Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/QWB6Uk6zloq3CgU2RgULs_4E9tg.roa
File: QWB6Uk6zloq3CgU2RgULs_4E9tg.roa (raw, json)
Hash identifier: JV+6hVpyzNecOugnwNDlHJGGRiJkgZDnvUDPSTeXvNE=
Subject key identifier: 41:60:7A:52:4E:B3:96:8A:B7:0A:05:36:46:05:0B:B3:FE:04:F6:D8
Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial: 018B1BB6F02DC06078770CC77563AE90CB92
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/QWB6Uk6zloq3CgU2RgULs_4E9tg.roa
Signing time: Tue 10 Oct 2023 22:30:55 +0000
ROA not before: Tue 10 Oct 2023 22:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.22.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:b6:f0:2d:c0:60:78:77:0c:c7:75:63:ae:90:cb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fe040242651353d556b8c4240082190f271d13
Validity
Not Before: Oct 10 22:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41607a524eb3968ab70a053646050bb3fe04f6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:b4:93:cc:0e:0b:db:36:ab:f7:2d:b1:c5:
3c:06:05:11:27:b2:a2:79:42:bf:36:18:74:e6:e2:
30:c6:7d:ae:0a:55:94:2c:9d:f0:c1:fa:d0:1c:6d:
8f:b6:61:44:05:e2:de:18:51:1f:66:1e:c4:bb:70:
73:3c:72:4c:00:57:c2:9b:aa:50:19:7b:14:0d:25:
17:92:60:d1:ef:b5:a0:b3:86:78:43:a6:c6:df:2c:
93:7c:00:0d:cf:37:b6:41:b0:d0:f9:aa:1b:b1:1c:
a8:35:9f:04:8f:0a:82:52:ef:23:4e:3c:89:16:31:
43:87:6b:62:bc:08:e8:a1:5a:f8:3b:ce:b5:db:8a:
d5:66:53:e1:7a:e4:a3:0d:58:d9:4f:cd:c6:b1:83:
26:99:83:dc:b2:d6:7b:01:e8:e1:93:9c:41:ac:fb:
42:d9:36:01:b1:8a:fb:37:66:41:4b:c5:78:04:6f:
02:c6:10:5a:7d:09:f4:9c:73:4a:df:24:38:14:36:
c9:d4:3a:dc:96:1d:c0:d2:fc:85:b8:9e:3b:ad:99:
61:a5:72:2b:d3:e7:a0:fc:10:c8:3f:12:ee:22:03:
d7:ec:2d:54:8e:c7:78:45:09:c2:8a:fd:d3:8b:1f:
2c:1a:61:f5:bd:f6:41:63:e8:1a:1b:01:61:67:dc:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:60:7A:52:4E:B3:96:8A:B7:0A:05:36:46:05:0B:B3:FE:04:F6:D8
X509v3 Authority Key Identifier:
keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/QWB6Uk6zloq3CgU2RgULs_4E9tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:cd:32:af:ea:d3:18:81:b5:7b:a3:a5:55:7f:79:b9:c1:29:
77:67:69:8d:d9:e6:ab:c7:65:32:06:9d:66:2e:b6:ad:dd:fe:
72:9b:e9:43:89:b3:9a:fa:33:2a:45:8d:1e:57:45:29:01:e4:
fc:36:31:69:61:6a:41:4f:59:cf:e4:ae:0f:62:2e:73:b8:91:
19:e0:e0:de:95:13:69:9f:20:de:70:d4:15:20:2e:cc:7d:31:
86:7b:f4:bf:2a:5b:29:27:aa:c6:b2:47:75:6e:8b:c1:74:86:
f4:5c:f4:c7:73:b6:9c:ff:06:40:71:2b:83:aa:02:56:62:64:
db:67:d8:64:45:c2:0c:51:f4:ac:f0:15:a2:b0:aa:47:5d:aa:
ec:49:65:48:df:8f:fa:00:9a:58:d6:14:43:6e:39:d9:80:f2:
4f:36:2c:7a:71:e6:e2:64:8f:1c:57:fa:be:98:74:60:07:16:
74:ff:75:3f:d7:a0:dc:e3:6d:8e:9d:97:21:47:e4:f3:7a:f4:
7e:ff:73:a5:f3:cc:85:d2:a3:78:6b:5e:8c:e1:6b:b5:bb:db:
d1:c6:c8:2d:65:67:e9:bb:7c:f5:29:ff:2a:f2:8e:48:52:1d:
61:85:48:dd:71:f9:54:c8:ee:43:05:06:33:94:a7:9a:a4:17:
f8:7b:bb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:56 2024 by rpki-client on console-ams.rpki-client.org