Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/qF4Q38v6Gqx1D_21BpSTM03WEJs.roa
File: qF4Q38v6Gqx1D_21BpSTM03WEJs.roa (raw, json)
Hash identifier: h/4Cnt1schMm+UcMRasISP91wRMZDzWOPy2oKF+H3ek=
Subject key identifier: A8:5E:10:DF:CB:FA:1A:AC:75:0F:FD:B5:06:94:93:33:4D:D6:10:9B
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 0188CD8942B6E490360C37FC23A2871A9C3E
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/qF4Q38v6Gqx1D_21BpSTM03WEJs.roa
Signing time: Sun 18 Jun 2023 08:05:04 +0000
ROA not before: Sun 18 Jun 2023 08:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41689
IP address blocks: 185.141.134.0/24 maxlen: 24
86.57.0.0/17 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cd:89:42:b6:e4:90:36:0c:37:fc:23:a2:87:1a:9c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jun 18 08:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a85e10dfcbfa1aac750ffdb5069493334dd6109b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:d6:48:e1:7c:4d:a3:c9:b7:29:15:92:9a:
5f:8b:4f:2d:2c:8e:38:0c:28:ff:1a:44:6d:69:ad:
ee:95:54:6c:9f:d3:b8:4f:09:e3:a9:c0:0c:ce:32:
a5:6a:fe:08:13:ef:b8:7c:d5:ae:dd:54:80:d9:c4:
65:19:12:c8:cc:aa:48:9f:d1:d6:12:2f:3b:dc:cc:
2b:8c:69:70:e6:3f:66:11:44:d8:3e:67:3e:29:4b:
7e:c7:e0:fe:66:52:15:e0:58:23:c4:70:e1:55:4f:
3d:4f:01:df:e0:81:d3:4f:1b:ea:b3:be:3b:d5:ae:
0b:e6:a7:0c:10:e8:0a:0a:10:b7:55:73:73:44:69:
b6:1e:98:f9:c9:c4:1e:68:93:04:f1:61:37:13:37:
62:ad:ef:de:2b:52:2d:a1:1b:7f:60:1f:3d:c2:25:
44:23:b0:7d:e9:ac:95:27:44:7a:58:d8:dc:86:25:
d3:46:b5:da:5e:20:f6:d9:8e:35:cf:9e:d9:de:f4:
f8:25:25:5e:8f:9f:64:cf:ea:45:24:65:a1:6f:1c:
0e:85:b7:a6:9b:7c:d6:a4:8a:ea:57:bc:ca:72:2d:
29:85:b3:c8:44:b7:4e:cb:0e:2e:f0:21:ec:cd:5e:
6e:f9:f5:da:91:6a:10:70:39:cb:25:4c:e4:02:fe:
9e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:10:DF:CB:FA:1A:AC:75:0F:FD:B5:06:94:93:33:4D:D6:10:9B
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/qF4Q38v6Gqx1D_21BpSTM03WEJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.57.0.0/17
185.141.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b9:a6:4f:6b:21:6c:c9:fd:19:09:f0:68:12:9b:a2:5c:a9:
89:3a:a6:ba:53:31:5f:1d:a1:b1:8b:6c:e1:db:1d:da:a3:dd:
22:20:f4:c3:2c:b1:e8:c3:4a:d9:71:1d:e1:f5:2e:21:80:bc:
f8:fb:d9:f2:cb:e8:f5:de:59:7c:46:ed:e5:c1:d2:02:50:6d:
ae:d8:d2:fd:c6:0f:98:2f:65:14:c9:1e:9e:2c:5a:d7:c2:f8:
91:4b:0a:89:10:ec:47:00:86:92:c9:22:05:2f:43:11:42:08:
ac:60:8f:d0:b0:f0:ac:33:0a:a6:94:8f:bd:70:22:76:f2:f2:
07:6a:36:a9:d8:d0:10:e3:c6:8a:f8:0c:36:0f:98:da:6a:1c:
c3:d0:c4:d8:c2:ad:c4:b2:f4:35:3a:be:61:97:1a:5d:39:4e:
36:83:9c:b5:6b:aa:59:03:83:0d:c9:3f:2d:02:e3:1e:a0:0e:
dd:cb:7c:d1:8c:80:79:12:d5:03:ad:51:ee:64:5a:1a:7c:75:
f3:0c:e4:f1:64:c0:a9:55:82:26:f3:68:a9:fa:56:d9:8f:13:
34:0e:01:fd:c7:4d:6f:71:6e:04:03:65:a9:c0:13:42:12:38:
02:2a:51:8a:40:9b:fc:5c:4a:c9:1e:c0:47:b4:30:10:22:d6:
13:c4:22:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org