Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/qJ22AtnkcXLCLy2mvA_80e6W6tI.roa
File: qJ22AtnkcXLCLy2mvA_80e6W6tI.roa (raw, json)
Hash identifier: Ay+uJo9R4tnXIUrkPSiLNfkGVVxfjvynYOEwBMYBfw8=
Subject key identifier: A8:9D:B6:02:D9:E4:71:72:C2:2F:2D:A6:BC:0F:FC:D1:EE:96:EA:D2
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 0185730CB8EC7804A1556654C801BEEB2056
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/qJ22AtnkcXLCLy2mvA_80e6W6tI.roa
Signing time: Mon 02 Jan 2023 15:14:51 +0000
ROA not before: Mon 02 Jan 2023 15:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43050
IP address blocks: 176.119.232.0/21 maxlen: 21
91.215.124.0/22 maxlen: 22
91.194.50.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:b8:ec:78:04:a1:55:66:54:c8:01:be:eb:20:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Jan 2 15:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a89db602d9e47172c22f2da6bc0ffcd1ee96ead2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:cc:49:58:30:f0:f1:85:38:cc:42:6b:0d:
f6:63:f0:5a:50:b4:f7:f0:b7:fe:ce:7d:2a:6b:5c:
c8:68:1a:6c:ab:0b:ea:c6:56:17:bb:0b:e5:ec:b3:
ac:80:c8:85:17:f4:61:2f:12:ed:2e:b4:6f:01:0b:
bf:e2:dd:ea:a8:9b:cd:3b:bb:4f:11:d5:39:58:a7:
fe:5a:0b:ed:15:0b:e6:0c:a9:78:f2:85:9d:2c:25:
3e:d5:30:1e:6a:1e:b9:a6:1e:46:40:f2:a5:b2:b1:
ed:24:0f:a9:22:ec:db:3b:7b:ad:5d:60:06:18:4f:
63:ce:0b:94:81:d4:a4:36:72:43:07:76:d0:6f:a3:
d9:13:1d:5d:ae:21:d1:f7:53:e5:3c:7c:5b:47:bb:
f8:7f:f6:5c:3d:3a:45:0f:7c:3c:4f:de:1b:76:8d:
12:ca:83:45:27:89:8d:c4:7e:9b:10:ca:81:0b:d9:
72:51:bf:7a:2c:1e:fe:a0:49:8b:d7:77:12:eb:d8:
dc:b8:dd:90:24:b2:7d:60:30:57:05:53:47:d0:5d:
ce:27:2a:b6:29:2f:72:1f:ec:38:48:cf:0f:f3:c9:
43:ce:da:3a:89:ca:44:73:2f:5b:11:fa:45:4b:92:
bc:c1:30:e6:c0:44:99:15:31:90:71:ca:57:4e:f7:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:B6:02:D9:E4:71:72:C2:2F:2D:A6:BC:0F:FC:D1:EE:96:EA:D2
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/qJ22AtnkcXLCLy2mvA_80e6W6tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.50.0/23
91.215.124.0/22
176.119.232.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:46:6c:1c:c9:aa:f8:fd:ad:41:51:07:ed:83:52:d1:bb:97:
fb:97:71:ed:1e:4a:a0:6e:fc:05:f4:e4:80:c5:8e:58:2a:14:
f2:3c:92:5b:90:32:04:8c:f8:ff:a3:1e:7d:1c:75:9f:e5:13:
e4:5b:79:9c:9b:ef:47:f5:65:c3:0f:a4:26:c3:ef:24:f0:fe:
48:b8:59:69:45:fd:0f:e0:40:66:f7:d0:d8:04:69:62:69:d2:
e1:dc:91:91:b4:c4:5b:50:96:00:a6:aa:b5:fa:aa:e0:e9:dc:
3c:06:50:90:9e:95:dc:42:2d:27:18:61:88:0b:a1:2f:54:5c:
0d:da:42:d6:e7:6d:3d:53:ab:50:ba:02:59:37:a8:a0:1b:a2:
42:08:fa:18:a0:c2:d0:4c:9a:57:00:89:21:c4:24:bf:7e:d1:
50:c2:8c:4b:37:e8:90:39:b6:f1:e9:33:67:8a:ea:75:07:ca:
43:d0:d4:90:ea:ef:a0:ef:1a:46:82:63:12:3d:51:12:cc:5e:
25:ca:cc:e6:a4:8d:91:8c:51:88:37:63:9a:42:93:cc:aa:76:
ff:3f:cf:74:86:1f:ed:7d:fe:ed:d1:f1:3d:bc:7d:db:70:e2:
12:dd:9a:a1:7c:4c:14:29:19:31:b1:13:99:bb:49:90:c1:58:
d7:04:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:40 2024 by rpki-client on console-ams.rpki-client.org