Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/QkDnyg7YSabk2dBTgx4vhPV_HFk.roa
File: QkDnyg7YSabk2dBTgx4vhPV_HFk.roa (raw, json)
Hash identifier: TrQG2xpmAQwhWrBwGB9Id7Rg7wDcPrZjv2oCN3T6DqQ=
Subject key identifier: 42:40:E7:CA:0E:D8:49:A6:E4:D9:D0:53:83:1E:2F:84:F5:7F:1C:59
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 018CBF0FE1AEAE22932640A65DB5B8978799
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/QkDnyg7YSabk2dBTgx4vhPV_HFk.roa
Signing time: Sun 31 Dec 2023 08:48:58 +0000
ROA not before: Sun 31 Dec 2023 08:48:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.112.0/23 maxlen: 24
31.193.240.0/22 maxlen: 24
45.84.114.0/23 maxlen: 24
31.193.244.0/22 maxlen: 24
185.74.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bf:0f:e1:ae:ae:22:93:26:40:a6:5d:b5:b8:97:87:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Dec 31 08:48:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4240e7ca0ed849a6e4d9d053831e2f84f57f1c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:81:87:cb:46:e9:67:d6:97:bc:3a:07:23:33:
a3:f5:fa:d6:69:23:ff:c6:dd:92:17:03:54:d0:b7:
70:07:ab:8b:99:b3:ff:26:60:83:c9:13:47:68:f0:
9b:5f:72:51:37:1d:35:9e:66:d5:ef:19:2b:40:ed:
15:52:42:09:ef:87:b1:82:9c:f7:02:a8:3d:2c:2a:
2e:0f:7a:78:73:0c:b5:f4:b6:d1:9c:5d:0c:bd:86:
68:6d:12:83:99:70:65:fa:85:6e:9f:08:88:2f:be:
48:55:c5:53:e6:4d:53:98:79:66:75:50:38:d2:cc:
37:52:09:4c:19:b8:0b:f2:41:12:ea:10:d0:67:be:
a0:8e:14:fa:7c:78:7b:95:c6:c2:5c:ca:f5:8e:88:
fd:5b:ca:e4:64:5a:71:e8:8a:f5:dd:fa:a7:57:64:
e6:52:8b:db:4d:de:e7:de:f7:84:d8:7f:08:8b:44:
ee:37:ac:8b:e4:66:6c:4c:ce:d3:bd:00:36:b1:15:
9a:ca:33:89:d1:fb:f2:35:4f:73:f7:00:14:24:2d:
98:7e:b3:70:18:7e:45:79:ee:e4:86:26:56:db:11:
45:91:08:c4:f4:08:95:9b:b5:d0:bb:d3:bd:10:b7:
d0:ad:aa:65:6c:e3:d1:ae:5b:0c:7e:8c:37:f6:e4:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:40:E7:CA:0E:D8:49:A6:E4:D9:D0:53:83:1E:2F:84:F5:7F:1C:59
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/QkDnyg7YSabk2dBTgx4vhPV_HFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/21
45.84.112.0/22
185.74.52.0/23
Signature Algorithm: sha256WithRSAEncryption
81:8e:2e:1f:47:b4:02:d9:f4:c1:8f:f7:0a:7c:8d:4d:58:e3:
55:5c:61:9a:be:43:3a:b5:96:71:5f:fd:66:20:1f:60:27:c8:
0a:43:c9:7b:0b:9e:2b:f6:49:55:68:b6:06:85:7a:7c:63:23:
2b:03:e6:b9:cf:02:ac:96:c5:b6:f5:2f:b2:7c:4a:86:ea:d0:
a5:3a:02:70:e7:4f:44:2c:ef:4f:81:30:4c:c2:a8:96:20:78:
eb:4e:54:69:d4:71:4f:76:69:2d:7c:18:a9:a6:0f:8f:eb:3e:
79:29:05:4f:92:ac:87:c7:ad:5a:30:1e:b1:be:f3:67:7a:62:
73:11:3f:a8:40:c0:41:7e:d2:11:fe:56:10:a4:b6:b5:93:16:
52:f7:22:d9:c2:67:8d:77:9d:b0:37:54:b7:61:48:b1:6f:53:
c0:c6:1b:ae:aa:8e:60:23:02:a6:50:6e:88:83:ed:2e:b0:5c:
61:4e:e8:02:55:64:5f:57:87:f5:e3:4d:1b:e8:a0:b3:40:e6:
86:3e:f8:34:85:df:ad:68:be:23:94:8f:66:32:fa:f8:86:93:
03:40:a8:8b:34:27:3a:11:14:5e:bd:08:e3:13:b1:df:ef:9f:
9c:fc:93:d4:09:13:38:26:e5:35:bb:0e:74:fc:17:2f:ca:f9:
9b:10:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:37 2024 by rpki-client on console-fra.rpki-client.org