Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/j4eGa5yiGuaDUT593VsPNiJyZqg.roa
File: j4eGa5yiGuaDUT593VsPNiJyZqg.roa (raw, json)
Hash identifier: 3gRbsojgd2K9An06FJ6wU2kg+sRURaDqVa1kj+FEf2M=
Subject key identifier: 8F:87:86:6B:9C:A2:1A:E6:83:51:3E:7D:DD:5B:0F:36:22:72:66:A8
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 01875518C7F29AC4C2B13D05C140CFE3B2EB
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/j4eGa5yiGuaDUT593VsPNiJyZqg.roa
Signing time: Thu 06 Apr 2023 05:45:00 +0000
ROA not before: Thu 06 Apr 2023 05:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206238
IP address blocks: 185.93.175.0/24 maxlen: 24
2a10:3780::/29 maxlen: 29
2a10:3780:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:18:c7:f2:9a:c4:c2:b1:3d:05:c1:40:cf:e3:b2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Apr 6 05:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f87866b9ca21ae683513e7ddd5b0f36227266a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:e7:55:c1:60:dc:b7:e2:f0:65:5d:25:56:
ae:c8:d7:40:ab:46:8a:da:b7:76:fe:ea:6a:69:23:
08:f5:d2:be:54:d9:21:dc:19:7e:b3:9d:17:16:43:
e7:b4:9c:6d:93:dd:4e:93:c1:b6:21:97:cf:d7:44:
4a:81:d0:0a:dc:ad:a0:d3:96:c5:ee:3a:28:6b:68:
3a:95:ed:41:78:96:a1:33:58:76:87:0d:1f:f4:79:
cf:6a:c5:59:f8:55:43:6f:c9:be:8d:79:ba:1d:b5:
13:1e:9b:e3:8d:e0:11:18:6b:9b:18:ec:17:b9:d9:
dd:49:9d:5b:5b:ad:42:a8:14:00:d9:c0:e9:67:23:
72:a9:e1:de:9e:2f:7d:d7:84:c0:73:02:e0:ef:50:
db:d2:16:61:9c:77:16:0e:07:e7:f2:7b:2d:e4:81:
41:84:a5:f1:e5:4e:b3:c9:37:f3:5a:f3:ed:b8:9d:
04:c1:68:ed:ca:e5:bc:c1:63:db:ba:cf:86:ae:46:
ee:9a:77:9f:65:32:c7:49:d0:9b:43:49:e2:2c:1d:
8b:92:fb:01:5c:93:5e:6a:11:ae:24:39:5a:03:a4:
e6:a0:7c:c7:67:47:ca:1c:ef:0c:99:c1:83:20:cb:
de:60:7b:00:cc:ec:5f:36:bf:d6:c3:1c:5d:61:e7:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:87:86:6B:9C:A2:1A:E6:83:51:3E:7D:DD:5B:0F:36:22:72:66:A8
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/j4eGa5yiGuaDUT593VsPNiJyZqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.175.0/24
IPv6:
2a10:3780::/29
Signature Algorithm: sha256WithRSAEncryption
75:cf:6e:e5:d5:e3:cb:b9:3b:b0:c2:7e:80:b2:49:a0:a8:68:
d5:5f:11:be:9a:dd:a6:6a:f5:b7:73:1a:fb:49:8f:0c:9e:38:
5f:ea:a4:95:8b:a9:41:bc:3c:e0:74:01:be:99:12:c3:7a:f2:
28:28:f0:fe:b6:67:06:20:9d:d0:fe:82:55:5f:9c:aa:9c:c2:
02:10:f3:0b:49:1a:40:b5:d1:1d:0c:35:f6:4e:c5:c1:f9:9e:
11:e6:12:82:27:4b:bc:fb:47:d3:3b:7f:9f:9b:aa:e9:9a:36:
9f:c4:c6:1f:11:3c:55:48:44:91:dd:e3:ca:13:f5:b5:3a:15:
f6:e1:d3:f3:42:d1:d0:48:91:97:46:67:d2:76:f9:52:c6:59:
67:22:ac:e0:25:78:5c:78:85:20:fb:46:ce:5a:a5:44:42:34:
a6:37:5a:e2:13:5a:e9:2f:cc:92:24:75:aa:38:55:98:d3:36:
38:c4:d6:5b:27:57:2f:70:1e:75:55:ab:b8:06:e3:21:4b:37:
71:a1:b2:47:f0:8b:e4:c2:31:c6:78:9b:8f:03:57:e2:58:cd:
b5:53:e6:aa:71:64:bc:df:94:a4:37:b1:1f:03:fa:fb:49:d1:
d6:77:26:82:df:51:d1:85:c2:86:e9:c1:0b:75:8e:35:bc:5d:
d6:e1:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:00 2024 by rpki-client on console-ams.rpki-client.org