Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/QXDnB6IPpkCE1PvUlKDN19wqaLA.roa
File: QXDnB6IPpkCE1PvUlKDN19wqaLA.roa (raw, json)
Hash identifier: C9hGoVWIyDiXDaxZMVSYSpHUn53SwfsxwQ64cU7CG1E=
Subject key identifier: 41:70:E7:07:A2:0F:A6:40:84:D4:FB:D4:94:A0:CD:D7:DC:2A:68:B0
Certificate issuer: /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Certificate serial: 01856BAEC53B24A84D499CD2BEB2F667E3EB
Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/QXDnB6IPpkCE1PvUlKDN19wqaLA.roa
Signing time: Sun 01 Jan 2023 04:54:53 +0000
ROA not before: Sun 01 Jan 2023 04:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47481
IP address blocks: 194.35.48.0/24 maxlen: 24
185.24.47.0/24 maxlen: 24
185.24.46.0/24 maxlen: 24
2a0d:fec0:121::/48 maxlen: 48
2a0d:fec0:21::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:c5:3b:24:a8:4d:49:9c:d2:be:b2:f6:67:e3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Validity
Not Before: Jan 1 04:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4170e707a20fa64084d4fbd494a0cdd7dc2a68b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:80:50:ba:1d:55:4f:63:cc:dc:c2:ee:9f:fb:
46:bb:3e:bd:0f:d8:2d:4e:84:5e:37:5a:12:e2:ee:
3a:15:ac:2e:44:77:33:6a:26:54:0a:e9:f5:b6:3a:
40:9a:7f:1d:68:64:f2:9d:0c:6b:83:47:2f:20:03:
9e:41:d2:b1:42:f2:b7:90:df:9c:5c:cc:67:4d:15:
86:0a:a2:3c:e6:ce:98:b3:6e:3c:a9:d1:5f:e5:cc:
a9:bb:e6:2f:36:5e:c1:45:d5:43:a3:a9:3e:ae:97:
88:95:f3:49:38:58:37:b8:b5:54:38:ec:1f:39:c4:
32:17:3c:55:ea:d2:f6:41:4b:c8:67:5d:c1:be:d6:
ab:50:02:49:a0:16:d8:01:59:45:00:51:c6:85:b5:
f8:9d:de:dd:03:07:6d:34:7a:78:cd:7f:6b:05:90:
26:f9:1e:83:69:41:f4:bb:40:77:b2:34:86:3d:a5:
0b:9e:f7:09:84:f9:3b:2d:af:3d:d8:98:c9:b5:58:
46:6b:7e:2c:d2:34:45:59:9e:ae:d9:24:ba:a9:d9:
ea:d6:bd:28:67:48:a5:93:f4:54:b7:3a:a1:27:50:
99:ae:f1:48:1a:59:c3:99:f1:38:2f:ec:de:3e:c0:
b1:38:04:e5:81:bb:4f:75:94:b3:e1:5e:ae:37:db:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:70:E7:07:A2:0F:A6:40:84:D4:FB:D4:94:A0:CD:D7:DC:2A:68:B0
X509v3 Authority Key Identifier:
keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/QXDnB6IPpkCE1PvUlKDN19wqaLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.46.0/23
194.35.48.0/24
IPv6:
2a0d:fec0:21::/48
2a0d:fec0:121::/48
Signature Algorithm: sha256WithRSAEncryption
5b:15:48:d7:0b:a9:af:d8:7a:cb:60:7d:9b:78:81:ac:dc:23:
70:da:42:f0:fd:dc:c0:2e:bc:e6:ef:52:7a:c1:9c:0a:a0:31:
fb:88:f0:f2:03:eb:e3:22:4e:d9:5f:df:52:ba:db:c1:77:aa:
6e:18:0e:1c:08:52:02:73:60:1a:76:79:f9:be:48:a3:b9:04:
13:f5:ee:f5:44:d0:8a:7e:e7:73:22:90:3a:18:28:f4:46:3a:
6d:95:2d:42:bb:a8:c7:60:8c:ec:b8:93:6c:50:7e:5f:f2:15:
b6:ce:af:ab:d6:74:04:1b:0c:f0:c8:ff:90:a4:21:26:4e:0e:
f2:b1:1f:a9:21:14:bb:46:03:f6:fa:69:c5:01:9d:bd:a5:15:
0b:32:71:dc:91:90:47:4c:07:5e:6e:35:4a:cc:34:e4:e8:63:
69:af:4c:cc:96:c6:7f:b7:71:e1:9d:e4:58:5f:15:6f:b1:22:
f5:74:de:c8:90:cf:cd:30:2b:c1:6d:73:11:dc:80:05:10:15:
05:81:1d:ec:17:e2:b3:c6:f7:c1:bf:96:fc:83:2a:1a:a8:ea:
be:b2:74:ea:1b:a2:a1:17:f9:46:90:17:40:bb:a2:65:9d:41:
48:05:60:17:87:f0:35:d1:e6:e8:d4:4f:79:4c:4d:22:88:03:
79:40:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:34 2024 by rpki-client on console-fra.rpki-client.org