Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/sqXnlVVtNELce9jMA1Nvz6gX_tA.roa
File: sqXnlVVtNELce9jMA1Nvz6gX_tA.roa (raw, json)
Hash identifier: qVSLicoAR4DTsWbAyQR1grpmp2LE0mB+1tf1dEKcCos=
Subject key identifier: B2:A5:E7:95:55:6D:34:42:DC:7B:D8:CC:03:53:6F:CF:A8:17:FE:D0
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C422C3480AEEAF5696FD0373A4E57
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/sqXnlVVtNELce9jMA1Nvz6gX_tA.roa
Signing time: Mon 02 Jan 2023 05:55:06 +0000
ROA not before: Mon 02 Jan 2023 05:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211409
IP address blocks: 185.106.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 14:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:42:2c:34:80:ae:ea:f5:69:6f:d0:37:3a:4e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2a5e795556d3442dc7bd8cc03536fcfa817fed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:fa:0f:50:11:8c:76:90:33:22:e2:8d:f0:
61:ea:0a:bd:29:01:58:8d:20:4c:e4:39:39:35:db:
cf:ee:11:86:8f:7f:3d:0d:51:58:58:29:a0:c2:df:
5f:d4:39:9c:b8:fc:f1:21:6f:e4:ac:6e:79:c2:63:
70:c2:2f:5b:12:71:36:2c:52:17:d7:9f:54:97:6e:
1b:08:57:d0:63:19:46:a8:41:bf:d0:26:c0:ba:e4:
f7:97:64:60:16:5e:b1:7d:bd:46:69:5d:7d:a1:da:
60:7b:ef:12:7a:6c:9f:00:c1:60:5a:4b:e7:cf:30:
2c:57:e4:c5:f4:25:a2:6c:f7:9a:66:fd:7c:04:fa:
c2:d3:15:a7:c1:17:9e:dd:cb:e0:a3:3b:84:a5:6f:
5e:ac:b9:1b:0c:99:90:a2:5f:83:eb:a9:9e:a3:fd:
dc:8e:ff:70:3f:17:ca:10:b9:d0:8d:e4:6d:bf:8b:
3b:51:0c:85:31:83:c1:82:61:ca:4c:88:94:86:de:
47:e2:e2:88:83:4f:06:09:1d:eb:99:3e:0e:24:23:
7a:bc:91:2d:3f:d0:8b:5e:ce:f4:29:46:20:b8:54:
a8:00:54:ef:16:81:67:75:9a:bf:c6:8e:5c:c3:ff:
bb:01:4e:e0:65:3f:60:76:b6:11:90:92:05:fb:1d:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A5:E7:95:55:6D:34:42:DC:7B:D8:CC:03:53:6F:CF:A8:17:FE:D0
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/sqXnlVVtNELce9jMA1Nvz6gX_tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.93.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:50:6a:ed:4b:7e:3c:9b:ee:4a:40:6f:4c:d4:63:c6:ce:51:
96:ed:9b:33:9f:e8:fc:d2:6a:69:7b:0b:d6:3b:78:25:96:04:
08:63:af:60:5f:4e:8e:7c:76:7d:b8:99:7a:53:07:54:1a:91:
aa:8e:17:6e:35:56:c7:90:fe:fe:97:1d:21:01:46:e7:89:30:
8d:59:68:57:ba:8a:25:4e:9d:60:42:14:4a:38:7f:60:64:6e:
5a:c6:bf:30:6b:b4:af:21:3a:e8:a9:73:09:3f:e7:fe:ef:cf:
b2:82:fe:57:26:4c:d7:ee:e1:42:d8:73:99:46:e2:9e:f4:57:
23:cc:b4:1a:14:c7:34:51:8d:4b:27:6c:79:af:90:1b:cd:5e:
8c:fc:f4:7b:34:32:de:07:21:89:50:e3:8e:17:3c:25:f2:a5:
44:0c:29:5e:d1:3e:0c:e9:66:00:33:5c:91:1d:59:06:11:66:
ac:fe:52:c8:56:77:55:14:44:c4:44:61:34:bf:3f:a6:ce:18:
79:43:24:a3:0d:39:aa:e3:c0:20:38:50:8c:55:e2:ac:3c:b9:
4c:41:fa:26:87:23:eb:31:eb:0b:84:13:f6:ee:1f:57:31:50:
4e:3f:50:33:6a:37:82:9c:f5:95:36:b5:54:59:e0:60:4c:d2:
75:e4:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org