Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/QK808vfSQSl1XwjHVrg-EBHDLTo.roa
File: QK808vfSQSl1XwjHVrg-EBHDLTo.roa (raw, json)
Hash identifier: 70nSgbcCxM/zLj9xcykLxtY/88/sePaZn2SAupyQwhE=
Subject key identifier: 40:AF:34:F2:F7:D2:41:29:75:5F:08:C7:56:B8:3E:10:11:C3:2D:3A
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 01856E2FBF1A660FAB324331FD5A5CB23195
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/QK808vfSQSl1XwjHVrg-EBHDLTo.roa
Signing time: Sun 01 Jan 2023 16:35:00 +0000
ROA not before: Sun 01 Jan 2023 16:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 185.225.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:bf:1a:66:0f:ab:32:43:31:fd:5a:5c:b2:31:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Jan 1 16:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40af34f2f7d24129755f08c756b83e1011c32d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:29:8e:8a:38:d4:ba:c7:86:af:a9:f5:83:d3:
48:6d:6d:7f:0b:99:a5:e2:1a:cc:a0:6d:00:6e:2e:
b1:3c:c3:09:39:7a:bd:bf:9d:9a:6f:3a:97:dc:31:
84:02:1e:3b:ba:3a:e0:24:08:a2:e7:eb:67:37:6e:
2d:26:b1:38:85:a3:13:e4:ed:b2:18:e8:83:c3:07:
cf:45:b6:9f:7f:84:88:cc:40:23:10:5c:e2:71:e9:
7b:da:24:dc:ff:9a:b1:7f:ec:3a:64:a0:2f:b0:3f:
a8:ce:2f:32:ef:68:19:d1:8c:7f:13:0c:50:17:7e:
f0:38:15:e1:1e:28:14:b5:a8:15:4a:fa:e5:73:fd:
9f:ac:19:35:58:97:2e:77:78:03:0a:78:fb:90:bd:
66:de:7a:a3:32:8a:8c:85:d1:7d:d8:1f:0d:b7:74:
45:f4:31:12:59:f0:47:47:30:23:3c:cf:13:1c:30:
8a:fc:c5:c6:5c:92:4e:cc:c8:25:6c:2b:0d:86:35:
ab:6d:54:b1:0d:4d:b5:a4:cf:2e:65:24:4d:cb:d3:
60:dd:7e:c9:19:e6:3f:64:b3:af:34:29:f0:7a:ac:
9d:6f:33:9c:f6:88:0e:a1:f6:40:80:24:69:72:90:
2e:72:61:7d:6e:7e:cb:af:9a:9c:b9:29:14:46:0d:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AF:34:F2:F7:D2:41:29:75:5F:08:C7:56:B8:3E:10:11:C3:2D:3A
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/QK808vfSQSl1XwjHVrg-EBHDLTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.96.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f6:b7:08:32:5c:6b:a9:16:0f:fb:6f:66:54:52:2c:3b:d6:
8f:f9:8d:5b:04:ba:45:9b:1b:bc:b2:c5:d2:96:60:0c:93:8c:
1c:1a:0e:ce:5e:c7:f4:f1:ed:49:30:22:0d:24:62:5b:97:ad:
f3:93:7c:14:36:ba:1c:d8:72:64:4a:a1:d0:bb:fa:17:68:36:
e4:75:36:51:d2:dd:c3:3c:47:4e:98:4d:40:55:74:a2:c8:bc:
0f:8d:3e:89:24:9b:79:81:4e:9d:15:bd:a8:6a:f6:7a:b4:ec:
a4:74:40:e7:03:34:ed:ba:61:ce:68:a2:9d:c7:bc:f3:ea:df:
88:c9:9c:d8:df:f5:75:a0:55:87:71:23:e0:e9:9c:14:74:5e:
0c:29:47:82:cd:08:2b:10:dd:99:01:bd:1e:f0:81:e1:5b:0e:
13:0c:3e:ac:9b:e7:7c:16:ec:32:db:31:b9:c7:d1:5a:89:53:
fd:f3:f8:8b:66:ec:6f:be:e6:e8:12:ec:87:5f:2c:63:74:3a:
a2:94:6d:8f:ec:43:48:f3:f0:fc:2f:56:cf:c5:31:3d:5b:9f:
4a:a3:70:5b:03:37:20:20:37:6e:07:65:27:dc:13:5d:b7:5e:
7f:cc:f7:4c:17:3d:4d:a3:b5:f5:04:b9:be:33:9c:25:12:f7:
f6:c5:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:13 2024 by rpki-client on console-ams.rpki-client.org