Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qtJAmPtUYXRMoXYJH1ZqEUeNuow.roa
File: qtJAmPtUYXRMoXYJH1ZqEUeNuow.roa (raw, json)
Hash identifier: ud2UPhemM3UhYxoBcozf2wkndKV1vcSXeQTNwBASs+A=
Subject key identifier: AA:D2:40:98:FB:54:61:74:4C:A1:76:09:1F:56:6A:11:47:8D:BA:8C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0185C5233F7DFC50657A3488E6E4A6AC514D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qtJAmPtUYXRMoXYJH1ZqEUeNuow.roa
Signing time: Wed 18 Jan 2023 13:48:19 +0000
ROA not before: Wed 18 Jan 2023 13:48:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.208.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:23:3f:7d:fc:50:65:7a:34:88:e6:e4:a6:ac:51:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 18 13:48:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aad24098fb5461744ca176091f566a11478dba8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:57:2e:6d:16:aa:92:40:18:57:7d:a1:88:
d2:9b:9b:69:60:0f:b0:c4:80:57:f6:34:ce:14:fb:
ab:01:52:8d:63:c8:a1:68:55:42:ea:eb:61:a8:ef:
b1:fa:e8:44:76:5e:dd:6b:3a:df:96:97:f4:99:84:
e3:16:3b:6d:0b:fe:e6:18:61:71:98:82:1f:f5:78:
2a:f7:69:30:12:34:3d:a2:a0:0c:c7:39:34:4a:c8:
d8:ab:eb:20:42:65:3b:c7:64:4d:94:39:31:6d:bb:
99:e2:c1:26:14:a4:fe:b1:c3:89:d4:05:92:e7:fe:
a5:03:87:cf:2f:e5:d2:42:33:4b:9f:d7:fd:92:30:
b7:a7:ab:da:8f:df:1c:14:84:4f:6a:de:48:c5:98:
f0:7c:91:0f:fa:60:59:01:06:36:c4:c9:da:81:d3:
80:e4:90:1e:04:6b:03:34:28:00:0e:9e:77:1d:6d:
71:a5:0a:87:d9:49:86:95:0f:3f:1c:cf:6f:76:9e:
2f:75:86:96:b9:25:79:d0:da:b1:97:07:1b:8b:56:
29:7b:a9:25:31:5a:18:b0:13:fa:12:3b:63:92:92:
34:45:11:81:e6:fd:d8:e4:f8:f1:46:d3:b1:e6:a1:
f9:9e:90:83:cb:f8:88:a8:9e:c9:c4:7c:c4:a7:af:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D2:40:98:FB:54:61:74:4C:A1:76:09:1F:56:6A:11:47:8D:BA:8C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qtJAmPtUYXRMoXYJH1ZqEUeNuow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:e8:a2:f7:7b:40:ab:1c:c3:4d:ad:fd:1f:da:de:3b:5d:a9:
f2:3d:5c:c8:c9:33:89:73:d1:57:81:68:51:31:2c:13:4c:84:
33:55:c6:57:08:80:a3:16:d8:d8:7a:b1:48:0c:dc:2b:f2:31:
9a:f0:d3:cf:f2:83:e8:28:0e:37:81:43:2e:88:ea:b0:f1:9e:
ff:06:49:48:11:86:da:b6:08:17:53:65:ab:62:87:c4:88:63:
4b:19:f9:90:b1:7b:84:69:01:86:da:da:a4:ad:55:50:7d:80:
fa:d5:4d:18:16:b4:0e:be:bb:41:15:35:4b:bc:02:91:90:f5:
a3:2d:45:41:5a:13:f4:c8:d0:88:72:fd:c9:fb:5b:fc:c2:e4:
34:2d:30:6c:39:0f:20:72:1a:fb:07:0f:f8:b5:2a:74:18:7e:
21:d1:a4:24:23:3f:9a:f1:72:71:3e:c9:e6:cc:a4:bf:da:cb:
90:b9:52:63:9c:d8:a6:97:f4:f6:f9:a0:20:08:f6:08:04:83:
93:1d:f1:16:c3:2e:6e:2d:c5:2a:fe:7b:cf:4b:18:c5:ad:9a:
aa:df:f2:4c:bc:11:b8:0b:fd:73:eb:eb:7f:a7:9b:ed:7f:bd:
bb:0d:47:f1:da:8f:78:2a:b3:0c:30:60:e7:5f:c9:b3:82:4c:
0c:2d:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org