Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/Qs7ZGtDKCp9C-ySEAKuqzwStZgc.roa
File: Qs7ZGtDKCp9C-ySEAKuqzwStZgc.roa (raw, json)
Hash identifier: kOLWqD4Lz6RVaXZxe1XIbHJ7SKSuTuMKRo/XIf2bqM0=
Subject key identifier: 42:CE:D9:1A:D0:CA:0A:9F:42:FB:24:84:00:AB:AA:CF:04:AD:66:07
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 018EB960856DC9BF56BA57539E1090B96B3E
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/Qs7ZGtDKCp9C-ySEAKuqzwStZgc.roa
Signing time: Sun 07 Apr 2024 16:24:54 +0000
ROA not before: Sun 07 Apr 2024 16:24:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61162
IP address blocks: 185.133.68.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 13:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b9:60:85:6d:c9:bf:56:ba:57:53:9e:10:90:b9:6b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Apr 7 16:24:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42ced91ad0ca0a9f42fb248400abaacf04ad6607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:79:be:05:6b:51:90:24:ef:33:fb:32:ed:
8b:5c:13:65:90:20:b3:8b:75:fb:8d:8f:29:1d:fa:
1c:ec:a5:3e:2c:0c:c1:c9:d2:fe:ae:b9:76:f7:2b:
ee:62:56:87:98:ff:35:d9:fe:9b:16:e4:aa:4a:5e:
a5:e3:67:c9:36:20:4e:a6:f2:61:67:3e:52:f6:a5:
97:96:37:53:cb:e3:a9:94:24:f4:5a:9b:65:dc:4d:
7f:9b:dc:93:e7:d8:f5:62:ee:05:e8:4e:44:19:b9:
5c:ca:af:f1:d7:2d:26:61:55:58:0f:dc:73:8a:30:
3b:15:e0:40:fa:af:25:03:88:2b:e5:20:d7:82:3f:
43:85:a7:ea:a9:43:7b:d9:cc:38:78:fd:22:d8:2c:
e9:8d:49:b6:bb:e0:be:34:ff:52:cc:af:88:8d:e2:
d2:19:8a:be:52:f2:9d:db:01:26:43:fa:4c:34:c6:
da:6e:6b:bb:33:44:10:29:0e:4f:7d:8d:cc:13:8f:
f7:1c:6c:01:bf:87:5f:72:6c:4a:ff:f2:47:24:9b:
a6:82:73:e4:33:1e:f5:da:56:64:15:e5:72:fc:2e:
b5:d7:cd:31:38:60:57:d8:6a:fc:b4:5b:ee:53:4d:
0b:76:5c:6d:ae:58:19:a6:f5:7f:75:ba:0a:05:8f:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:D9:1A:D0:CA:0A:9F:42:FB:24:84:00:AB:AA:CF:04:AD:66:07
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/Qs7ZGtDKCp9C-ySEAKuqzwStZgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.68.0/22
Signature Algorithm: sha256WithRSAEncryption
94:28:fe:eb:f6:aa:95:35:95:62:40:38:bd:28:16:20:7b:c8:
7d:78:64:a0:fd:3d:66:14:85:8e:15:9a:10:ff:d9:23:10:35:
43:99:86:12:89:d4:d5:d3:29:5c:ae:27:8a:de:de:5e:12:d5:
4f:7d:5e:8d:4f:98:55:1a:80:e4:b0:4f:75:f9:e7:84:60:66:
7a:cb:a4:6c:75:af:7d:4d:e6:92:5f:9a:17:69:50:dc:54:b6:
32:5b:13:8a:34:a4:ce:fc:45:83:a2:58:54:2e:ee:95:65:3f:
ca:ea:8c:86:79:dd:82:2b:1a:59:42:55:b1:94:46:a9:7d:73:
b6:18:c2:b0:81:62:c5:7c:d2:56:a4:17:15:91:f8:24:15:1d:
fa:8b:36:73:13:ff:e9:97:c4:db:69:a1:db:9e:fb:a9:91:e9:
c7:ac:86:ff:b7:fb:7e:fb:2e:4e:8f:74:01:1e:21:6f:be:84:
ab:5c:f0:78:47:c5:31:bc:7c:df:63:46:71:ab:63:48:07:19:
d5:1b:d4:92:3a:d9:0a:83:f1:d8:68:5f:64:71:03:5d:22:95:
00:f7:37:0b:a1:a8:12:98:2b:9f:43:a4:47:97:ae:04:a2:20:
63:81:5c:0c:79:e1:0c:12:fe:83:c9:6a:16:e1:47:a5:07:2f:
e3:51:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:25 2024 by rpki-client on console-fra.rpki-client.org