Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/qMZSm0p712WfpfS37A8eS-E7Xe4.roa
File: qMZSm0p712WfpfS37A8eS-E7Xe4.roa (raw, json)
Hash identifier: G3bNS+ouJMf4HlBWO1Jm+SRR4vZRLugz7XSCbgmki5k=
Subject key identifier: A8:C6:52:9B:4A:7B:D7:65:9F:A5:F4:B7:EC:0F:1E:4B:E1:3B:5D:EE
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 018572280D873ED0936EC95F1FC9E05E1039
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/qMZSm0p712WfpfS37A8eS-E7Xe4.roa
Signing time: Mon 02 Jan 2023 11:05:05 +0000
ROA not before: Mon 02 Jan 2023 11:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202918
IP address blocks: 185.246.28.0/23 maxlen: 23
185.150.156.0/22 maxlen: 22
2a0d:7380::/29 maxlen: 29
2a07:71c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:0d:87:3e:d0:93:6e:c9:5f:1f:c9:e0:5e:10:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Jan 2 11:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8c6529b4a7bd7659fa5f4b7ec0f1e4be13b5dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:87:7e:9a:43:99:8d:38:74:a6:70:49:21:
78:29:6e:20:9d:62:18:1e:96:2f:e7:69:11:08:61:
48:56:85:b4:a5:ef:e2:b4:90:d4:a8:46:d9:c0:ce:
95:7d:5b:9c:d4:83:dd:0f:0b:1c:7d:1f:4f:01:a7:
27:fe:c2:2b:a6:5c:a0:1d:54:f8:f3:e5:82:3a:67:
8c:35:81:4b:4c:34:90:b4:ee:36:a9:ee:07:3e:ee:
d8:31:2b:b0:b3:5c:26:dc:51:2a:96:cb:f9:b1:b5:
64:d1:8e:c2:79:d9:c7:cc:26:25:3e:7e:a2:90:34:
d5:a7:ff:3e:7f:85:1b:2d:24:08:fd:19:9f:38:8f:
58:7a:4d:f1:12:dc:2b:d4:22:a5:7c:62:3c:2b:ad:
41:0e:85:65:fb:a2:a6:d1:90:0c:4c:ad:ac:e8:c0:
80:da:07:00:2a:41:8f:69:91:e8:8f:a0:43:01:e5:
7f:8d:5b:d7:7b:4e:9a:03:d9:03:e2:5d:32:65:2c:
34:e8:22:d9:4b:c0:c2:a0:bc:f3:76:b7:29:94:f3:
9d:f0:53:c0:db:ca:28:4e:f9:91:8e:15:7e:f9:04:
55:ad:d0:81:ec:25:29:dd:67:66:62:8b:bd:f5:26:
03:5b:bb:32:bb:bc:3a:3e:50:6e:52:fd:bd:26:b6:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C6:52:9B:4A:7B:D7:65:9F:A5:F4:B7:EC:0F:1E:4B:E1:3B:5D:EE
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/qMZSm0p712WfpfS37A8eS-E7Xe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.156.0/22
185.246.28.0/23
IPv6:
2a07:71c0::/29
2a0d:7380::/29
Signature Algorithm: sha256WithRSAEncryption
4b:6c:36:08:e9:00:3b:aa:fe:33:80:09:df:2d:58:52:0d:3f:
44:95:32:8a:fd:61:69:f5:59:5c:f1:5c:7c:cb:53:b5:bb:69:
45:b6:45:a7:8a:86:a1:b7:b5:2d:9b:8d:1d:cd:f4:78:28:28:
62:b3:78:c6:cd:94:6e:1a:a6:b0:28:85:c6:fe:a9:92:85:74:
0e:7c:7b:b0:7a:02:ac:cd:ce:00:13:b4:20:74:38:15:61:b4:
ce:91:49:ff:a7:30:b9:20:a6:e4:a3:44:14:24:fa:ff:16:c0:
23:d8:f6:78:5e:f2:ca:cf:ed:46:3b:b4:ad:e2:8c:f1:2a:c7:
e9:ab:15:ea:d0:7b:9a:41:53:63:47:81:02:a5:65:90:ba:cd:
be:df:61:4e:69:4d:f1:15:79:bf:09:7e:f4:ec:8f:8e:e7:3e:
1b:fc:c0:53:b4:04:e9:89:07:a6:f2:dd:ba:ef:1a:4a:86:b7:
d4:c9:16:c7:69:89:38:bf:dd:42:ef:fb:ad:0f:7c:6e:de:26:
89:52:5b:c5:73:6a:cd:24:99:2f:5d:61:c4:c7:90:fc:e7:68:
0e:6e:40:07:10:7e:60:18:ee:4e:6d:d1:d2:bc:6c:88:84:79:
aa:ab:ca:52:fc:dc:ff:4d:25:9e:02:3e:b8:d2:c9:a9:0e:9f:
33:9b:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:12 2024 by rpki-client on console-ams.rpki-client.org