Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/00Qt8VMLQ4z3rK7lSERj_spG0gg.roa
File: 00Qt8VMLQ4z3rK7lSERj_spG0gg.roa (raw, json)
Hash identifier: 6Q4rP43FjpY38xqKcoU9dziU6KIHoMvYnhkZguXUjic=
Subject key identifier: D3:44:2D:F1:53:0B:43:8C:F7:AC:AE:E5:48:44:63:FE:CA:46:D2:08
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 0185730C9C4E4B05E5C771AD999330C396E4
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/00Qt8VMLQ4z3rK7lSERj_spG0gg.roa
Signing time: Mon 02 Jan 2023 15:14:44 +0000
ROA not before: Mon 02 Jan 2023 15:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197886
IP address blocks: 185.97.208.0/22 maxlen: 22
185.166.228.0/22 maxlen: 22
91.228.212.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:9c:4e:4b:05:e5:c7:71:ad:99:93:30:c3:96:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Jan 2 15:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3442df1530b438cf7acaee5484463feca46d208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:3a:f1:f0:b1:72:30:ef:0b:6e:ed:13:11:
fc:53:e7:a9:71:31:51:4d:75:1d:5f:cf:4d:ef:59:
1e:a8:97:47:be:d0:ac:75:04:5f:11:5a:25:8c:ec:
eb:0c:b3:e7:04:55:d3:c0:63:e3:54:9b:4f:33:bf:
9c:aa:a6:9b:dc:37:8a:77:8e:2f:59:6c:dc:6d:42:
e6:06:68:c7:b2:0c:a1:95:df:4c:7c:10:ab:00:e0:
fe:74:87:48:72:89:88:1f:66:d7:1e:fc:90:4f:3b:
df:69:52:f0:e3:e1:6b:1c:db:71:cf:76:00:c5:e4:
66:ab:20:4b:d6:ab:7a:88:f1:f5:36:93:6b:7c:04:
d5:ab:ae:05:a4:cf:0f:07:c0:1c:be:8f:05:07:1a:
bd:d9:7b:d8:42:f3:91:25:09:c4:37:04:e2:52:82:
86:1b:bc:50:14:a5:da:4d:a4:f9:cd:45:af:c6:4f:
39:c7:8e:cc:1d:d1:45:83:f2:35:92:8a:24:c7:de:
d6:a4:67:b5:f4:cd:2d:51:3e:75:47:fe:e6:ab:71:
62:60:03:c0:e0:63:73:f9:1d:33:d7:b6:16:4b:46:
c2:db:21:e3:07:f5:3d:8a:35:74:bf:ba:bc:64:74:
8d:d5:86:4b:8d:0d:53:4f:b1:05:88:18:c1:38:8c:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:2D:F1:53:0B:43:8C:F7:AC:AE:E5:48:44:63:FE:CA:46:D2:08
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/00Qt8VMLQ4z3rK7lSERj_spG0gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.212.0/23
185.97.208.0/22
185.166.228.0/22
Signature Algorithm: sha256WithRSAEncryption
22:28:39:94:02:70:33:05:54:17:0e:c4:a0:1c:a4:f9:9c:40:
85:4c:0d:79:48:98:2c:fd:d8:1e:18:d2:b1:13:8b:c1:1a:5e:
41:15:e7:5f:d7:fb:b7:d0:34:7d:e1:41:11:dc:77:06:92:a9:
30:0b:fa:81:66:44:81:fd:96:94:e5:60:96:e7:a6:02:b3:33:
8c:6c:34:4b:34:c3:e9:22:10:7a:db:97:11:ed:48:a5:79:d6:
27:1a:69:fb:87:69:8e:27:c4:00:42:ac:40:6a:33:38:8c:fe:
2d:29:bf:de:3b:e2:9a:fb:1e:3d:ae:86:9c:4c:b6:06:6b:bf:
9b:7c:7e:4a:8c:f9:04:2a:84:23:1c:c0:b2:36:79:59:7f:2a:
24:f0:e8:e8:3d:7d:3a:80:05:12:3e:01:62:1f:8f:3f:26:dc:
db:b9:78:fb:57:9d:58:73:4c:e9:f3:2c:ff:ec:d1:68:cf:f5:
de:9a:36:0e:58:2a:9d:b9:30:52:bd:78:d9:b6:83:a8:7b:c2:
98:56:c4:32:05:39:a9:73:99:ab:62:7c:97:71:75:30:97:14:
c1:dd:fd:3d:e9:5e:0e:0f:be:6e:f9:52:38:22:8e:32:60:3f:
61:b1:3b:b9:ba:63:2d:94:85:d3:20:9e:e8:d5:c3:ca:c4:fc:
e1:67:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:52 2024 by rpki-client on console-ams.rpki-client.org