Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/qCZacTmFNGqwLHE1PJcHWokKnSY.roa
File: qCZacTmFNGqwLHE1PJcHWokKnSY.roa (raw, json)
Hash identifier: rPpab7+Czd2B2ARziDQknGQhmtX4DWc0qPmRlv1HVek=
Subject key identifier: A8:26:5A:71:39:85:34:6A:B0:2C:71:35:3C:97:07:5A:89:0A:9D:26
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 018AF68A751AB39A8242A712C9C5AD7BCBF3
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/qCZacTmFNGqwLHE1PJcHWokKnSY.roa
Signing time: Tue 03 Oct 2023 17:16:23 +0000
ROA not before: Tue 03 Oct 2023 17:16:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.201.17.0/24 maxlen: 24
185.201.16.0/24 maxlen: 24
185.201.19.0/24 maxlen: 24
45.147.95.0/24 maxlen: 24
46.229.240.0/24 maxlen: 24
45.93.148.0/24 maxlen: 24
45.91.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 16:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:8a:75:1a:b3:9a:82:42:a7:12:c9:c5:ad:7b:cb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Oct 3 17:16:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8265a713985346ab02c71353c97075a890a9d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:eb:64:f1:c6:e1:f8:44:a8:0d:c8:d6:13:
ed:68:4a:c2:59:ca:01:6a:ff:91:8d:59:60:7c:5a:
0d:fc:15:74:55:56:bb:cc:ff:9c:0a:c1:0b:94:42:
53:48:b9:d1:49:1f:84:88:5c:b8:2f:ea:9c:8b:3a:
71:82:8d:c2:83:b6:bc:0d:c1:7e:21:62:34:c6:de:
a2:d8:b7:dd:3a:87:7b:f3:e1:89:67:f6:c9:d6:16:
09:44:9d:50:a3:c4:5f:80:03:3b:03:37:a8:20:98:
a8:1a:5f:50:52:53:df:71:e7:0d:42:54:ea:a4:7f:
2f:16:fb:d2:50:63:d5:fd:19:cf:2d:ad:98:55:cb:
b1:d4:a5:2f:70:ae:15:e5:0a:47:65:ef:77:d4:c0:
09:f7:58:0d:26:fa:67:a5:45:f4:46:cb:ec:0f:d7:
d8:b4:ce:9a:86:15:27:49:0d:c0:27:af:dd:38:f4:
9e:70:33:3e:a5:92:9d:93:f8:a7:d2:72:67:41:f2:
78:7e:1a:58:b2:ad:89:7a:cf:4f:fe:b1:e5:7c:59:
33:ee:27:d3:d1:a3:05:7c:ed:c7:32:5f:cd:ff:9f:
95:a1:fb:f8:79:1d:f6:c1:c5:06:de:a6:62:25:94:
35:12:33:5c:8a:bb:5a:36:d7:54:71:cf:58:a5:9f:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:26:5A:71:39:85:34:6A:B0:2C:71:35:3C:97:07:5A:89:0A:9D:26
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/qCZacTmFNGqwLHE1PJcHWokKnSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.121.0/24
45.93.148.0/24
45.147.95.0/24
46.229.240.0/24
185.201.16.0/23
185.201.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f3:6c:6f:2d:ac:32:c4:69:d8:c7:75:e3:8b:de:c5:81:e9:
cd:ed:01:1f:c6:a7:cf:d3:a6:b4:26:10:2b:76:8e:88:23:73:
1c:cd:98:d1:a6:6e:0e:42:e1:f2:76:9d:2b:52:16:a0:6c:ee:
c5:a2:c2:05:bf:30:45:df:bf:a5:21:58:1e:84:fc:0f:8d:36:
27:40:ef:b9:36:0e:8f:62:a0:31:be:b8:58:54:ee:ca:5b:1d:
f0:37:59:cc:c4:c6:55:ca:d9:b5:c5:9b:7c:51:6d:c6:72:21:
e6:7d:09:9a:64:4a:92:43:2b:6a:cc:77:1a:26:22:91:d4:27:
05:74:e5:b9:3c:8a:a9:74:b7:b4:cb:bf:0a:19:ee:c4:f7:ff:
ec:f9:17:fa:2d:8e:cb:d0:fe:16:96:8d:28:24:28:40:29:22:
19:60:35:67:27:4d:ce:0c:e4:63:2d:16:3c:18:a8:a1:ce:22:
69:24:03:62:c9:13:54:ac:c7:e6:ac:5e:88:c7:67:40:c5:9c:
eb:08:89:cd:1b:6a:88:92:4e:ea:5b:b4:ff:54:96:bb:20:5c:
ac:73:26:a4:47:48:7d:00:7c:b6:d2:18:a3:11:63:0f:49:46:
9e:a0:52:d0:84:75:bc:0c:0f:be:6a:16:ee:37:5f:70:c7:55:
70:d6:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:32 2024 by rpki-client on console-ams.rpki-client.org