Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/qe5mdpd2XqR9zoqNVDnep-ey6KM.roa
File: qe5mdpd2XqR9zoqNVDnep-ey6KM.roa (raw, json)
Hash identifier: FjVW2YfBEcDrMyVNDkBdEn9xWRnsQ8AZ83iQz1P/zVA=
Subject key identifier: A9:EE:66:76:97:76:5E:A4:7D:CE:8A:8D:54:39:DE:A7:E7:B2:E8:A3
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 018A5FE1BEF500252035514470C4BDCF7C95
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/qe5mdpd2XqR9zoqNVDnep-ey6KM.roa
Signing time: Mon 04 Sep 2023 11:09:04 +0000
ROA not before: Mon 04 Sep 2023 11:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396998
IP address blocks: 185.228.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:e1:be:f5:00:25:20:35:51:44:70:c4:bd:cf:7c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Sep 4 11:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9ee667697765ea47dce8a8d5439dea7e7b2e8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:4b:ff:d3:d2:2b:c0:cc:e5:f4:d9:40:9b:
4d:8a:9d:70:fc:21:7b:34:0c:78:70:3d:72:e8:7b:
9a:1b:63:9e:22:bc:f5:02:81:5c:5b:e2:2d:28:f6:
b8:a6:4b:2b:c3:fb:45:cd:62:5d:8e:a6:25:a6:52:
79:65:5b:01:f0:db:0d:69:2e:cf:2e:ad:d4:f5:b1:
d3:1f:c7:09:f8:3d:d8:f9:c8:dc:5c:ec:01:c3:3e:
c1:ea:d2:d1:0f:02:12:a2:a2:37:47:33:c8:b1:54:
dd:bb:15:02:d6:1c:62:05:0f:7c:07:7b:67:7e:0c:
58:e5:11:5f:9c:f3:00:3c:35:d8:15:81:a6:f4:d2:
92:d9:a2:c0:1b:62:07:ab:63:56:8f:6a:83:62:cb:
04:c6:ee:de:c0:de:e1:7f:f9:70:df:f9:0d:ed:77:
54:b7:7a:11:1b:04:c1:2c:15:d4:ec:a2:52:11:a9:
12:0d:85:81:55:00:2c:aa:b7:30:25:82:80:24:42:
f8:29:6e:8b:ff:2c:2d:15:a2:3b:64:31:8b:39:aa:
5a:5f:34:25:11:c4:5f:6d:d9:50:35:49:c0:a2:52:
21:36:71:b6:08:07:2f:20:f0:11:de:43:cb:cc:b3:
6c:13:5c:72:09:0d:b9:34:0a:04:d5:2d:87:54:7a:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:66:76:97:76:5E:A4:7D:CE:8A:8D:54:39:DE:A7:E7:B2:E8:A3
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/qe5mdpd2XqR9zoqNVDnep-ey6KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:57:9e:b9:29:63:74:f1:66:b0:7d:6d:a6:a5:3d:6f:fa:84:
de:9f:33:16:74:36:b1:a6:82:0d:1c:66:b9:4e:6f:de:5e:2d:
89:42:c1:4d:ed:e8:17:cb:a8:91:c0:c0:00:76:88:f1:a2:2d:
30:cd:18:51:bb:8a:36:df:9e:6e:6d:45:55:39:49:e1:15:fb:
c5:80:05:26:aa:30:cc:74:fa:c2:b7:bd:f3:c1:07:64:91:b5:
12:a9:d5:90:72:56:63:e2:e1:42:dc:39:b3:76:67:7f:dc:e4:
89:ff:40:a0:ca:8e:b6:df:8d:8e:80:80:ba:bf:fc:a2:5b:5e:
c6:dc:3d:74:0a:b3:46:ff:24:a3:ab:67:d4:31:2e:80:59:7c:
90:bf:b3:9c:63:59:aa:58:60:78:fb:30:e5:41:79:c7:84:2d:
a8:c5:a9:79:eb:93:ce:ca:5a:ff:8d:fa:52:c1:1a:21:43:09:
71:13:c7:1c:8b:db:6f:80:7f:df:1a:aa:7b:95:ba:2e:24:7d:
53:40:9f:58:01:69:60:cf:23:bc:3f:87:f1:93:0e:5c:96:0d:
70:b8:c7:ca:48:c5:bb:b5:7e:e5:3a:21:5a:a7:95:d4:a6:3d:
5b:d6:86:25:d4:6f:fc:c7:f2:31:3d:f6:c3:0c:0c:16:41:f2:
83:35:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org