Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/qw5-bOc0_LHkv-phEIq3pDneOYc.roa
File: qw5-bOc0_LHkv-phEIq3pDneOYc.roa (raw, json)
Hash identifier: BcKuAI2VcpPSPtjRKYhUb3DWTKq3ORYIgwC0aBSMyXk=
Subject key identifier: AB:0E:7E:6C:E7:34:FC:B1:E4:BF:EA:61:10:8A:B7:A4:39:DE:39:87
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0186E155931D79F84555C093BA4B58CB2598
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/qw5-bOc0_LHkv-phEIq3pDneOYc.roa
Signing time: Tue 14 Mar 2023 18:15:27 +0000
ROA not before: Tue 14 Mar 2023 18:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26636
IP address blocks: 92.118.114.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e1:55:93:1d:79:f8:45:55:c0:93:ba:4b:58:cb:25:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Mar 14 18:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab0e7e6ce734fcb1e4bfea61108ab7a439de3987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:41:87:a9:74:ea:92:9e:d2:0d:23:25:3e:
d4:fb:2f:aa:85:82:18:6c:10:f0:c7:17:85:85:1a:
3e:d2:6a:fe:18:29:d6:1f:ec:e4:66:e2:e7:bc:95:
95:32:6a:36:18:39:92:80:17:d5:35:3f:7b:52:1a:
b2:e4:79:c6:6c:80:43:66:cd:06:28:cb:e8:e9:fd:
0f:b4:4e:ae:de:20:9a:2d:04:4a:40:0d:24:17:b6:
17:7c:5e:a2:66:b3:30:75:9b:74:14:5a:09:de:58:
70:94:ba:de:9c:77:cc:2e:e7:3e:f7:64:ff:09:1c:
c2:9c:6b:3f:e8:c5:90:fc:8a:54:eb:4e:f7:f9:97:
9a:20:96:64:99:e3:c4:45:68:68:05:2a:e9:3f:e4:
93:11:ba:f1:b2:dc:3a:07:8e:c9:a3:58:c3:24:5e:
eb:2a:0b:89:0c:fa:3f:7b:9b:56:cc:06:22:07:20:
82:90:88:b7:d5:73:df:a5:55:0d:b1:6c:de:c2:1b:
c3:44:f7:e5:f5:16:1c:d3:66:fb:fd:62:77:5c:2a:
41:13:ea:5d:6c:a1:17:15:34:e8:b6:f8:47:b7:57:
82:55:07:96:95:61:a7:9f:56:67:a5:b7:f3:82:1d:
71:6d:94:c9:51:63:c0:8b:98:44:2b:61:ca:10:2f:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0E:7E:6C:E7:34:FC:B1:E4:BF:EA:61:10:8A:B7:A4:39:DE:39:87
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/qw5-bOc0_LHkv-phEIq3pDneOYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.114.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:6d:34:56:d5:e5:b4:1f:e7:cc:eb:66:c4:76:7f:41:3a:f0:
f6:b5:92:ca:f8:5e:7f:67:39:c0:02:89:a5:0a:76:9a:6e:04:
79:1f:b8:b2:78:09:08:e9:9f:be:d2:2d:4f:f0:df:60:a5:55:
eb:cb:11:31:6a:ec:32:97:30:af:bd:24:eb:41:6e:03:9b:2c:
46:c4:b2:f3:ef:69:15:74:a9:9e:ad:60:03:6e:54:ab:4b:e7:
62:74:ef:6f:d0:f4:b1:65:40:5f:9e:25:e4:70:54:33:96:41:
d3:36:38:1c:95:1b:01:60:f2:8c:ae:28:96:6c:79:e5:9c:a8:
01:4d:bf:cd:d4:3f:48:40:36:63:87:65:4a:c4:a0:a7:47:fe:
7c:f1:ea:7c:f8:92:a9:1d:5a:73:67:cd:e8:e0:db:67:36:ae:
24:ff:e1:d3:97:19:f4:4c:b5:7c:80:8b:32:49:17:ce:04:41:
40:81:0f:48:6f:d3:b6:be:b6:5c:8b:62:04:65:01:31:09:77:
b9:67:e4:cd:81:af:92:a9:02:f1:e2:ab:39:ba:df:e9:b9:b0:
91:31:5c:eb:61:82:f1:e1:f3:50:26:8e:98:b1:43:9d:cb:c2:
3c:8f:5c:f1:a3:a5:e3:27:c2:34:0d:01:b7:84:2a:09:6e:b1:
fc:90:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:36 2024 by rpki-client on console-ams.rpki-client.org