Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/qf2Asd_l2_cymdCSSOGU5Rdht-8.roa
File: qf2Asd_l2_cymdCSSOGU5Rdht-8.roa (raw, json)
Hash identifier: Mj/aD5YplN/wJ/XwkAdzNO0Chwhg7uYfOaS3TgysFcQ=
Subject key identifier: A9:FD:80:B1:DF:E5:DB:F7:32:99:D0:92:48:E1:94:E5:17:61:B7:EF
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 018AD1D49F5B6F5A24D2B7D36300F0465132
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/qf2Asd_l2_cymdCSSOGU5Rdht-8.roa
Signing time: Tue 26 Sep 2023 14:11:27 +0000
ROA not before: Tue 26 Sep 2023 14:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.201.17.0/24 maxlen: 24
185.201.16.0/24 maxlen: 24
185.201.19.0/24 maxlen: 24
45.93.148.0/24 maxlen: 24
45.91.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 17:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:d4:9f:5b:6f:5a:24:d2:b7:d3:63:00:f0:46:51:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Sep 26 14:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9fd80b1dfe5dbf73299d09248e194e51761b7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:2f:5c:0b:3b:bc:f3:62:32:2f:3c:e9:fc:
07:9a:45:a6:0b:4b:a0:12:47:50:d9:de:b1:47:55:
2e:75:13:d3:cb:c6:3d:4e:39:56:64:5b:49:98:cb:
e6:91:79:06:8d:3f:db:c3:57:ea:b1:3f:13:f4:ca:
ed:16:64:df:3b:94:7e:b9:45:5f:16:ce:f3:9b:2c:
3b:5e:e6:cd:2c:f5:41:0a:83:24:ff:06:83:62:b9:
df:70:07:02:53:49:ce:66:d4:7f:5d:de:90:75:cc:
8c:af:08:93:c9:a8:4d:c7:bd:21:97:20:38:ab:d6:
7c:11:0a:80:0c:d1:15:5b:48:f1:d4:9e:91:d0:cf:
2f:9c:2e:2c:e3:a0:e2:2f:c7:43:ca:2e:6c:fa:03:
07:f4:71:c9:15:80:de:3f:40:63:db:b9:7f:9d:26:
c8:e4:d9:3d:6b:be:04:a3:5d:14:1c:5f:b5:ee:52:
6e:51:d8:b8:bb:6a:c0:fd:48:db:3e:7f:13:e7:fb:
bf:d5:c3:6b:1a:dd:00:fe:64:fd:c0:ee:d7:e9:38:
b7:17:35:ea:ea:07:78:92:31:da:de:13:e2:6d:ec:
b6:3b:19:a6:8c:a0:a5:d6:fd:e8:d2:51:34:df:83:
81:08:f8:f0:cf:3f:58:fd:06:05:54:46:fe:6b:0f:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:80:B1:DF:E5:DB:F7:32:99:D0:92:48:E1:94:E5:17:61:B7:EF
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/qf2Asd_l2_cymdCSSOGU5Rdht-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.121.0/24
45.93.148.0/24
185.201.16.0/23
185.201.19.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:80:ec:5c:b1:9e:04:11:48:21:3c:e9:d5:fe:c0:13:8c:12:
2f:c6:10:2f:ec:97:51:7d:b8:28:c2:ee:dc:c9:f5:69:d7:18:
63:e1:f5:e9:c5:d3:74:58:32:d9:ea:37:19:c2:d9:56:6e:fc:
9c:ba:8d:04:38:df:c2:44:49:fe:70:0a:01:b1:46:de:ae:e8:
54:7e:58:9c:a0:f2:b3:07:40:f0:5a:c8:df:af:b9:5d:e9:0b:
c4:65:f0:e2:17:dd:28:82:be:e9:cb:6e:fc:01:7e:0e:ec:1f:
ef:71:d9:1e:5a:7c:cd:9f:47:7f:aa:d5:62:7c:cd:f9:95:1e:
53:53:b0:25:d6:18:3f:6e:b2:09:dd:cd:ad:68:3d:4d:f4:57:
dd:79:d5:44:39:01:bf:ea:c8:42:cf:41:7d:0b:b4:55:8e:bc:
93:7b:fb:ab:ba:e0:ce:be:9a:08:1d:6f:77:e7:cb:9a:82:e1:
e4:ab:be:67:1b:39:82:02:8c:4d:ec:d4:f9:96:87:a6:10:f3:
5c:bf:4b:93:5a:dd:98:2d:2a:7c:fe:97:25:79:a3:cf:7c:7c:
01:51:57:6a:fd:f6:4e:78:f5:6f:d0:b5:b0:c3:27:5a:2a:8f:
73:5a:2d:8a:eb:cc:fb:a5:dc:8c:70:9e:3a:74:f5:6f:fc:c3:
e4:80:7d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:18 2024 by rpki-client on console-fra.rpki-client.org