Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/QAspCNo1CL-fxmk_mMBVS2cdEVg.roa
File: QAspCNo1CL-fxmk_mMBVS2cdEVg.roa (raw, json)
Hash identifier: 7fm0OWrpj9dEFIYRt+QzbW4ClO57rI95PhRd1DjCvTI=
Subject key identifier: 40:0B:29:08:DA:35:08:BF:9F:C6:69:3F:98:C0:55:4B:67:1D:11:58
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 0188B99582D41F4F41F9A22213428A11377A
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/QAspCNo1CL-fxmk_mMBVS2cdEVg.roa
Signing time: Wed 14 Jun 2023 11:06:03 +0000
ROA not before: Wed 14 Jun 2023 11:06:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207104
IP address blocks: 185.163.158.0/24 maxlen: 24
185.163.157.0/24 maxlen: 24
185.163.156.0/24 maxlen: 24
185.163.159.0/24 maxlen: 24
185.191.32.0/24 maxlen: 24
2a0a:400:2000::/36 maxlen: 36
2a0a:400:3000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 14 Jun 2023 14:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:95:82:d4:1f:4f:41:f9:a2:22:13:42:8a:11:37:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Jun 14 11:06:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=400b2908da3508bf9fc6693f98c0554b671d1158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:77:29:07:dc:24:d9:3c:45:3b:fa:70:47:
36:3f:4f:c8:83:86:4b:5b:83:3d:ab:84:15:13:4f:
69:52:b3:bb:74:b2:88:f1:40:3f:cb:d3:6c:2b:1c:
94:55:c7:72:26:95:ea:56:63:06:9b:30:e6:31:11:
66:bb:cc:b3:19:2d:5a:9d:3d:18:f9:2d:6c:f6:ef:
e9:40:ba:8c:71:74:fb:ea:a0:8f:d1:64:3c:e4:30:
c3:49:58:7a:15:bc:00:3a:8a:f3:c0:7e:ad:b2:80:
a0:1c:d2:a1:31:23:b1:4e:58:61:6e:52:10:37:3a:
68:d4:86:f1:94:80:60:3e:da:c1:3d:d5:51:c0:8d:
e5:6b:56:be:d5:59:4a:6c:36:19:8d:d1:d1:a8:1c:
be:d9:37:c1:cc:7d:d2:e8:fd:43:8b:5e:a1:4f:74:
be:db:44:ab:fa:78:a7:07:2b:40:c0:03:28:31:4d:
14:4d:2b:35:ac:41:24:d5:77:a9:99:9d:01:cf:80:
b0:a8:9e:7e:98:f0:46:12:66:bf:84:a9:ad:34:8f:
f0:0d:34:e3:58:12:0f:ee:86:d7:fd:07:c7:a5:37:
2f:ca:ef:c5:55:ca:b3:49:b9:05:d2:53:09:c2:0d:
04:60:7d:80:94:63:ea:2f:37:75:44:84:8e:dd:26:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0B:29:08:DA:35:08:BF:9F:C6:69:3F:98:C0:55:4B:67:1D:11:58
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/QAspCNo1CL-fxmk_mMBVS2cdEVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.156.0/22
185.191.32.0/24
IPv6:
2a0a:400:2000::/35
Signature Algorithm: sha256WithRSAEncryption
68:bf:70:83:9a:d6:05:04:ae:e3:b7:e7:f3:59:d7:df:87:6f:
0e:ac:09:a6:25:5c:1d:0c:86:ff:8c:3d:4d:f5:99:ab:fd:f4:
c5:24:08:c2:03:d7:55:af:46:ed:74:d8:b0:19:70:7f:3d:84:
20:a3:c5:fe:25:d6:9f:a5:f0:d7:ab:1d:70:d1:38:e6:e1:44:
4e:7c:69:27:6b:65:3b:ab:51:eb:62:8c:55:b9:e4:36:ac:88:
bd:95:2c:af:70:46:de:cd:57:53:a2:b6:4b:fb:65:fc:8b:02:
4a:67:c8:52:e2:94:ed:18:4b:b3:8e:0f:59:d0:30:9d:82:8c:
b1:8c:84:2c:8e:7d:8b:8b:07:42:64:44:03:66:58:66:e7:44:
e6:a4:ba:15:fd:a7:c5:66:55:dd:f2:05:53:22:f9:1c:18:13:
9c:2f:63:99:6d:4c:c0:8e:33:b7:38:09:16:8e:5b:eb:0a:be:
94:76:07:5d:0d:8f:47:3e:ee:36:5d:39:d9:59:4d:c1:2e:b8:
51:08:b9:96:df:4b:a9:e5:ff:18:38:75:12:77:3b:66:74:9f:
4d:51:93:c0:a9:84:2d:a5:16:8a:55:3b:ab:59:4d:d1:41:cc:
da:0a:50:47:f6:30:5a:08:8f:fd:ea:28:10:6d:37:50:44:da:
43:81:67:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:37 2024 by rpki-client on console-ams.rpki-client.org