Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/QCtE0LyyL2TXy1UU45clUYw9RQE.roa
File: QCtE0LyyL2TXy1UU45clUYw9RQE.roa (raw, json)
Hash identifier: 0dCEhEXWROlnUN85EXXAz76kjMwXmkqvACLQ3tTev5Q=
Subject key identifier: 40:2B:44:D0:BC:B2:2F:64:D7:CB:55:14:E3:97:25:51:8C:3D:45:01
Certificate issuer: /CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Certificate serial: 0185F29A20267C31CB67A4FDFE747AF750BF
Authority key identifier: A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/QCtE0LyyL2TXy1UU45clUYw9RQE.roa
Signing time: Fri 27 Jan 2023 09:41:04 +0000
ROA not before: Fri 27 Jan 2023 09:41:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35486
IP address blocks: 185.79.29.0/24 maxlen: 26
185.79.28.0/24 maxlen: 24
185.79.30.0/23 maxlen: 26
Validation: Failed, certificate revoked on Wed 22 Nov 2023 11:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:9a:20:26:7c:31:cb:67:a4:fd:fe:74:7a:f7:50:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Validity
Not Before: Jan 27 09:41:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=402b44d0bcb22f64d7cb5514e39725518c3d4501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:14:df:d5:d9:af:3b:0f:47:a9:4d:8a:b7:
65:1c:fc:33:7e:5d:3a:4c:37:1a:ff:fc:f2:8f:de:
30:22:05:d6:7b:bb:77:93:1a:35:05:7d:f0:9d:d6:
09:fc:b9:77:77:5b:88:2a:3b:ca:34:94:6c:cc:bb:
45:9b:b2:18:05:7a:42:9c:bf:25:0a:4d:50:5e:a5:
80:44:5f:ae:e0:53:6b:2f:10:20:ac:a6:e6:35:4f:
29:4d:60:f7:f0:13:32:d4:bb:9d:93:00:cf:cf:82:
4a:4e:93:b4:25:2b:d1:3e:3b:c6:44:5f:c1:b7:6c:
0f:2b:78:5a:c4:5f:9a:3d:d2:0c:5d:12:92:e9:09:
37:b9:34:5d:27:69:e0:6d:06:44:4a:94:5e:b2:49:
00:44:43:f6:79:3b:3b:33:0f:94:d8:97:87:f6:36:
2f:c3:91:af:92:6d:b4:b5:4c:d8:6a:b6:48:dc:96:
91:35:94:6c:4e:3e:96:7e:89:f0:e9:b7:d0:54:28:
a0:80:8e:da:f2:b3:25:b1:f0:95:68:6b:29:ad:d4:
4e:cb:21:a0:d3:9a:68:08:0a:66:4a:d7:f5:eb:7f:
04:6a:a5:0c:9f:d4:3e:e2:be:13:c2:59:44:10:84:
9a:40:e8:67:5a:bb:a8:4a:cb:75:9b:18:50:85:cc:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:44:D0:BC:B2:2F:64:D7:CB:55:14:E3:97:25:51:8C:3D:45:01
X509v3 Authority Key Identifier:
keyid:A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/QCtE0LyyL2TXy1UU45clUYw9RQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.28.0/22
Signature Algorithm: sha256WithRSAEncryption
02:fe:77:1b:0c:6d:fc:8a:4e:a3:11:4f:10:50:3e:1b:88:02:
0c:7e:f3:27:4a:dc:4d:35:00:50:9b:18:7c:f8:21:6a:82:2d:
a3:ed:a3:0f:c1:99:dc:fc:4c:ef:c4:94:ca:85:1e:30:46:47:
e1:b1:36:5c:f3:c9:b8:f7:f2:46:f2:e0:40:b7:3d:0c:eb:33:
98:ba:38:cd:2a:07:83:7c:d1:fd:b1:58:8a:81:30:84:f3:80:
ae:fb:7e:ac:a3:c2:0e:9c:88:cc:ef:99:06:74:43:fb:32:59:
45:e8:8e:f4:ac:aa:20:5c:cc:64:ee:56:66:1d:4c:23:1e:f9:
95:11:10:79:08:40:32:c1:a9:4f:d5:81:fc:e3:e5:1b:b8:32:
8d:eb:f4:af:0f:88:98:9a:82:6a:b6:b9:89:11:94:95:d3:5e:
41:c9:37:51:4d:26:da:25:0d:bb:f6:bb:fd:9d:86:e9:ee:ca:
c0:11:7e:5f:f0:11:31:0a:fe:32:14:c3:e6:3f:66:1e:03:9d:
fe:bb:bd:a6:b8:12:84:68:72:bb:f4:1b:f9:d3:43:9f:2a:43:
a4:7d:4c:71:f0:a4:0d:2e:94:5d:c2:5a:0b:63:5a:b1:4e:66:
ab:7a:df:be:fe:6a:7d:96:a7:aa:5c:46:50:de:31:9f:06:c5:
87:29:48:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:43 2024 by rpki-client on console-fra.rpki-client.org