Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Q3KfNYd59fuoP0YldRa7LrSDe54.roa
File: Q3KfNYd59fuoP0YldRa7LrSDe54.roa (raw, json)
Hash identifier: MHBaZcvmPiNozprTrXIDRixQKwS1qC3MzxhAc6paPCs=
Subject key identifier: 43:72:9F:35:87:79:F5:FB:A8:3F:46:25:75:16:BB:2E:B4:83:7B:9E
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AD3DCE10903188680E7D0FB411F51
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Q3KfNYd59fuoP0YldRa7LrSDe54.roa
Signing time: Mon 02 Jan 2023 17:15:07 +0000
ROA not before: Mon 02 Jan 2023 17:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204464
IP address blocks: 185.248.96.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:d3:dc:e1:09:03:18:86:80:e7:d0:fb:41:1f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43729f358779f5fba83f46257516bb2eb4837b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:2a:ae:3c:b5:4d:f9:df:35:da:8c:e1:4e:
20:41:34:6d:22:4c:48:ec:c3:72:48:7f:8c:d7:92:
74:e9:19:67:db:e5:52:8f:9e:c7:26:34:cf:b9:f7:
60:b0:a7:07:37:bf:41:fa:57:eb:30:d9:c4:d1:8c:
bc:ec:6e:12:d6:57:79:2e:0a:eb:0d:30:5b:62:a0:
1c:27:69:54:47:bc:6a:66:43:83:35:70:ee:38:01:
65:5f:e4:c6:6b:a9:67:a1:24:8d:b7:37:2e:d5:51:
c5:47:de:18:0a:f7:a5:d1:b3:a3:c1:a3:70:e8:c9:
f0:30:2a:3b:6f:99:45:46:64:b0:fd:8c:e9:09:c1:
19:c2:52:cd:4a:01:9a:8a:c6:00:fb:b1:12:08:9f:
1c:14:a7:4c:af:d4:16:dc:ae:92:50:f5:4d:c7:4f:
1d:a2:97:b0:ae:21:01:f2:86:f1:4e:4a:be:f6:56:
a9:61:23:5c:9b:6d:4b:fb:b1:db:42:d9:8a:ac:70:
a2:a2:e7:0d:ef:2f:f2:30:ba:d5:21:04:ea:09:59:
41:eb:53:dd:86:58:f5:4e:83:0e:b9:c9:e1:4d:76:
e0:e4:46:dd:21:cc:98:7d:ce:4c:71:4d:2b:22:df:
36:76:85:9b:ed:5c:88:78:b7:fd:e3:bf:35:56:c0:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:72:9F:35:87:79:F5:FB:A8:3F:46:25:75:16:BB:2E:B4:83:7B:9E
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Q3KfNYd59fuoP0YldRa7LrSDe54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.96.0/22
Signature Algorithm: sha256WithRSAEncryption
98:f5:5c:ac:10:28:5f:53:f9:40:5c:28:96:6c:03:e8:b2:5e:
ba:09:b0:c6:63:30:e8:54:e1:d6:ed:45:09:43:75:af:8a:c0:
2b:dd:81:c5:c6:f3:b7:5d:b0:37:61:9c:7a:c1:aa:74:7e:0c:
7f:26:74:11:6f:12:67:59:60:16:7b:91:2b:68:43:7f:28:ad:
0a:b2:01:94:68:44:d6:f9:55:a8:87:b2:2f:97:57:ab:1a:50:
11:17:c2:07:f0:ff:fd:24:6f:e4:bf:cb:f8:d7:e8:f9:a5:3d:
d1:d0:18:7f:f6:82:47:a0:00:a0:d1:9b:ce:ff:d0:17:80:54:
36:41:91:ba:b2:d9:3d:8b:73:c2:55:a7:0d:7b:ce:17:c3:dc:
74:c7:45:d6:0c:df:a5:83:0a:f7:1d:18:09:8c:a1:c4:d0:37:
33:74:51:ca:66:13:b6:c5:57:1f:39:89:91:08:34:2b:bc:44:
eb:24:13:82:b4:0c:e9:2a:91:cf:cb:f6:a7:54:d9:4a:85:11:
7a:7e:42:fe:df:83:b7:bb:63:40:94:8c:fe:ad:22:e5:9a:fd:
3f:d0:f5:ce:10:be:d7:a2:e3:b3:f7:65:76:05:e0:af:22:1f:
7d:c7:af:21:39:f3:9d:dd:c8:88:bc:3f:16:27:1a:33:3c:79:
8f:3a:58:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org