Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/qziLVxx1PfbMt1js3Y2dvu0Tq2s.roa
File: qziLVxx1PfbMt1js3Y2dvu0Tq2s.roa (raw, json)
Hash identifier: yNkxkDY+cIngSYyNSDzl0DmEHzpDsr6aLl0msLKaMI0=
Subject key identifier: AB:38:8B:57:1C:75:3D:F6:CC:B7:58:EC:DD:8D:9D:BE:ED:13:AB:6B
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018AEAC8C1DBD477038CD34B43E4E3A6F4A5
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/qziLVxx1PfbMt1js3Y2dvu0Tq2s.roa
Signing time: Sun 01 Oct 2023 10:28:59 +0000
ROA not before: Sun 01 Oct 2023 10:28:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34941
IP address blocks: 194.110.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:c8:c1:db:d4:77:03:8c:d3:4b:43:e4:e3:a6:f4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Oct 1 10:28:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab388b571c753df6ccb758ecdd8d9dbeed13ab6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:9d:54:79:3e:76:42:90:83:3f:e5:e7:45:
b2:cc:ab:a3:dd:9b:f1:f0:9e:85:3a:60:3f:ac:ad:
a2:7a:0e:e2:43:f2:41:0e:3d:28:9f:cf:4a:ce:e3:
88:48:b0:22:b9:95:61:7d:26:41:d8:4d:9b:e0:c6:
a4:5b:3b:07:ab:a5:20:10:e0:07:04:46:d1:1a:7f:
da:84:43:e5:c1:17:75:49:ba:d5:f6:31:23:be:89:
be:50:ef:cf:bd:90:74:04:af:a0:92:52:5e:2d:6e:
bc:b9:ac:01:7a:16:5f:32:d7:cd:e1:87:74:af:ca:
8f:f9:50:01:c1:09:39:10:93:d6:96:55:8f:4d:2e:
8a:91:5a:91:de:a9:f6:0e:54:3e:f2:b8:12:08:5a:
9c:1b:5d:4f:1f:33:80:86:8a:0c:8c:1d:e1:57:9a:
bf:9b:ba:6f:c7:2e:6a:a8:28:59:c1:d2:e7:3b:45:
9b:b1:62:35:36:68:49:ad:2d:78:14:10:28:e9:8e:
e0:e6:b7:d8:60:38:20:ab:e0:fd:7c:ad:69:7d:19:
df:82:c1:dc:09:2d:9b:3d:31:8b:cc:60:ff:4e:9d:
d1:23:d6:29:5d:00:3b:b9:24:c5:90:96:d2:0c:5a:
5a:60:7e:c1:6b:4e:c5:d2:29:df:a1:42:e4:7c:c0:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:38:8B:57:1C:75:3D:F6:CC:B7:58:EC:DD:8D:9D:BE:ED:13:AB:6B
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/qziLVxx1PfbMt1js3Y2dvu0Tq2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.174.0/24
Signature Algorithm: sha256WithRSAEncryption
14:55:55:87:69:cf:67:56:3d:57:0b:ed:e5:ca:8c:9a:2d:fb:
26:f8:83:05:01:af:a5:07:b8:af:f6:27:37:b2:3a:0d:7f:d8:
51:ea:2f:38:93:39:0e:a2:25:62:b8:58:3e:ec:4d:f2:9a:cd:
84:2f:5a:72:4f:8b:11:97:2e:4d:3c:81:62:dc:73:0e:11:35:
f1:f0:c3:f1:fd:3b:fd:11:2f:ac:22:2d:ff:34:14:e0:a5:d9:
f9:b1:2b:21:2b:eb:4a:35:8b:ad:c3:50:c7:3f:72:4f:d3:b7:
0e:c2:c7:eb:f8:8f:3f:f3:ef:04:68:49:10:84:22:0f:8a:1e:
ce:1f:32:55:29:0c:d7:1e:6d:44:52:10:29:db:c7:2b:d4:c5:
2e:c0:f4:d7:2f:28:aa:0d:8f:b6:56:0b:fa:65:27:ac:a9:20:
ee:be:4b:67:fa:f5:af:0f:bc:83:6d:c7:cb:36:7b:33:6f:3a:
f0:c7:10:20:87:cd:98:37:23:47:ab:68:6b:2f:ec:c5:6b:ab:
ff:9d:c3:c8:e8:00:a7:ef:e0:05:0c:03:10:79:89:9f:4f:6d:
84:32:26:22:c2:a4:b8:42:28:8c:39:d2:5d:39:85:e6:27:28:
f1:84:0d:c0:c0:2b:2d:1d:0f:6e:81:25:01:47:08:1a:76:5d:
d7:d9:8c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:23 2024 by rpki-client on console-fra.rpki-client.org