Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/QBXEMzBmTzdBNop8-7mj15ss-xY.roa
File: QBXEMzBmTzdBNop8-7mj15ss-xY.roa (raw, json)
Hash identifier: Hbw975IMq3rtnLSSwAdAJYHXl4VtWRp2qRdfeQGEST8=
Subject key identifier: 40:15:C4:33:30:66:4F:37:41:36:8A:7C:FB:B9:A3:D7:9B:2C:FB:16
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 0185718C3DF92F862DC72630B5A5958F19E9
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/QBXEMzBmTzdBNop8-7mj15ss-xY.roa
Signing time: Mon 02 Jan 2023 08:14:54 +0000
ROA not before: Mon 02 Jan 2023 08:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207223
IP address blocks: 185.179.64.0/23 maxlen: 24
185.179.66.0/23 maxlen: 24
185.162.116.0/23 maxlen: 23
185.162.118.0/23 maxlen: 23
2a0a:e000::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:3d:f9:2f:86:2d:c7:26:30:b5:a5:95:8f:19:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Jan 2 08:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4015c43330664f3741368a7cfbb9a3d79b2cfb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:3e:84:dd:b6:ee:1b:3e:87:ce:c3:da:b4:
2f:ee:c9:9c:9d:97:81:4e:85:e8:0a:f7:a8:d6:bf:
be:38:9e:1b:2e:8c:0a:e0:ba:3c:e5:20:3a:72:c3:
1e:43:99:d6:62:78:72:e5:b9:3b:9e:a9:f3:c7:d4:
27:76:8e:74:6d:53:d4:0d:13:07:c8:3b:ac:69:26:
dd:45:47:4b:e0:06:09:1f:c7:e0:36:1b:4c:f8:af:
7b:c7:8d:bd:6e:e6:3c:d8:39:09:b1:61:1c:20:00:
6b:27:a7:7a:fa:11:95:6d:90:6a:74:3f:fd:6a:8a:
e0:7e:8b:32:7e:eb:04:20:e8:8f:9f:5e:35:0c:8d:
8e:fa:78:96:95:9b:0d:0b:cb:18:d9:5c:08:c6:a1:
1c:9a:54:c5:46:3c:01:56:76:53:17:1e:02:6b:0a:
ae:86:83:14:08:17:79:6d:b4:a8:97:d2:08:7f:6a:
67:12:c0:38:0e:8a:49:d1:ed:52:2e:ce:92:4d:b4:
25:1e:3c:5e:ea:06:16:ed:95:06:b0:43:5b:88:f0:
1c:61:94:1c:08:5c:b0:bb:70:f2:64:60:91:40:ea:
0a:9d:65:73:03:eb:32:e7:9d:7f:ac:50:a7:d6:7c:
36:0e:0e:08:8a:e0:38:9f:e0:7a:41:3f:8a:97:ba:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:15:C4:33:30:66:4F:37:41:36:8A:7C:FB:B9:A3:D7:9B:2C:FB:16
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/QBXEMzBmTzdBNop8-7mj15ss-xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.116.0/22
185.179.64.0/22
IPv6:
2a0a:e000::/29
Signature Algorithm: sha256WithRSAEncryption
6f:56:33:ec:d0:48:43:97:45:9a:1f:87:ad:79:04:64:9d:3f:
ab:46:b3:1b:0c:78:2f:47:14:d6:18:01:fb:5c:a7:66:94:e2:
81:3b:d9:f1:e1:20:0b:e5:2a:a1:f5:c1:52:a4:79:4f:35:0b:
eb:1e:fe:0d:54:95:50:d2:1d:84:e1:ef:3c:c1:01:68:cc:34:
c2:8a:9b:77:8d:52:26:4d:c5:ce:30:47:97:6c:cc:3f:42:8f:
d2:61:3a:be:0e:f4:47:6f:c5:31:ef:fa:e0:5f:b6:f7:c4:4c:
82:7d:d0:57:4b:59:71:b8:c3:4c:f3:db:ef:14:25:05:2c:c6:
91:5b:fe:01:c1:3a:f5:f3:b0:2f:fb:53:af:5e:7e:0e:aa:67:
c3:c7:6b:f1:46:e8:8d:3a:13:c6:42:03:b8:4f:da:70:6e:34:
4d:ca:53:cc:81:90:e1:cc:9c:17:29:8e:89:d1:81:e5:c3:7f:
d8:df:b3:ac:b6:cf:e6:fb:e1:b4:2e:ac:db:7a:ea:c5:3c:84:
f9:f2:6c:20:de:03:55:86:44:6f:4e:fb:e2:c3:12:10:66:01:
c3:58:3e:b1:7d:4b:32:fd:b3:51:e3:29:85:d3:f4:44:9a:cd:
06:87:a1:09:ad:20:a1:fa:8e:26:fe:a6:ef:26:4b:dd:44:17:
0d:86:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:51 2024 by rpki-client on console-ams.rpki-client.org