelAqDky+sUv6kmCs=
Subject key identifier: AB:29:BC:2D:E8:B4:49:6C:28:29:1B:82:86:1E:5C:93:69:2F:D5:3A
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 0185707064A1C7E649AA7DC3FAE03C90CCD1
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/qym8Lei0SWwoKRuChh5ck2kv1To.roa
Signing time: Mon 02 Jan 2023 03:04:52 +0000
ROA not before: Mon 02 Jan 2023 03:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204615
IP address blocks: 185.225.113.0/24 maxlen: 24
185.225.114.0/23 maxlen: 23
2a13:2a00:2::/48 maxlen: 48
2a13:2a00::/48 maxlen: 48
2a13:2a00:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:64:a1:c7:e6:49:aa:7d:c3:fa:e0:3c:90:cc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Jan 2 03:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab29bc2de8b4496c28291b82861e5c93692fd53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:c1:d0:c3:72:3b:ac:a4:77:24:85:5f:91:
fc:aa:85:3a:0a:fc:15:08:01:b9:b8:e4:76:c7:20:
b9:87:c9:7b:38:36:b3:73:e6:79:7a:b0:ef:83:4f:
a0:7e:72:e6:a0:7d:48:8f:fb:d6:70:a3:04:3e:39:
be:e4:4a:13:a6:da:b2:34:18:ca:62:f1:2f:b9:1d:
53:7c:0e:e8:96:81:48:60:80:63:41:a8:b1:fb:f9:
77:eb:f7:cc:f9:72:77:49:01:a7:de:95:c9:6d:aa:
c7:ea:b0:05:34:27:87:00:90:90:55:5f:29:87:bf:
2d:46:88:6b:67:82:88:35:41:27:b3:25:74:da:7f:
0b:fa:09:6a:99:82:cc:5b:e5:77:4c:24:ec:7e:3d:
99:59:a0:46:73:43:c3:f4:a7:89:19:a3:c8:05:f1:
be:fa:ef:a3:86:1d:5c:ba:d7:32:cb:ba:4a:fb:c3:
23:a1:ff:33:d3:8f:0d:6b:35:d9:00:88:b5:74:b6:
30:1d:b5:fa:19:a2:ea:34:b8:a5:76:f9:82:de:b1:
bc:31:68:73:72:32:d8:41:f7:54:1d:6e:ae:7f:67:
00:0b:47:d9:26:51:e1:14:c2:63:75:39:6c:fa:39:
0c:d0:d7:f9:ba:80:94:71:ef:d0:7e:18:a2:9b:12:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:29:BC:2D:E8:B4:49:6C:28:29:1B:82:86:1E:5C:93:69:2F:D5:3A
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/qym8Lei0SWwoKRuChh5ck2kv1To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.113.0-185.225.115.255
IPv6:
2a13:2a00::-2a13:2a00:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:a7:75:5b:43:84:47:e0:b0:80:2c:e8:89:51:18:c1:69:c5:
92:54:2e:6f:2f:aa:54:12:31:ba:d8:15:3c:e6:84:38:bc:57:
41:a5:e0:34:00:ba:62:92:22:48:fb:e9:44:8f:c4:e0:c9:bd:
1e:fa:97:98:83:74:06:99:1f:d6:ac:01:b4:9a:62:8a:db:ac:
83:91:f8:0f:75:c8:4e:26:a3:0a:2f:1d:72:dd:fc:65:28:c5:
7b:7e:fb:68:16:69:28:b6:64:ab:99:ec:0b:1e:6f:fb:f5:25:
57:66:f7:39:cc:d5:57:cd:2e:73:15:80:d5:04:21:2b:b0:1c:
f1:7f:9e:51:30:9e:97:f1:35:be:61:78:0c:62:49:86:b2:58:
4f:81:59:f1:cd:3a:45:2e:25:3b:95:a6:ad:53:6b:84:89:39:
5d:2d:c6:92:3f:63:67:c4:63:69:fc:19:f5:51:56:d4:ca:ad:
aa:a1:45:17:6e:e0:72:94:a3:21:77:b0:ee:09:41:ef:b0:56:
bc:4d:56:68:e8:ad:ec:44:08:64:4b:8d:aa:97:58:97:94:22:
f8:28:1f:d0:b4:7c:0b:fb:96:1f:3a:1e:8c:fc:53:da:10:79:
92:b1:55:cd:a3:9d:82:58:13:1a:f6:6b:cf:d2:dd:a2:f1:44:
18:b8:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:23 2024 by rpki-client on console-fra.rpki-client.org