Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/qf18_Rb87z_VjHWbhmxK5OFsJ7I.roa
File: qf18_Rb87z_VjHWbhmxK5OFsJ7I.roa (raw, json)
Hash identifier: sdNzmb/vCmqHQ7umjLwJDkimXz7d9QbaYjGy2lidr3U=
Subject key identifier: A9:FD:7C:FD:16:FC:EF:3F:D5:8C:75:9B:86:6C:4A:E4:E1:6C:27:B2
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 0185711E77770001B489478029F164272E1A
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/qf18_Rb87z_VjHWbhmxK5OFsJ7I.roa
Signing time: Mon 02 Jan 2023 06:14:59 +0000
ROA not before: Mon 02 Jan 2023 06:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209252
IP address blocks: 85.208.30.0/24 maxlen: 24
85.208.31.0/24 maxlen: 24
85.208.28.0/24 maxlen: 24
85.208.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:77:77:00:01:b4:89:47:80:29:f1:64:27:2e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Jan 2 06:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9fd7cfd16fcef3fd58c759b866c4ae4e16c27b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:ef:93:b2:af:c5:33:c4:99:19:bd:da:62:
f3:90:9f:43:dc:f6:0e:f2:71:56:d7:31:ce:42:d4:
2f:5a:1d:e1:d2:2f:8a:25:a1:0e:d7:3d:cb:67:a3:
ca:4d:7c:5b:31:40:9c:cf:c5:5c:41:de:75:64:c2:
f9:e5:62:66:98:d5:5a:77:c3:91:2b:a0:fd:19:93:
00:28:82:8d:62:a6:3d:15:dd:3c:c2:2e:e3:38:06:
62:22:5f:24:ad:53:ea:d2:c6:47:2c:a9:52:3f:6a:
ae:ee:4b:16:b9:9f:90:89:78:2a:cf:aa:76:4c:e9:
1f:5c:a7:c8:0d:93:3b:06:50:a4:d9:ce:63:55:51:
99:3b:14:45:92:7b:54:13:d6:7f:41:59:d9:74:6f:
bd:1d:1a:13:62:04:8d:60:6e:62:bf:7a:16:50:48:
c5:37:ad:7a:68:5d:71:07:48:5a:8e:eb:31:7d:45:
78:da:bd:d4:03:d8:cd:9a:36:9a:e0:c1:c9:45:02:
6e:00:18:00:f6:24:f7:17:74:a4:74:2a:18:26:53:
cc:bc:2c:2c:33:e3:33:a4:c0:c1:95:04:cd:2a:f3:
c0:d2:c2:00:ba:80:c9:e6:14:a9:0c:5b:be:6f:bc:
11:08:cc:28:dc:1c:72:71:1e:1d:d6:f2:f6:0f:f3:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:7C:FD:16:FC:EF:3F:D5:8C:75:9B:86:6C:4A:E4:E1:6C:27:B2
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/qf18_Rb87z_VjHWbhmxK5OFsJ7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:54:19:40:f8:56:6c:2d:d4:0b:2b:ad:39:8d:07:16:70:2e:
fc:99:f8:a6:91:e0:80:83:77:01:5b:a5:3c:ba:38:33:7b:b6:
64:7a:e7:a6:3b:cd:c4:94:1e:a7:9c:41:23:23:f8:c6:f8:8d:
f2:34:68:ba:11:41:cb:c4:2b:31:62:db:4e:d0:a1:cd:3c:7a:
c4:f2:e7:c2:00:0c:03:97:12:a9:86:7f:44:85:99:c3:bd:5e:
1a:3b:c9:87:94:c8:76:53:d0:ef:2a:73:ee:d2:ce:3d:6a:e8:
47:13:63:64:17:6b:4d:5c:f6:72:2a:56:f4:7e:b2:c0:c6:0d:
95:c2:04:33:98:26:51:fa:fb:58:57:6f:b2:61:4b:f0:c4:f8:
57:e1:03:23:c5:33:44:69:ea:be:c7:dd:b7:d1:18:fb:b7:76:
dc:04:2b:86:83:6a:a3:a7:ee:0f:bb:a8:a8:c7:b6:2e:e0:09:
48:cf:8d:70:91:ad:90:9f:b1:57:2c:71:67:99:81:67:8e:66:
3f:db:2e:9d:cc:7f:ad:94:4a:2d:30:f9:82:a0:e8:dd:b3:26:
c9:cb:04:7b:7d:d0:ee:de:a8:58:2a:c0:96:6c:fa:5e:40:09:
f6:e8:16:3f:d2:2e:f9:a0:85:ff:3a:b8:86:3a:b5:b3:93:49:
b4:1b:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:29 2024 by rpki-client on console-ams.rpki-client.org