Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qJvlr65E6IrdpCVoRCqn6x13TCk.roa
File: qJvlr65E6IrdpCVoRCqn6x13TCk.roa (raw, json)
Hash identifier: 1B4VWBfVBRo6Hcn6pKA4gwXUK6vOJKBPXbx9ZrIdVlw=
Subject key identifier: A8:9B:E5:AF:AE:44:E8:8A:DD:A4:25:68:44:2A:A7:EB:1D:77:4C:29
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188BEA7BDC6E70E92E784EA63CF4B5BCBA7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qJvlr65E6IrdpCVoRCqn6x13TCk.roa
Signing time: Thu 15 Jun 2023 10:44:04 +0000
ROA not before: Thu 15 Jun 2023 10:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 45.8.23.0/24 maxlen: 24
185.238.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 08:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:a7:bd:c6:e7:0e:92:e7:84:ea:63:cf:4b:5b:cb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 15 10:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a89be5afae44e88adda42568442aa7eb1d774c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:36:8a:56:96:00:c3:07:27:b8:b2:c5:eb:
ab:e4:96:4d:b9:3f:3d:7d:3f:a4:4b:76:85:c5:c3:
28:f6:5e:18:3f:c6:fc:29:04:c3:04:9e:31:63:53:
f2:bb:e4:29:73:e7:30:3e:67:d6:51:22:ad:0b:c8:
8d:c6:8a:ed:60:19:c4:e8:7f:f6:fd:65:0d:c0:51:
a4:37:14:9e:63:83:8f:83:73:06:f1:3d:40:d3:2a:
3d:b0:ec:c3:61:f0:c3:c8:c6:c9:2a:a6:de:1f:20:
84:d5:f7:57:4a:3e:e3:ff:29:62:8a:7a:85:c1:4d:
11:c6:27:64:e0:5a:4d:93:84:8b:3b:ca:2b:13:46:
a2:58:e0:2b:cd:6f:9f:e9:f2:83:0b:eb:91:c2:e3:
af:90:9c:71:e5:71:43:8e:cb:38:df:ea:b9:8d:4e:
ad:6d:e9:4a:2e:4d:fc:50:61:bc:54:37:2e:77:d2:
42:99:a6:07:64:e0:7f:a4:f3:7f:ca:16:17:67:bf:
01:c6:db:fa:dc:18:9a:1b:54:e0:7b:68:cf:17:83:
63:6c:d9:63:f7:29:89:98:1f:87:cf:1d:f2:d5:30:
0f:3d:41:56:e7:90:8b:a1:a9:c3:a0:0d:9e:2d:25:
a8:d3:a6:a2:1a:93:d4:29:b2:0e:58:11:be:20:4a:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9B:E5:AF:AE:44:E8:8A:DD:A4:25:68:44:2A:A7:EB:1D:77:4C:29
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qJvlr65E6IrdpCVoRCqn6x13TCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
185.238.229.0/24
Signature Algorithm: sha256WithRSAEncryption
62:03:45:ea:df:7d:09:e5:16:7e:2d:62:da:57:f1:74:01:72:
43:f7:ce:a1:c2:31:e8:d0:d6:41:9c:c9:ae:8e:30:99:25:55:
38:85:a5:c1:15:51:94:64:28:d9:7f:25:7b:9f:79:f7:81:28:
e8:11:97:79:4c:66:0d:ad:a5:e2:e1:36:24:d3:a4:51:af:a5:
2f:e4:8f:a3:53:4b:63:dd:15:80:6e:30:f7:c1:74:d5:8f:17:
49:9c:60:5e:47:c7:17:37:c6:b2:1f:d3:11:93:4b:9b:dc:a5:
11:df:c4:5f:6a:bc:1d:8e:7b:a4:0b:c7:99:03:a5:84:ba:8e:
e1:1c:5f:71:0d:5c:2b:6d:d6:dc:44:0e:71:2f:58:44:f9:d4:
a8:dd:b9:e8:ab:69:c6:28:0d:16:8d:fa:4a:95:03:30:c3:02:
be:c8:7b:3c:78:98:d0:f1:59:d9:20:9b:70:f5:67:ec:23:c8:
f5:66:23:a7:8f:73:7e:a5:ef:9f:6a:d4:bb:57:36:9e:e8:55:
59:43:bd:b8:77:ef:57:26:4e:e8:e5:dd:df:a1:ee:09:cd:dc:
ef:5d:ff:7f:11:69:13:e9:de:6f:c5:19:7c:59:ed:38:5b:7b:
51:65:5c:bd:f9:39:97:ec:dd:64:04:d3:e6:04:2e:0c:20:3f:
4b:75:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org