Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/qgJo8U648ysA2ZKayNAlYGIaKzE.roa
File: qgJo8U648ysA2ZKayNAlYGIaKzE.roa (raw, json)
Hash identifier: WmCDud3dF9zARw1ZGikF9YD5KSZ03XsudD+AYskfPeg=
Subject key identifier: AA:02:68:F1:4E:B8:F3:2B:00:D9:92:9A:C8:D0:25:60:62:1A:2B:31
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 01861DDB7FE702C4338AC2083AB0CEE1A609
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/qgJo8U648ysA2ZKayNAlYGIaKzE.roa
Signing time: Sat 04 Feb 2023 19:16:09 +0000
ROA not before: Sat 04 Feb 2023 19:16:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203735
IP address blocks: 185.239.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1d:db:7f:e7:02:c4:33:8a:c2:08:3a:b0:ce:e1:a6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Feb 4 19:16:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa0268f14eb8f32b00d9929ac8d02560621a2b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2b:f2:86:36:5e:71:22:24:43:94:85:5c:14:
d3:25:fc:06:c0:fe:f3:c6:59:66:ab:4b:30:15:da:
fd:9c:bd:74:da:0e:2b:3d:96:99:38:98:95:3c:48:
09:6b:6b:4a:60:e7:59:61:70:5b:8d:3f:a2:cc:ea:
54:1b:8c:ec:a4:c2:87:96:5f:46:95:89:e1:57:d4:
73:4c:69:db:10:fd:19:22:43:77:0e:fd:11:51:91:
65:7e:b4:bd:7e:91:a7:ae:2a:a6:16:06:61:e5:65:
28:bd:0c:11:5c:e9:30:7e:d0:ba:fe:9d:5d:be:5c:
9c:e3:2e:2e:67:2e:10:87:7a:19:29:34:67:ef:fd:
36:e1:5d:b3:a7:56:f6:9b:a2:c3:c0:dd:77:91:73:
b3:54:d5:f0:b0:13:35:79:18:ec:97:00:0c:a5:6d:
7a:21:2c:e8:5e:99:fe:fd:48:95:fb:24:34:b7:c1:
61:fa:c8:36:0c:d6:cf:d9:d8:0b:a3:7f:1c:84:34:
c0:3c:34:2c:12:e2:b5:02:4a:30:0b:72:86:02:61:
0c:e8:76:58:be:b6:34:bc:e3:7e:34:a0:6e:d2:21:
b1:8c:b0:1a:19:44:9f:77:c7:0e:31:d0:83:8f:d8:
4e:f4:11:b3:da:82:30:bd:e4:ce:37:27:ea:e6:b1:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:02:68:F1:4E:B8:F3:2B:00:D9:92:9A:C8:D0:25:60:62:1A:2B:31
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/qgJo8U648ysA2ZKayNAlYGIaKzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:6c:c2:38:59:85:d5:de:49:8e:3a:61:c3:af:b5:1e:a5:85:
a3:2a:81:97:18:09:21:de:39:df:fc:05:a3:68:af:a4:51:e4:
48:fd:75:20:f1:ad:c8:cb:74:4e:f6:49:c3:a3:80:d8:8a:d7:
e2:ed:a8:8d:76:6c:f1:1e:15:e2:26:72:00:1d:74:1f:2e:8e:
c4:4c:d2:70:b9:61:f9:52:25:5c:2e:2d:48:f5:7b:07:e5:5b:
4a:8e:80:59:8d:85:8d:87:95:b2:89:ac:ea:de:e1:db:a1:0a:
7f:bb:03:20:2b:01:7e:09:c6:f7:10:1d:7c:52:61:f2:6d:8b:
77:09:81:41:6e:40:82:ef:46:c5:5e:cf:89:83:66:09:3b:3a:
92:2c:22:ae:ed:92:7d:bc:40:97:16:11:6f:5c:1b:6a:62:2f:
80:2f:cb:84:ba:f1:6f:45:fa:32:39:39:d6:00:81:9c:c9:25:
6d:4c:93:22:c8:e7:1e:92:30:70:26:92:ad:1f:33:2d:3f:7c:
da:fa:b4:e9:63:b8:b2:ed:b0:80:9e:b5:c9:8b:1a:a5:90:ef:
0f:40:a3:7f:30:90:33:be:7e:8b:e1:be:84:cf:1a:aa:e9:a5:
9f:c6:0f:2d:cb:6e:f5:49:33:f4:48:4d:89:aa:63:81:ef:4d:
e8:17:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:31 2024 by rpki-client on console-fra.rpki-client.org