Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/QFYWt6CzCWQKuu0LpykwVFmvwpo.roa
File: QFYWt6CzCWQKuu0LpykwVFmvwpo.roa (raw, json)
Hash identifier: XetHuNBeFflE2sPrzwGFWPygWmMY5emPI4UBhWIG2gk=
Subject key identifier: 40:56:16:B7:A0:B3:09:64:0A:BA:ED:0B:A7:29:30:54:59:AF:C2:9A
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0188DD509018FDA434F05DCAC0B3A3B5F3A8
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/QFYWt6CzCWQKuu0LpykwVFmvwpo.roa
Signing time: Wed 21 Jun 2023 09:37:04 +0000
ROA not before: Wed 21 Jun 2023 09:37:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197071
IP address blocks: 185.236.8.0/24 maxlen: 24
45.86.156.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:50:90:18:fd:a4:34:f0:5d:ca:c0:b3:a3:b5:f3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jun 21 09:37:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=405616b7a0b309640abaed0ba729305459afc29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:d0:1e:15:7f:00:41:17:1f:bf:60:7d:fc:
f5:d9:fd:ca:ca:93:ae:02:01:c9:14:da:6d:40:5e:
35:7b:7b:68:76:2a:17:08:81:63:9c:7c:d0:3e:c0:
11:ed:ab:46:92:ee:c8:ba:b8:da:59:74:10:a5:41:
a2:7b:3f:e8:81:75:97:7f:f8:4c:e5:d3:2b:8b:13:
df:03:94:f3:df:ef:8b:e7:7a:37:32:07:ae:c7:2e:
3b:e3:73:e5:03:73:e3:48:a1:94:33:84:69:d0:c2:
24:79:1c:dd:0b:a7:c6:e4:70:7c:44:f0:79:93:10:
ab:69:1c:83:36:50:97:24:8e:77:8c:a4:8d:7e:a2:
85:a2:a3:4e:59:2f:57:84:75:8c:0c:b6:8b:0b:2e:
73:30:0b:b8:46:9a:d2:8b:24:c2:a3:2a:43:0d:37:
ec:bf:91:b1:4b:59:aa:72:79:5c:a1:b1:7e:b3:3a:
c7:ff:7d:3b:9e:e1:ff:10:6f:d5:30:ba:3b:39:21:
0e:c8:37:61:8a:8b:02:c4:7a:be:a6:2e:9b:41:ee:
b6:b4:e7:e6:a5:41:cc:34:16:bc:e9:d9:36:e4:89:
d2:0a:99:c4:1b:87:14:d4:ef:bc:67:44:cb:e1:84:
7c:70:26:de:0c:9f:af:24:e1:fb:2b:83:ce:34:23:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:56:16:B7:A0:B3:09:64:0A:BA:ED:0B:A7:29:30:54:59:AF:C2:9A
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/QFYWt6CzCWQKuu0LpykwVFmvwpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.156.0/23
185.236.8.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ec:83:41:6e:7c:65:53:82:46:ff:88:d3:f8:e3:37:9b:99:
73:e3:a2:d8:18:31:ae:51:05:92:48:40:f2:f4:13:66:aa:19:
51:95:78:81:7b:fd:a9:e3:c2:9e:6b:d6:3e:87:a3:38:8b:1b:
83:ee:c3:70:fe:e1:54:d3:c9:8d:3f:b5:2b:0a:e4:50:cd:55:
d1:9e:46:95:c3:d0:50:08:a1:6b:24:df:2e:ee:0c:a6:f3:ef:
ef:93:53:01:21:86:ca:16:66:b9:48:38:68:33:5b:dc:2c:38:
6a:f1:f8:05:09:c6:b7:21:b5:88:22:36:81:d7:eb:32:81:70:
8d:b1:d9:9e:d7:a3:7a:43:ef:60:de:4c:e6:b4:be:58:79:53:
04:89:b6:ed:1f:5d:c2:45:3f:03:6f:d6:89:aa:17:1f:63:28:
3b:bf:ba:9b:89:54:17:6b:b7:64:ff:8e:fb:23:c4:c1:8f:23:
8d:c2:86:32:14:53:ef:46:2a:27:54:e7:ec:05:82:79:b8:01:
45:b8:5e:13:66:f7:9a:4b:99:67:cf:e6:42:0f:a2:79:1b:0a:
da:f9:84:c2:d5:bc:d8:c5:4a:94:eb:9d:97:6e:d2:be:68:09:
46:e8:e7:95:b6:4c:b7:38:20:60:89:30:e7:be:ed:49:26:b6:
e8:c0:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 01:23:43 2023 by rpki-client on console-ams.rpki-client.org