Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/qzjkheQhejcGeAu28kReAj3Ebqw.roa
File: qzjkheQhejcGeAu28kReAj3Ebqw.roa (raw, json)
Hash identifier: a2e4LRbxAfwAf22sQtYTXCqn2wkNrwYZI61HixI11Mo=
Subject key identifier: AB:38:E4:85:E4:21:7A:37:06:78:0B:B6:F2:44:5E:02:3D:C4:6E:AC
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 01856F6700F8F54C7A4C773A488A3222861E
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/qzjkheQhejcGeAu28kReAj3Ebqw.roa
Signing time: Sun 01 Jan 2023 22:14:59 +0000
ROA not before: Sun 01 Jan 2023 22:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206070
IP address blocks: 185.197.104.0/22 maxlen: 22
185.212.160.0/22 maxlen: 22
185.245.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:00:f8:f5:4c:7a:4c:77:3a:48:8a:32:22:86:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Jan 1 22:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab38e485e4217a3706780bb6f2445e023dc46eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:31:80:77:48:4f:34:3c:99:d3:72:5d:c8:e0:
7f:39:92:da:b3:69:78:26:42:a6:92:57:38:c1:93:
ce:2d:0b:e5:f7:fb:10:ff:f3:95:37:74:03:89:50:
c9:e3:07:d9:f6:8b:2d:6b:5c:7d:73:69:e9:3b:80:
97:21:63:e7:c3:06:f6:d8:cb:c7:91:a4:b9:51:0a:
93:2a:1e:45:39:1f:39:ad:23:7c:ad:ac:42:1b:94:
ee:7d:fd:0b:ca:c0:99:84:ff:c3:88:f4:14:12:13:
a5:f4:f1:91:d5:61:71:ae:eb:96:d9:b1:b7:2e:a0:
db:3b:d1:73:41:8c:c2:30:9a:77:41:ae:81:99:78:
e5:2c:8c:bb:a5:32:f7:e4:83:88:56:01:bd:03:12:
a8:fc:5b:b3:c3:63:31:a6:82:3a:a3:a7:ef:3e:96:
8a:13:63:2d:2d:0b:b9:d6:18:d7:e1:61:b6:74:a7:
9c:b9:de:c5:1f:da:36:b3:0f:b4:08:ed:1c:12:f9:
bb:ae:96:22:e1:c3:39:00:d4:5c:59:5c:70:7d:f5:
a3:a0:d8:cf:55:2b:f6:73:22:75:c2:70:13:32:8d:
5f:7a:72:1d:24:7a:bf:31:b5:db:4f:6b:e3:4d:ec:
ed:53:e4:8f:d0:e8:ea:51:d4:f6:c6:c5:a9:b8:34:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:38:E4:85:E4:21:7A:37:06:78:0B:B6:F2:44:5E:02:3D:C4:6E:AC
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/qzjkheQhejcGeAu28kReAj3Ebqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.104.0/22
185.212.160.0/22
185.245.24.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:96:6b:ce:8c:3f:3d:2c:a2:8e:3b:a0:bf:68:af:af:b5:a1:
70:fc:52:4c:d8:cd:b3:14:8a:f0:25:86:ca:52:5f:6a:ef:19:
53:3c:9a:05:c5:64:d4:0c:56:45:b6:36:7e:0c:b6:15:e0:e3:
95:88:31:86:fd:8c:2e:6e:d1:03:8e:83:39:25:13:2b:68:83:
4c:31:d2:ea:54:5b:6d:bc:5a:c7:a4:6c:b9:f7:67:6f:8f:2d:
63:1d:42:51:a5:bc:f4:de:07:01:18:4f:40:4a:53:9b:e8:0e:
21:ab:45:93:e3:90:14:91:e0:4c:a5:17:0a:01:e4:d4:0c:a5:
b6:ca:28:2f:af:5d:a7:48:86:7f:c7:2b:58:a0:35:d8:63:91:
7c:c2:bd:b0:90:00:ba:61:71:44:d9:28:ab:29:ab:7f:b7:fc:
83:c0:17:6d:23:24:8c:c8:d6:29:c8:89:b3:31:2b:d3:ac:e5:
65:94:b9:76:a1:6f:8a:36:be:5d:c9:3e:0a:e7:88:59:35:81:
f0:ca:5d:d4:80:cd:b4:c9:d3:87:8c:85:10:0b:3b:81:35:e6:
88:80:72:1a:f3:15:e1:48:57:cb:d6:0a:cc:e6:1d:5e:8c:66:
27:44:9f:fb:10:33:09:a8:b0:9b:88:52:e6:12:93:5c:1a:55:
be:18:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:41 2024 by rpki-client on console-fra.rpki-client.org