Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/QtBEmbDzZHTg0nc4tRP-ZHRpuHk.roa
File: QtBEmbDzZHTg0nc4tRP-ZHRpuHk.roa (raw, json)
Hash identifier: g9NIRZO9/zl3aDBP4gD9NrBU+2PXZiWcNulYkEG6Nk4=
Subject key identifier: 42:D0:44:99:B0:F3:64:74:E0:D2:77:38:B5:13:FE:64:74:69:B8:79
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53F2F17BBA571FF7F80AC7C384CC8D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/QtBEmbDzZHTg0nc4tRP-ZHRpuHk.roa
Signing time: Sun 01 Jan 2023 07:55:18 +0000
ROA not before: Sun 01 Jan 2023 07:55:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43308
IP address blocks: 185.182.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f2:f1:7b:ba:57:1f:f7:f8:0a:c7:c3:84:cc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42d04499b0f36474e0d27738b513fe647469b879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:b3:91:0a:87:d8:81:8f:b8:93:66:c7:56:
4a:0e:e5:a4:ba:7d:c1:1e:de:69:be:74:d7:05:ca:
d3:e7:60:86:fa:0d:45:b7:cf:87:e3:57:49:54:cc:
f2:cd:86:18:e4:03:99:84:23:6b:8e:ee:72:6c:96:
03:ab:bd:3f:0e:bc:d9:ba:2e:84:0c:50:74:2e:ec:
af:49:9e:43:ba:a4:74:d1:26:27:ab:d1:9c:25:bd:
5b:6a:50:2b:6c:ab:30:66:dd:32:33:0c:d2:2e:62:
a6:5a:2c:dd:61:34:01:9c:02:98:3c:e0:c5:bc:70:
f8:02:21:91:b8:0a:15:32:e5:09:0d:60:5a:30:c2:
b7:60:48:0f:4f:31:20:bc:cb:5d:e3:2a:e7:ef:99:
70:74:5e:51:b0:7c:c2:cd:de:01:a4:f1:d3:22:ea:
a2:34:84:5b:c8:57:96:b7:72:2b:bd:e6:dd:d0:05:
e0:cf:3d:29:ac:04:d9:4f:71:2b:d9:f2:ac:1a:9c:
de:f3:71:d0:c0:1e:56:a8:3a:60:a6:a7:1d:c7:6c:
b7:6e:8d:e6:f0:0a:29:b2:12:89:11:e6:49:a2:f5:
78:0b:d9:08:60:d8:56:56:95:6e:cd:ca:3d:b4:98:
59:50:2e:36:66:0a:a2:46:4a:e1:c0:66:17:5e:01:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D0:44:99:B0:F3:64:74:E0:D2:77:38:B5:13:FE:64:74:69:B8:79
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/QtBEmbDzZHTg0nc4tRP-ZHRpuHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.61.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fb:8e:f9:0c:60:7c:48:13:14:93:e7:ee:cf:c3:65:79:26:
44:16:8a:59:30:d6:4a:c7:2d:b6:7f:29:82:e5:b8:00:9b:91:
e5:5d:17:46:13:9d:76:bf:14:c7:e2:ea:5b:c7:8e:82:e2:13:
aa:db:7c:61:2e:6f:57:0c:5b:97:d2:43:4e:76:78:ab:3c:bf:
14:90:11:c7:6b:12:21:a3:66:9f:ff:d4:72:28:2b:f4:1c:a6:
0a:62:4f:e1:90:69:b0:e3:26:c0:bf:49:ce:2f:b4:a5:02:7f:
70:b0:e3:aa:7b:6b:19:77:44:0b:0a:3e:e2:87:a9:88:d7:ea:
e3:26:69:d6:1d:1e:a8:d7:b5:e8:03:e0:ce:f1:0b:f0:8b:1f:
be:14:b7:cd:d3:f7:57:b1:7d:9d:98:8e:7b:65:8d:b5:02:ed:
2d:96:f0:a7:65:7d:ee:7c:11:c3:80:01:4e:86:d9:5a:fa:9a:
09:05:ea:64:31:04:f5:b3:0a:76:d0:78:6d:b7:b0:30:9c:c1:
9f:2f:ac:56:06:7f:78:91:9c:ab:e5:3a:a2:02:44:81:4a:9f:
92:d5:10:86:61:ef:c4:8e:52:5d:ac:81:50:f9:eb:c9:e2:69:
28:fd:87:82:7f:f9:4a:7a:42:d2:10:47:28:97:bf:66:39:e1:
97:30:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:00 2024 by rpki-client on console-ams.rpki-client.org