Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/CQiSs0nOM7bQeGxlW6Y1Ovhtb3Y.roa
File: CQiSs0nOM7bQeGxlW6Y1Ovhtb3Y.roa (raw, json)
Hash identifier: ajuulxRbh3rX3A4b+zzwHmaByWYxdiBmkN/JWSZZJ8I=
Subject key identifier: 09:08:92:B3:49:CE:33:B6:D0:78:6C:65:5B:A6:35:3A:F8:6D:6F:76
Certificate issuer: /CN=432ffd36796e90f812a1612ec1f464de3d5e2f38
Certificate serial: 0186DB0AF58E2CB3E337FCB47DF5F7304D0F
Authority key identifier: 43:2F:FD:36:79:6E:90:F8:12:A1:61:2E:C1:F4:64:DE:3D:5E:2F:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_9NnlukPgSoWEuwfRk3j1eLzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/CQiSs0nOM7bQeGxlW6Y1Ovhtb3Y.roa
Signing time: Mon 13 Mar 2023 12:56:13 +0000
ROA not before: Mon 13 Mar 2023 12:56:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.136.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 19:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:0a:f5:8e:2c:b3:e3:37:fc:b4:7d:f5:f7:30:4d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ffd36796e90f812a1612ec1f464de3d5e2f38
Validity
Not Before: Mar 13 12:56:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=090892b349ce33b6d0786c655ba6353af86d6f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:ed:3d:fd:89:b9:6a:83:ba:21:59:8b:b7:
55:62:50:86:e2:1b:52:2b:d2:d9:d9:ff:29:3a:9c:
ac:1e:52:da:e6:33:ee:04:ce:3a:70:da:29:3f:3c:
a4:f5:70:6c:47:5b:3a:b0:00:58:de:f9:ea:b7:a5:
bb:79:80:48:9c:76:a0:42:b9:c4:2e:10:13:b9:9c:
9b:42:5c:0f:b7:84:28:62:58:8d:ef:d1:11:5a:b7:
2f:79:8f:19:af:8d:31:99:f6:d7:1c:90:25:5e:77:
57:94:4a:bc:64:3e:a6:fb:8f:e8:b4:56:24:9c:fa:
36:31:fd:19:b6:92:0e:c1:3f:f2:6c:2f:bb:9d:81:
ab:2c:95:81:f2:c6:a7:4d:7d:7e:af:07:7a:c5:2c:
6b:d2:f1:4d:ed:b0:af:47:db:20:cb:a7:c6:f3:9c:
38:b0:44:eb:3f:86:a2:a2:f7:1e:43:12:8d:32:67:
1a:9c:e2:32:19:1d:fb:c5:2f:40:92:e1:e9:c6:a8:
9d:b9:a6:b6:40:fb:13:c0:f1:61:1d:5b:95:ac:87:
57:f7:f0:74:49:8a:cb:8f:17:88:4c:8f:51:33:01:
45:9e:3d:d6:09:fd:dd:92:de:e6:4b:f3:3e:a6:ba:
97:f8:3e:12:d1:7a:46:98:5a:bb:c9:a7:a4:90:a7:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:08:92:B3:49:CE:33:B6:D0:78:6C:65:5B:A6:35:3A:F8:6D:6F:76
X509v3 Authority Key Identifier:
keyid:43:2F:FD:36:79:6E:90:F8:12:A1:61:2E:C1:F4:64:DE:3D:5E:2F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_9NnlukPgSoWEuwfRk3j1eLzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/CQiSs0nOM7bQeGxlW6Y1Ovhtb3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Qy_9NnlukPgSoWEuwfRk3j1eLzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.133.0/24
Signature Algorithm: sha256WithRSAEncryption
57:cd:5c:17:14:5e:24:5d:c6:7d:43:0b:ca:f5:42:ca:a9:96:
d1:67:f8:95:fa:1d:3e:f8:eb:7c:cd:4c:2b:16:13:10:53:42:
53:64:31:a6:c9:a8:69:78:c3:90:90:2f:bd:3a:ac:73:14:fb:
91:e9:92:43:f8:12:9f:e5:d6:09:07:3f:64:74:ce:85:ee:cf:
15:94:6c:c3:ae:d3:dc:91:fe:7e:ac:b6:e4:cd:a8:c3:0e:7b:
76:5a:88:35:3e:b0:78:b2:23:12:c6:d5:1c:6f:7d:bf:27:da:
ab:50:26:32:1e:9c:c6:79:15:6f:80:51:ca:32:da:9e:2e:28:
20:86:32:6b:c4:60:55:f6:d1:29:e6:5b:93:7a:ea:81:8f:81:
8d:8c:99:0f:2d:c1:b8:be:68:7d:cb:35:22:56:1a:62:fc:ea:
26:d0:ae:ec:4f:5d:f6:83:98:aa:81:17:0e:5e:50:a2:88:b8:
29:7a:38:bb:a9:cc:63:a2:ef:28:99:de:6b:2d:5a:50:d6:37:
06:a3:93:e1:93:3c:d0:cc:6c:82:3c:d4:22:df:2b:f7:af:02:
75:f2:cf:58:71:3b:4e:ea:1f:d6:ac:0c:e9:e5:be:95:53:5f:
c9:15:be:ae:63:b8:69:8c:1a:59:cf:7c:dd:74:2d:e0:57:84:
dd:64:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:46 2024 by rpki-client on console-ams.rpki-client.org