Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qissGLpOI0qswel5jjulDZzUQ0Q.roa
File: qissGLpOI0qswel5jjulDZzUQ0Q.roa (raw, json)
Hash identifier: I+aOUPVA8YPi6b7sj7UBEl/UumBLHAnZ6eS4HcVzk4s=
Subject key identifier: AA:2B:2C:18:BA:4E:23:4A:AC:C1:E9:79:8E:3B:A5:0D:9C:D4:43:44
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018B1F0B4B3FF0944717059AD18981820FC8
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qissGLpOI0qswel5jjulDZzUQ0Q.roa
Signing time: Wed 11 Oct 2023 14:01:55 +0000
ROA not before: Wed 11 Oct 2023 14:01:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
213.145.88.0/21 maxlen: 24
213.145.88.0/24 maxlen: 24
213.145.95.0/24 maxlen: 24
213.145.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Oct 2023 11:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:0b:4b:3f:f0:94:47:17:05:9a:d1:89:81:82:0f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 11 14:01:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa2b2c18ba4e234aacc1e9798e3ba50d9cd44344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:00:47:b0:57:1d:45:51:2a:17:15:74:57:
e2:ed:11:93:60:f7:fa:ea:e9:ab:4d:dc:a6:09:67:
e7:f6:1a:79:7c:fd:a1:91:27:62:0d:a6:ea:64:dc:
9f:40:69:fb:ec:0f:7e:02:0f:7b:6c:eb:bd:4b:78:
35:a5:b1:73:04:0e:dc:aa:fd:21:ae:47:1f:92:ef:
e6:01:98:e9:5f:15:43:62:10:9c:50:da:f1:0d:bc:
f7:dd:e5:6c:fe:09:d5:b8:65:ff:d3:5a:76:2a:54:
93:4a:27:a0:a7:fc:40:d2:55:fe:e5:71:4f:99:c5:
d8:3a:0e:b8:57:b5:85:93:32:90:bf:f5:9e:cd:74:
9b:b6:b1:13:27:6d:be:45:7a:ba:ec:ad:39:ab:8c:
d9:39:67:10:b6:43:9f:0e:4c:73:85:ed:99:50:5e:
3e:10:36:9a:72:e7:cf:68:fa:c9:51:2d:48:ef:58:
78:a7:76:94:36:5b:45:7b:71:8b:7a:8f:b0:a0:0f:
3d:08:56:bb:bb:ce:13:9b:9d:f0:b0:dc:a1:25:d0:
8f:98:e3:7a:31:1e:50:4e:ac:91:05:02:73:49:99:
25:82:82:ff:73:83:fa:8b:df:c1:19:06:83:54:b8:
fb:7d:14:08:6d:88:e8:51:b0:86:c4:b1:19:30:e8:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2B:2C:18:BA:4E:23:4A:AC:C1:E9:79:8E:3B:A5:0D:9C:D4:43:44
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qissGLpOI0qswel5jjulDZzUQ0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.88.0/21
Signature Algorithm: sha256WithRSAEncryption
47:d8:2c:e1:b5:86:ba:20:2a:21:9a:9a:a7:4f:ed:db:f8:2d:
07:4e:d5:a0:89:c8:00:93:97:16:c6:78:e3:52:72:d5:6a:b5:
2b:25:65:a1:4e:9b:c7:f7:a7:10:44:ff:e5:7d:1d:5b:85:0a:
ee:76:40:b8:74:d3:0c:d5:9a:03:39:a6:f4:c6:49:0a:f4:2a:
f5:63:36:62:fc:62:4a:77:2c:85:2f:06:91:5d:e8:b6:95:34:
4c:01:e9:65:f3:76:9e:c4:14:fc:52:eb:0a:da:fa:55:21:3a:
b4:32:88:a3:0a:85:3a:d5:02:e3:42:6e:12:83:95:33:7d:e5:
4a:f9:8d:f5:81:a9:a6:2a:35:d0:b3:35:70:b5:73:8d:51:1a:
60:b3:23:bd:dc:93:98:24:0d:dd:b4:da:98:1a:fa:82:77:9e:
04:1e:d7:e8:7d:22:31:56:50:4d:d0:84:c5:3f:0e:0c:36:3c:
04:89:cb:09:8a:d9:ca:8e:e1:42:cb:c5:99:0f:6c:0a:b9:76:
ad:3f:1c:16:1b:89:cf:a8:65:aa:e6:30:d8:4a:34:f1:06:74:
33:0d:7a:17:fb:d0:30:cc:87:0a:6a:44:a0:07:5b:22:e1:b3:
a4:ea:b1:6b:1e:c3:b7:fc:55:3d:0e:95:26:65:4f:69:48:6d:
19:29:e0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org