Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/qg991FrG---bKnizthk4D_CmACI.roa
File: qg991FrG---bKnizthk4D_CmACI.roa (raw, json)
Hash identifier: wt7LOazs6BmbrmWRGLOA1g5QFRdRdn1tmhP4ug2zS/Y=
Subject key identifier: AA:0F:7D:D4:5A:C6:FB:EF:9B:2A:78:B3:B6:19:38:0F:F0:A6:00:22
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 01867908FB39644DD28D7BCE7BAB14879B62
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/qg991FrG---bKnizthk4D_CmACI.roa
Signing time: Wed 22 Feb 2023 12:11:17 +0000
ROA not before: Wed 22 Feb 2023 12:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210001
IP address blocks: 93.187.39.0/24 maxlen: 24
185.52.116.0/24 maxlen: 24
2a00:dd00:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 25 May 2023 08:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:08:fb:39:64:4d:d2:8d:7b:ce:7b:ab:14:87:9b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Feb 22 12:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa0f7dd45ac6fbef9b2a78b3b619380ff0a60022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:8d:fe:74:75:c5:2c:91:76:ee:97:eb:a3:
32:33:ad:7f:df:d3:0d:b2:5d:ce:69:54:0d:90:e8:
47:eb:94:e9:da:fc:d0:ac:f7:5d:41:fb:0a:b0:6f:
05:94:32:00:65:bf:ec:f1:03:c0:04:fd:4b:be:63:
62:45:1a:ae:1b:85:4e:db:52:59:82:90:f1:11:47:
e1:d4:48:93:53:04:26:18:a6:5d:4c:6b:ed:9a:3b:
39:96:2f:43:99:6f:40:5f:4c:00:1b:a2:9d:32:d0:
e1:2d:7b:c2:fa:60:13:4b:41:84:af:a6:ab:24:35:
fd:ac:53:18:9e:8c:12:ab:7e:a8:ba:ae:27:9d:c2:
eb:bc:2a:b7:1e:3e:5f:a0:0f:ae:58:fa:7b:81:35:
ec:ac:92:a3:f0:35:75:4c:37:03:64:43:a2:14:c6:
a9:de:d3:44:b9:ef:f6:d7:c2:2f:2b:37:af:e9:28:
8f:47:1b:ba:e7:83:d7:ae:78:ba:25:ea:d0:6b:e4:
26:2b:18:12:88:33:71:fa:5a:94:d9:96:ba:4e:5d:
3e:93:00:f4:75:8f:01:a3:a9:e8:f0:a6:d1:03:c4:
99:33:97:10:65:91:e0:81:6f:99:82:b7:f7:c2:55:
16:57:6d:37:fb:36:ae:cd:ce:00:a4:f8:c3:01:cb:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:7D:D4:5A:C6:FB:EF:9B:2A:78:B3:B6:19:38:0F:F0:A6:00:22
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/qg991FrG---bKnizthk4D_CmACI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.39.0/24
185.52.116.0/24
IPv6:
2a00:dd00:5::/48
Signature Algorithm: sha256WithRSAEncryption
25:35:86:f3:25:fe:45:20:6e:2d:7a:f1:30:9f:04:27:40:1e:
72:81:dd:87:05:0a:68:de:9a:3c:c2:ea:15:85:dc:ca:e3:81:
0c:4a:8b:4d:e5:9c:6c:8a:57:ca:0a:3e:c6:f5:54:59:dd:32:
dc:10:5a:fd:93:04:ed:76:42:b5:17:ba:49:b3:04:e1:51:e5:
e0:26:dc:80:4f:53:d2:06:55:c5:92:40:b1:c8:22:ad:75:79:
f9:84:31:27:64:b9:c5:e1:61:0a:8b:50:50:30:2d:2d:87:49:
1b:02:1b:67:8b:57:97:31:b0:a8:4c:68:bf:84:12:0b:5d:44:
ae:fe:1d:ba:9d:8d:a1:0c:8a:b7:98:1d:b8:df:e5:f0:3a:e5:
92:44:9d:54:61:7d:fa:26:26:01:ba:29:61:db:50:d7:a0:45:
bc:54:bd:72:b7:53:6e:82:31:28:07:84:d8:3f:f5:36:04:33:
e5:6f:2c:1a:56:ae:d3:35:90:85:80:cc:c0:4a:5d:c1:8d:11:
5e:48:ca:aa:6a:e6:7f:84:1b:c6:d8:87:9e:2c:54:f7:3e:3f:
af:e7:3a:06:7a:03:33:9f:af:4a:30:a2:3c:ce:42:5a:ab:ff:
40:ea:eb:45:1a:88:07:f9:68:01:fa:18:92:2f:c9:9d:7a:14:
c6:f9:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:42 2024 by rpki-client on console-ams.rpki-client.org