Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/q6Oe5Psb2pLKniCLBKJVbfD96FA.roa
File: q6Oe5Psb2pLKniCLBKJVbfD96FA.roa (raw, json)
Hash identifier: XDXnqqfGvdAXWAMXpcMtwBfWZq9fGcDrWDXQm795eew=
Subject key identifier: AB:A3:9E:E4:FB:1B:DA:92:CA:9E:20:8B:04:A2:55:6D:F0:FD:E8:50
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 018A073763139331E6E7A635E9A6F210F280
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/q6Oe5Psb2pLKniCLBKJVbfD96FA.roa
Signing time: Fri 18 Aug 2023 05:56:24 +0000
ROA not before: Fri 18 Aug 2023 05:56:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 195.54.161.0/24 maxlen: 24
91.231.186.0/24 maxlen: 24
45.86.230.0/24 maxlen: 24
2a10:1fc0:7::/48 maxlen: 48
2a10:1fc0:a::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:37:63:13:93:31:e6:e7:a6:35:e9:a6:f2:10:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Aug 18 05:56:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aba39ee4fb1bda92ca9e208b04a2556df0fde850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:0c:24:8e:0f:63:ea:58:83:ec:c9:00:62:
de:7f:f4:cf:09:1b:76:f3:a9:1d:5d:9e:69:16:36:
14:8b:ff:bb:a4:80:e9:47:27:ff:81:d7:30:35:48:
57:be:6e:98:03:16:8b:d5:b6:cc:7c:69:75:14:ae:
11:ce:bf:4f:20:d6:b0:11:6f:a2:2f:a1:6a:20:6a:
2f:3c:12:98:32:b4:b9:e7:a9:de:45:56:dd:93:4a:
76:24:24:e5:16:71:52:19:35:e9:dc:7d:24:a1:f8:
41:89:fe:7d:d7:b7:8c:f3:8c:b8:ed:95:de:5b:31:
2e:81:9c:10:41:32:ea:ea:14:77:c6:9e:0c:f5:a1:
dc:2f:e9:ab:4e:87:91:23:90:36:c2:31:0a:87:b2:
7a:8b:35:a8:43:e5:d4:04:1c:84:2e:26:15:54:a9:
c8:85:01:e2:9e:60:2c:49:17:a2:eb:b4:bd:a1:7f:
28:2f:fc:c1:6a:a2:a8:b4:5b:c7:f6:c7:96:a7:bc:
ce:9f:aa:31:39:89:19:33:cb:c3:ac:d2:d2:13:9b:
9c:ee:80:f2:13:31:ee:eb:46:88:2d:a3:9d:97:4c:
5f:cb:11:3a:fa:8f:12:79:bf:3f:e7:6d:e6:8e:58:
3f:56:37:7a:75:09:31:18:87:e0:cc:7e:3f:5a:6b:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A3:9E:E4:FB:1B:DA:92:CA:9E:20:8B:04:A2:55:6D:F0:FD:E8:50
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/q6Oe5Psb2pLKniCLBKJVbfD96FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.230.0/24
91.231.186.0/24
195.54.161.0/24
IPv6:
2a10:1fc0:7::/48
2a10:1fc0:a::/48
Signature Algorithm: sha256WithRSAEncryption
02:e2:3e:0b:d9:d4:05:e7:b7:c1:fd:38:88:fa:84:3a:df:fa:
c1:3c:29:a8:97:cd:5f:b2:bd:d5:65:e2:da:f6:1d:14:45:c7:
97:40:1f:b6:fd:b3:ff:c2:e7:5b:23:a5:5e:33:67:3b:7f:70:
26:d9:1f:7f:51:65:b3:00:ca:a9:68:1f:f0:9d:e6:46:68:12:
75:ff:c1:ff:8f:04:52:48:3b:4d:c2:dd:9a:76:f9:d5:d8:08:
11:bc:62:81:94:03:f8:e7:5e:2e:a6:c6:a4:86:ff:e7:ad:c5:
4e:96:ff:cf:5d:f5:cc:1b:23:21:43:f7:f6:fe:1e:33:ce:5e:
40:50:4c:cf:bc:84:e8:7d:4a:1a:48:6d:8d:28:31:72:50:8c:
a3:fb:33:e4:b2:54:bf:3a:bf:42:57:b8:d8:1d:7b:97:3a:53:
a1:f4:ca:9a:86:f6:47:d9:93:1d:73:be:28:6e:16:03:f8:99:
f4:b5:20:cd:58:17:f5:42:da:22:32:b9:13:1b:70:8e:f0:b3:
e6:70:f9:6d:9f:f1:9b:95:64:52:29:07:f2:24:f6:b4:b7:b3:
f3:23:65:71:05:84:43:a2:43:97:19:72:6d:83:28:67:07:d2:
ab:2f:be:1f:f3:87:7c:62:b2:ef:60:c4:e6:44:c0:eb:66:d7:
06:37:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:52 2024 by rpki-client on console-fra.rpki-client.org