Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/qK1oBV1PhTuNQa6UGZrOMi4atcw.roa
File: qK1oBV1PhTuNQa6UGZrOMi4atcw.roa (raw, json)
Hash identifier: aarYGy3fcLoaygNpORQbd7HWpE90LTagLQJz6tFsZ7Q=
Subject key identifier: A8:AD:68:05:5D:4F:85:3B:8D:41:AE:94:19:9A:CE:32:2E:1A:B5:CC
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018A1C434303DA49546C78859FBA3B6E90C4
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/qK1oBV1PhTuNQa6UGZrOMi4atcw.roa
Signing time: Tue 22 Aug 2023 08:01:24 +0000
ROA not before: Tue 22 Aug 2023 08:01:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52194
IP address blocks: 212.22.87.0/24 maxlen: 24
212.22.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:43:43:03:da:49:54:6c:78:85:9f:ba:3b:6e:90:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Aug 22 08:01:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8ad68055d4f853b8d41ae94199ace322e1ab5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6b:0d:33:7f:e3:5c:ba:dd:77:54:25:da:c7:
89:b4:3c:e1:f5:fd:b0:3f:74:f3:31:fc:d6:de:ea:
b0:58:23:01:b8:81:9d:df:f7:f5:02:ac:66:ba:8b:
08:67:70:de:a1:74:8c:f9:6e:dd:6d:6a:65:d8:30:
e7:2d:7a:42:ba:a5:96:a4:94:19:53:0b:72:51:2e:
9f:cd:b6:21:d5:e5:e3:48:e4:90:aa:5b:b5:3c:55:
84:fa:88:b5:f9:8f:67:6c:61:09:41:7e:2c:a7:1f:
71:bb:7b:60:88:bc:99:2c:0f:0b:10:c8:dc:8b:5a:
a5:09:bc:50:15:1f:eb:66:e7:39:e3:12:44:c6:61:
f6:2d:74:56:b3:f8:71:4b:b3:3a:d8:b4:27:36:3f:
61:43:d1:47:30:03:fe:ff:1b:bd:f4:de:7f:ca:4d:
2f:89:62:c1:87:07:04:83:20:05:cf:2c:14:0c:c1:
b8:c8:a5:2a:40:1c:58:cf:36:dc:91:9c:9e:0b:f2:
56:de:64:3a:74:b9:36:c3:74:7d:c0:97:dd:0c:a2:
05:1c:7f:4c:ad:75:b6:36:73:4b:86:df:c5:48:6c:
b0:eb:16:e2:bc:dd:80:69:50:0a:db:fc:ea:45:38:
0b:16:71:05:81:f3:25:d0:c8:0a:e8:77:c4:54:10:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AD:68:05:5D:4F:85:3B:8D:41:AE:94:19:9A:CE:32:2E:1A:B5:CC
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/qK1oBV1PhTuNQa6UGZrOMi4atcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.87.0/24
212.22.95.0/24
Signature Algorithm: sha256WithRSAEncryption
77:20:79:7e:c2:59:a0:92:82:fe:a5:8c:39:d7:f0:9b:9d:69:
e1:ef:19:48:a6:88:e8:46:21:d6:03:1f:c7:59:b3:04:a2:b4:
7f:8a:b9:5b:59:a5:5c:b0:ec:e7:89:32:10:fc:9e:25:8e:7c:
0f:95:d8:50:0d:d7:6b:79:9a:0a:ff:83:4f:a7:fc:7a:2b:d9:
06:83:08:90:55:c7:80:f4:3f:ed:5d:70:7b:e3:20:8e:20:1b:
61:5b:9f:66:1d:b2:d3:34:55:7a:3a:6d:e6:6f:59:27:a7:74:
23:be:b4:6c:2a:85:9b:11:b0:86:98:48:cd:20:04:13:d1:6a:
e4:2e:d2:60:f1:22:fd:30:af:e5:14:4d:b6:fe:db:8f:44:af:
bd:16:d4:de:d0:bf:c2:07:81:15:57:88:d2:02:c9:3f:9f:b9:
95:87:a5:e3:5a:87:5e:f6:06:21:ad:39:b3:48:78:10:f3:ca:
74:ba:e0:47:57:16:57:ba:aa:0d:6b:4d:72:06:3c:98:3a:8a:
ad:31:7d:68:51:bd:78:93:8e:01:aa:6d:bb:ae:f9:3f:e8:53:
8a:a3:ef:5f:e9:83:28:a9:e2:0e:7a:57:19:71:dc:1d:e0:36:
f9:dd:80:c7:2e:c9:e1:c8:56:d1:43:37:06:9f:3f:29:24:22:
24:a2:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 07:14:48 2023 by rpki-client on console-fra.rpki-client.org