Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QbRScqrp4lKPSfjThHpDYFy3jbA.roa
File: QbRScqrp4lKPSfjThHpDYFy3jbA.roa (raw, json)
Hash identifier: ctz8mTrvgYgYk6S/wkA0CnO62KuHFSlz38c7wx0VkDE=
Subject key identifier: 41:B4:52:72:AA:E9:E2:52:8F:49:F8:D3:84:7A:43:60:5C:B7:8D:B0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018981F420ECDA93EC3DABC364D3ADE5182D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QbRScqrp4lKPSfjThHpDYFy3jbA.roa
Signing time: Sun 23 Jul 2023 08:53:27 +0000
ROA not before: Sun 23 Jul 2023 08:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 185.222.31.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:81:f4:20:ec:da:93:ec:3d:ab:c3:64:d3:ad:e5:18:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 23 08:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41b45272aae9e2528f49f8d3847a43605cb78db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8d:78:f8:f8:c8:9b:48:f7:13:aa:3d:d9:f1:
54:ef:b9:be:85:8c:ac:6f:02:9b:c2:f9:b0:64:46:
a4:7d:64:8d:61:5f:30:68:02:bf:82:68:4d:b7:df:
c6:d2:e2:09:56:53:bd:a5:ee:52:9e:10:44:3f:92:
15:00:c4:85:1b:4c:6a:b2:3a:17:97:d5:a5:4b:ae:
13:42:7f:9d:b0:5f:e4:c0:6e:0b:f9:d1:ca:6e:5e:
28:0c:49:ec:ab:7a:8c:d2:9a:51:67:71:9d:8f:f3:
d3:75:94:cd:01:ff:69:d5:91:54:99:c5:ec:26:9e:
89:a9:63:c8:a3:54:09:41:75:08:c9:45:49:f8:13:
a5:80:f3:29:4e:60:ad:b1:74:42:d0:20:df:50:ba:
75:23:48:85:e0:4d:23:15:ad:7f:fc:55:40:ea:2c:
c9:e1:15:12:e9:c2:34:2e:eb:7c:9a:30:5f:07:3a:
5d:03:03:64:55:84:07:1c:ca:b7:e7:d4:19:15:d5:
f4:52:1b:85:37:38:d1:d8:66:45:7b:72:04:8f:7a:
9e:22:07:c4:05:ad:ef:8b:7e:83:ea:81:a3:b3:65:
6c:ad:93:42:33:c6:03:de:09:64:a4:00:b5:2c:ae:
d0:5c:23:75:9f:96:da:3e:66:e5:2f:fa:98:90:75:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B4:52:72:AA:E9:E2:52:8F:49:F8:D3:84:7A:43:60:5C:B7:8D:B0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QbRScqrp4lKPSfjThHpDYFy3jbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.249.0/24
185.222.29.0-185.222.31.255
Signature Algorithm: sha256WithRSAEncryption
a3:d1:73:1b:49:43:cc:4c:65:b8:20:93:a7:d6:67:d7:dc:b8:
95:1d:4c:37:54:7b:54:b6:d5:34:c2:f4:b5:f2:4f:90:25:78:
59:67:f2:11:6c:86:46:38:6a:e6:d2:2d:be:85:76:f4:be:38:
0a:82:84:d3:19:c7:a1:5e:4a:6c:13:46:e4:2a:6f:3f:37:74:
a6:eb:b8:69:93:fd:56:81:09:30:3d:7b:00:34:e8:5a:8d:e0:
f6:de:70:95:51:05:19:8c:37:89:eb:ae:19:1f:4f:9d:e2:b7:
11:4d:e2:06:a2:6f:62:6e:7c:b1:f9:4c:94:c0:5f:93:47:44:
1d:c4:2c:5f:d9:86:bd:c9:c5:7b:95:43:69:e7:b4:28:b8:07:
ca:3c:79:c3:71:69:6b:be:6d:85:00:1e:3e:8c:69:c1:21:97:
17:46:fe:3d:19:09:8c:26:72:46:7c:50:12:be:63:47:18:79:
6a:90:07:19:ea:f3:f8:7b:c7:04:6a:57:f2:a5:96:f6:03:0d:
b6:c7:f0:ab:55:76:57:9c:10:c9:05:a1:0e:79:da:00:8c:8a:
7f:2d:39:57:1b:cc:48:85:21:1e:50:24:36:44:3c:79:5a:40:
93:e2:71:82:f9:3d:9f:a6:6a:ec:e9:08:6f:d5:92:7f:32:c4:
6c:93:f2:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org