Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/qesOrFTV_VNL8WyF_ShG2eNya0s.roa
File: qesOrFTV_VNL8WyF_ShG2eNya0s.roa (raw, json)
Hash identifier: pcKNwvIx49yauLTr3YTeR7RCVo1HJJgAKkGvoub9QO0=
Subject key identifier: A9:EB:0E:AC:54:D5:FD:53:4B:F1:6C:85:FD:28:46:D9:E3:72:6B:4B
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 018CC801C0CFB9735C200BB928BF47C40925
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/qesOrFTV_VNL8WyF_ShG2eNya0s.roa
Signing time: Tue 02 Jan 2024 02:30:07 +0000
ROA not before: Tue 02 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51002
IP address blocks: 193.243.168.0/22 maxlen: 22
176.123.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 02 Jun 2024 05:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c0:cf:b9:73:5c:20:0b:b9:28:bf:47:c4:09:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Jan 2 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9eb0eac54d5fd534bf16c85fd2846d9e3726b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:1a:82:c2:18:a5:b9:32:76:6d:30:73:91:
b2:d0:7d:e2:45:ba:5c:2b:87:4a:dd:65:55:e3:1a:
f5:6d:c5:19:c2:1a:79:44:7e:c1:ae:9b:e0:0f:b3:
90:cc:fa:02:04:97:4a:78:d0:73:94:71:c2:92:40:
e8:90:1c:bc:5d:f3:18:3d:ac:57:64:ce:0f:26:a2:
64:cb:d6:bb:f8:d4:31:51:ed:08:92:23:c7:60:ab:
11:a5:11:d8:ea:9e:da:b6:22:7d:4b:29:43:f1:9e:
70:b5:93:a5:44:d3:1b:9a:fd:74:e6:ad:ae:46:02:
76:ad:e8:dc:b2:08:5c:8b:67:a2:34:a0:ee:31:dd:
27:f8:0f:7e:f7:51:f8:83:43:e9:4c:36:a5:9b:bf:
26:ad:a7:51:35:55:f6:62:bc:cb:9c:7a:05:df:a9:
b0:ab:11:09:c2:ab:c2:b7:dc:f8:b0:ca:16:1f:ce:
09:e1:ab:1e:b2:87:04:3d:21:ef:be:18:31:ad:a8:
6c:3f:68:5c:58:12:d9:77:36:59:94:0e:7a:db:83:
56:67:23:d9:f6:df:bf:9e:47:82:54:bb:83:a6:8c:
44:53:67:b0:11:3d:85:9c:f6:fc:9a:92:cc:08:50:
61:fe:4e:06:c7:a2:89:91:88:13:f0:0c:8b:d8:f0:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EB:0E:AC:54:D5:FD:53:4B:F1:6C:85:FD:28:46:D9:E3:72:6B:4B
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/qesOrFTV_VNL8WyF_ShG2eNya0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.208.0/21
193.243.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:b9:3f:29:19:9e:fa:56:39:b9:45:ab:2f:93:b3:d2:b7:5d:
18:f5:bf:83:f5:bb:53:11:64:2b:1c:1e:0e:56:e7:be:2b:27:
51:26:69:7b:91:fc:15:db:3b:0b:d8:95:90:e6:d7:0d:99:ed:
cd:59:21:56:24:9b:59:a0:70:2c:0d:cd:e2:7a:69:a1:11:4e:
36:ae:d5:47:20:8e:65:3f:90:cb:90:ad:a1:a8:98:10:38:63:
3a:f4:dc:2d:c4:91:10:31:06:e8:04:9d:21:98:3f:26:25:5a:
45:a1:ad:b4:83:90:44:7c:aa:8a:60:3c:98:ba:4c:30:ed:73:
51:18:d1:f1:79:fc:de:a2:9b:c2:bf:04:45:ab:dc:ac:94:93:
d1:fa:7d:a7:f1:5e:90:fc:f2:83:9d:c7:ad:ca:5b:bc:f5:71:
76:29:66:7c:1f:b9:13:94:19:d3:dd:00:a1:67:23:e6:0e:52:
9a:ed:00:50:ee:5c:36:16:d7:bc:dd:c8:90:ec:9c:c1:8b:30:
f3:10:19:68:2a:32:e1:3f:eb:0c:3f:79:cb:db:91:04:ff:b4:
06:cf:c6:28:40:8c:cc:bb:94:11:72:0a:f4:97:3d:0e:bd:d4:
fa:9c:1c:97:90:9c:86:25:27:03:04:35:0a:2d:8d:8a:6b:f1:
03:2e:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:49 2024 by rpki-client on console-ams.rpki-client.org