Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/1qxIQ58F2tOR81O9_3tVdODJ9Pk.roa
File: 1qxIQ58F2tOR81O9_3tVdODJ9Pk.roa (raw, json)
Hash identifier: chiUvNPIN6Oxxofp4dc6TiB+wCSjmrV2iCurTgm8U2A=
Subject key identifier: D6:AC:48:43:9F:05:DA:D3:91:F3:53:BD:FF:7B:55:74:E0:C9:F4:F9
Certificate issuer: /CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Certificate serial: 018573B166C272DC382759FA3669AFFE8951
Authority key identifier: FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/1qxIQ58F2tOR81O9_3tVdODJ9Pk.roa
Signing time: Mon 02 Jan 2023 18:14:43 +0000
ROA not before: Mon 02 Jan 2023 18:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199659
IP address blocks: 185.8.92.0/22 maxlen: 22
185.26.240.0/22 maxlen: 22
2a02:d540::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:66:c2:72:dc:38:27:59:fa:36:69:af:fe:89:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Validity
Not Before: Jan 2 18:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6ac48439f05dad391f353bdff7b5574e0c9f4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:bb:e6:81:53:37:ba:7a:96:82:82:40:eb:
c2:23:11:1c:0a:c0:c0:98:d4:76:41:33:ee:6c:04:
5a:7f:a7:14:81:7e:5a:c3:8a:b4:fe:ed:0c:4a:09:
e1:be:e0:35:d9:b4:b3:37:cf:22:54:50:1f:d9:66:
da:c8:ff:29:06:7c:55:32:e9:d6:fe:36:66:93:54:
ff:cd:16:52:c6:27:f9:4c:62:43:c5:af:44:06:a5:
d5:39:2d:15:43:e1:e6:61:79:84:dd:7c:21:43:ad:
6b:ec:84:54:0e:d1:c0:20:ba:09:c0:f2:ea:26:07:
e0:6e:7b:68:c3:f7:d1:af:97:ad:37:61:51:2b:4e:
22:d3:89:e0:16:5e:e1:77:1d:1d:ee:7b:9b:0c:3d:
c4:dd:bf:c4:f9:c9:9c:81:be:09:6a:4a:c1:d0:da:
cf:3b:d3:1e:0a:09:c0:ef:7a:3b:83:fb:f7:40:c6:
d1:43:d1:e3:c2:a8:82:80:5d:b8:14:7e:d0:cb:2b:
a0:68:ce:36:1a:69:a6:ee:a0:f8:46:26:83:57:2f:
32:ba:fd:b9:07:0c:6a:97:d9:a4:89:e3:de:a2:be:
58:3b:98:cd:e8:da:28:9d:ce:1b:1f:cb:39:d2:67:
5b:2a:16:29:ed:3b:c9:8e:c9:bc:6e:6b:49:cc:fa:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:48:43:9F:05:DA:D3:91:F3:53:BD:FF:7B:55:74:E0:C9:F4:F9
X509v3 Authority Key Identifier:
keyid:FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/1qxIQ58F2tOR81O9_3tVdODJ9Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.92.0/22
185.26.240.0/22
IPv6:
2a02:d540::/29
Signature Algorithm: sha256WithRSAEncryption
9d:dd:8c:df:ca:45:c8:67:ca:b9:65:b6:c7:6b:0b:e9:ac:51:
d0:cb:3b:70:36:4a:aa:61:10:6e:c9:fd:f1:eb:32:34:71:0f:
9c:20:ca:db:15:cf:f1:ee:69:a2:06:06:d9:2f:fd:1b:c1:e6:
fd:7c:34:7b:cc:4a:7a:83:a7:02:4a:58:e0:6c:31:24:eb:40:
4d:12:f6:bb:b4:64:49:68:16:cd:d3:47:9f:01:c7:6c:56:ba:
f8:8b:e7:41:0b:9d:03:aa:84:f4:d2:f8:16:3d:86:a6:79:e0:
93:bf:8f:29:56:75:9b:77:e8:aa:74:91:b8:d4:fd:45:92:60:
a5:39:f4:c8:db:6d:68:f4:b0:fd:14:8d:25:66:f3:65:e1:b7:
2b:6b:6d:8d:4d:50:7c:61:6e:5a:a7:16:41:ef:a8:0e:e5:c6:
50:4c:9d:7a:65:fc:20:30:55:de:aa:7d:89:f8:db:e9:87:ee:
de:80:b3:33:7a:d4:60:e5:9d:61:e7:78:9e:50:48:a7:b9:b7:
fb:43:75:fb:0a:a0:6c:3f:21:1d:c4:1b:ce:46:ba:e4:bb:5f:
6a:91:63:46:b3:b3:6f:05:19:14:16:c9:dd:a5:ba:a3:3d:50:
ef:ec:a7:d2:45:0e:56:ce:dd:f9:17:66:a6:3e:3a:77:89:6f:
62:cc:2a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:00 2024 by rpki-client on console-fra.rpki-client.org