Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/qucSB2afF6ES0_ZCmnLV-IMBcFQ.roa
File: qucSB2afF6ES0_ZCmnLV-IMBcFQ.roa (raw, json)
Hash identifier: 8UztBkDb7lsB3e6wZTAA/zr1jY37SrZ6sOQqFjZuyfY=
Subject key identifier: AA:E7:12:07:66:9F:17:A1:12:D3:F6:42:9A:72:D5:F8:83:01:70:54
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01856DC1BDB41DCABD30A196AF5DE11A8FBB
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/qucSB2afF6ES0_ZCmnLV-IMBcFQ.roa
Signing time: Sun 01 Jan 2023 14:34:51 +0000
ROA not before: Sun 01 Jan 2023 14:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 91.149.228.0/24 maxlen: 24
91.149.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 28 Feb 2023 05:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:bd:b4:1d:ca:bd:30:a1:96:af:5d:e1:1a:8f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 1 14:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aae71207669f17a112d3f6429a72d5f883017054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cd:d3:67:d4:05:e1:82:42:02:7e:47:3b:41:
93:48:32:69:84:b7:e2:1e:ef:ac:c9:a3:7b:85:51:
3b:65:ba:11:69:6c:93:b4:53:84:6f:67:3a:bc:10:
eb:ab:6b:d2:8f:b2:4a:b5:42:f7:bc:ab:cc:ff:d8:
b9:1f:72:f5:95:3a:ca:62:3a:c3:23:fe:cb:ad:a7:
ec:11:14:d5:b6:2b:99:85:3c:d6:2c:41:de:97:6f:
7a:d6:01:53:99:06:a0:89:84:95:a3:71:f0:eb:48:
8f:26:8d:a2:01:16:ce:bc:1e:cb:44:51:d4:e9:79:
ff:c2:97:ea:bb:16:db:79:ce:5b:0e:43:cf:0e:bc:
78:c9:b7:a3:75:de:05:e8:fd:e9:9e:d4:fb:6d:6d:
a7:31:6c:04:91:fb:3b:d6:6f:66:81:59:ec:c3:52:
d8:ea:2e:d0:36:02:60:cf:01:57:df:9a:39:e6:68:
98:e2:e9:73:ac:8b:5e:f9:a7:59:0b:7a:d2:74:25:
99:0d:d6:d4:ea:d0:8b:15:70:b4:af:4d:8a:a9:e5:
37:3c:35:cd:0a:e5:4f:32:79:92:7b:a1:1b:ed:97:
04:e7:c6:1b:a9:44:50:63:96:71:df:6b:98:90:41:
05:64:92:90:ad:d6:20:73:3a:f3:23:25:22:07:25:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:12:07:66:9F:17:A1:12:D3:F6:42:9A:72:D5:F8:83:01:70:54
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/qucSB2afF6ES0_ZCmnLV-IMBcFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.228.0/24
91.149.248.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:2d:54:86:49:4c:93:92:d3:51:3b:84:ed:0d:f9:1e:8e:a7:
33:46:1a:0f:61:1c:72:14:4b:2b:8c:dd:44:cb:75:28:50:21:
bd:86:46:2e:14:b1:8e:7e:62:4d:b2:78:42:65:f1:d0:38:fc:
8b:42:1d:71:6d:7d:a2:fd:77:3a:41:ca:5d:01:77:e9:8d:98:
dd:ea:61:e7:ae:79:a3:f8:a3:27:d1:30:50:4f:9c:dc:cb:58:
ca:12:27:bf:ca:c9:87:d3:74:50:76:e4:cc:9b:c5:57:ae:6a:
92:e6:da:69:79:2e:04:95:49:f5:c2:ab:1d:cc:8c:74:6b:32:
e2:95:dc:b7:eb:33:9b:cb:4f:57:67:b5:5e:fa:c0:50:76:d3:
d4:72:e4:0e:89:fd:5f:ea:98:da:93:a8:d6:51:32:3d:2c:98:
e5:d2:0c:e6:2e:aa:87:0f:10:f2:80:34:e5:fa:36:a4:b2:e4:
38:a6:4a:fc:61:59:6e:68:ad:7c:f4:d5:80:e5:b3:f4:df:fa:
3c:3b:1a:5e:35:49:79:43:99:68:a9:f0:43:2d:b4:53:dc:a6:
78:a6:c3:c1:cf:67:38:a7:d9:fb:4d:4a:21:4b:fa:c7:d2:7e:
f9:0a:b8:2c:81:51:58:f2:cd:e7:0b:27:3c:95:3c:11:9b:fa:
64:0f:da:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:16 2024 by rpki-client on console-ams.rpki-client.org