Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/qn6FPbcoEp7miTc118nVfsqWEP0.roa
File: qn6FPbcoEp7miTc118nVfsqWEP0.roa (raw, json)
Hash identifier: K2fWBFuYgOS9R0SC+ntxuwOehtzCZwnfIDFQhPJu9MY=
Subject key identifier: AA:7E:85:3D:B7:28:12:9E:E6:89:37:35:D7:C9:D5:7E:CA:96:10:FD
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 01856D13ECF549F43E8E7687E9246EA7D566
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/qn6FPbcoEp7miTc118nVfsqWEP0.roa
Signing time: Sun 01 Jan 2023 11:25:00 +0000
ROA not before: Sun 01 Jan 2023 11:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206999
IP address blocks: 185.73.64.0/24 maxlen: 24
185.73.67.0/24 maxlen: 24
185.73.66.0/24 maxlen: 24
185.73.65.0/24 maxlen: 24
185.28.88.0/24 maxlen: 24
185.28.91.0/24 maxlen: 24
185.28.90.0/24 maxlen: 24
185.28.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:ec:f5:49:f4:3e:8e:76:87:e9:24:6e:a7:d5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Jan 1 11:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa7e853db728129ee6893735d7c9d57eca9610fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:37:84:53:7d:68:e0:0a:4b:56:77:c7:2e:
4d:83:fe:61:30:94:b2:7f:c5:15:07:8d:ab:32:2d:
31:7c:a7:a7:d4:14:8c:1c:77:63:fb:64:82:24:b2:
94:48:83:10:9c:4b:1c:46:e0:d4:80:1e:4b:0e:7c:
fe:09:87:68:85:21:a9:6e:dc:2e:9e:4e:34:66:ff:
be:42:e6:ed:14:79:35:4a:b9:51:a4:b2:26:98:40:
04:8b:85:52:11:8e:eb:57:72:5b:0e:e1:67:c7:d0:
c4:99:c2:f4:de:1c:5e:c7:e1:6c:a9:98:e1:46:d2:
4a:10:04:ab:cd:8d:65:06:c7:e6:a9:15:f9:e7:8c:
fb:bc:3c:68:98:f8:21:f2:1a:ce:f6:fd:fe:08:c6:
1b:ca:77:da:8c:f3:48:fb:2a:6b:2f:68:cb:79:0e:
d1:28:b9:7e:c2:34:5d:93:0e:68:9c:04:cd:2a:36:
41:38:4b:6f:dd:e0:a8:79:03:a0:bd:87:cd:97:cd:
b4:84:d5:de:a3:2a:b7:66:15:ad:57:2b:76:0a:42:
95:d7:e1:58:ba:57:c8:fd:22:33:6f:4a:ef:de:e1:
fc:f0:eb:5c:4c:1d:9e:68:22:27:c6:7d:b1:8d:93:
26:c3:7c:3a:ec:0a:80:28:15:9c:ff:4e:95:d0:8f:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7E:85:3D:B7:28:12:9E:E6:89:37:35:D7:C9:D5:7E:CA:96:10:FD
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/qn6FPbcoEp7miTc118nVfsqWEP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.88.0/22
185.73.64.0/22
Signature Algorithm: sha256WithRSAEncryption
16:6e:a2:b2:2f:d8:dd:e3:c6:3f:40:1e:0d:a2:b2:5b:2d:f7:
e8:e5:ec:b4:cd:95:fe:cf:63:7f:ba:48:47:e1:32:55:2c:db:
7c:1d:fa:a5:47:86:f4:59:e4:ea:bb:c9:e1:7b:d3:43:fb:44:
a7:2e:97:b1:0c:8e:fa:6c:58:8c:37:b4:93:7a:fd:26:67:b1:
ef:d2:89:5b:6f:de:e6:05:13:83:19:0b:20:c8:28:47:7f:c9:
1b:27:5c:97:31:e7:a9:61:52:fa:47:7f:6d:9b:0d:54:a4:35:
17:da:45:18:33:1e:e7:1a:b4:53:88:cf:4b:42:c4:f9:4d:be:
cb:f8:bc:29:b5:3a:07:bb:a4:0f:a0:ac:af:11:db:5e:ea:79:
63:cd:38:c7:9b:b0:15:56:d9:eb:2d:84:83:77:a1:c0:ae:2f:
ea:70:c4:1d:6e:70:90:07:21:00:7a:b8:0d:da:5f:c6:3d:3d:
4a:6a:7b:74:cb:c7:e7:03:de:69:65:8c:c9:24:9a:0b:64:7c:
f3:de:35:ef:ec:7e:99:22:d1:ef:3f:bd:87:b4:60:af:0b:3a:
7d:1d:cc:38:b2:b7:4d:6e:ec:93:cd:81:f9:43:25:51:48:dc:
7a:d2:0b:bf:05:a2:ff:4b:d4:48:a4:c9:b5:4d:63:ae:a8:55:
76:91:cf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:53 2024 by rpki-client on console-fra.rpki-client.org