Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/QSW3c2QPVxBgUIUbB3Q3WcZ0PGs.roa
File: QSW3c2QPVxBgUIUbB3Q3WcZ0PGs.roa (raw, json)
Hash identifier: yXyj3Ay6M96nY9Z87eH8MMZt430Z9agkPSyTEhYlh8c=
Subject key identifier: 41:25:B7:73:64:0F:57:10:60:50:85:1B:07:74:37:59:C6:74:3C:6B
Certificate issuer: /CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Certificate serial: 018570FBC8EAA37D21341E4AB9B5220FF0F0
Authority key identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/QSW3c2QPVxBgUIUbB3Q3WcZ0PGs.roa
Signing time: Mon 02 Jan 2023 05:37:07 +0000
ROA not before: Mon 02 Jan 2023 05:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61081
IP address blocks: 185.24.72.0/22 maxlen: 24
2a04:2ac0::/29 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:c8:ea:a3:7d:21:34:1e:4a:b9:b5:22:0f:f0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Validity
Not Before: Jan 2 05:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4125b773640f57106050851b07743759c6743c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:a2:dd:fa:2a:29:ab:ba:16:84:71:52:7e:
a6:fa:6a:cd:c9:1b:2b:f2:0a:71:f0:c6:b6:a9:73:
e9:d5:35:9b:7b:06:4a:79:fc:31:40:3c:78:fb:d9:
42:7e:c0:f0:8c:d2:37:dc:f0:70:aa:ec:c2:9e:63:
f3:93:5a:ff:62:db:95:0e:a6:65:6c:3e:f0:4a:c2:
54:6b:bb:ad:26:14:74:f5:89:2b:39:4e:f0:c7:25:
c5:17:09:98:44:93:02:67:c3:36:12:95:89:8f:bd:
63:0e:31:86:57:35:ff:a1:bb:18:9c:60:04:52:d6:
df:9f:ff:9c:76:80:0e:a1:ad:c5:d7:1d:2a:a1:36:
d1:e7:00:e9:bc:9b:98:fd:3d:19:46:ea:61:98:a2:
d5:c1:78:9e:8a:91:61:6f:cc:9e:33:25:3b:7f:b9:
3c:b6:96:56:d8:32:15:aa:60:67:1b:70:e8:40:c9:
78:c8:a3:79:31:69:1d:ef:d3:ac:45:34:e5:bd:45:
51:35:3d:15:61:10:4e:84:c1:57:d9:ec:cc:75:db:
b6:47:31:c3:04:e1:d2:24:c1:57:15:1b:3a:70:44:
57:ec:10:5d:dd:a2:4a:6f:7a:bc:e6:09:46:33:9c:
e9:f1:3d:d7:14:3d:0d:58:4a:f3:c8:3c:84:c1:44:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:B7:73:64:0F:57:10:60:50:85:1B:07:74:37:59:C6:74:3C:6B
X509v3 Authority Key Identifier:
keyid:65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/QSW3c2QPVxBgUIUbB3Q3WcZ0PGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.72.0/22
IPv6:
2a04:2ac0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:13:13:85:93:cd:cd:36:10:44:d2:4d:77:1b:0f:15:f3:fa:
50:08:c4:51:78:fd:3f:d1:02:c2:96:d6:16:83:57:ef:2c:97:
63:28:07:9c:eb:bf:a4:17:46:a0:30:6f:a4:7d:18:83:b0:d5:
80:a9:50:dd:f3:d3:48:12:9a:f4:ad:6a:90:7b:27:8e:41:1f:
c2:a9:25:5e:c1:57:72:66:95:71:5d:30:5d:0d:a2:43:27:34:
f4:b3:e6:50:84:58:23:6c:98:8f:67:62:7a:a4:17:a3:ca:3f:
6c:4e:09:80:21:f4:bb:c0:3f:ea:50:ca:d8:c0:08:26:0c:69:
a3:29:1f:a7:0b:63:96:78:21:fd:54:ac:cd:b1:4c:04:bc:7b:
84:49:5c:56:e5:7d:73:dc:6c:88:19:d0:2a:9b:d0:a9:ab:26:
c9:9c:26:c6:4f:2a:a5:42:dd:37:2f:15:63:c7:0a:7c:65:ec:
3e:02:3d:97:2e:7f:3f:ba:61:ac:71:30:09:df:9a:b6:ad:4c:
90:d6:66:07:9e:8a:dc:87:d0:df:73:d6:4c:21:8e:5f:d3:a3:
fb:90:9d:3f:f1:7f:b7:6f:e0:b5:f4:1e:02:e6:5a:2c:d2:27:
b3:cc:f1:af:36:31:0e:bd:29:99:5a:5e:c0:6b:ac:2c:e5:35:
7c:6b:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:45 2024 by rpki-client on console-ams.rpki-client.org