Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q6f-dlhOMnnmXYuGBJdWcECT99s.roa
File: Q6f-dlhOMnnmXYuGBJdWcECT99s.roa (raw, json)
Hash identifier: ZeQQfxWXRZzTHrdiFprif5+GYb5d9BVyp8dCPKCNv5k=
Subject key identifier: 43:A7:FE:76:58:4E:32:79:E6:5D:8B:86:04:97:56:70:40:93:F7:DB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BAAFFE184A7BE8AC157ED678B55EE7842
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q6f-dlhOMnnmXYuGBJdWcECT99s.roa
Signing time: Tue 07 Nov 2023 18:16:18 +0000
ROA not before: Tue 07 Nov 2023 18:16:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 62.76.230.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:ff:e1:84:a7:be:8a:c1:57:ed:67:8b:55:ee:78:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 7 18:16:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43a7fe76584e3279e65d8b86049756704093f7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:44:52:b7:be:30:98:57:fe:41:c0:7d:c8:
20:68:2e:0f:fd:6e:b0:90:bc:1f:12:2e:b8:ec:2b:
9b:9f:fb:ec:6a:53:b5:27:57:fe:a8:8a:5e:40:fd:
e1:6f:2e:ad:8d:7c:82:21:93:f6:1c:15:da:69:92:
ff:27:4e:ae:81:61:f4:04:1a:4f:60:22:93:1a:29:
4b:1f:e5:cb:7d:dd:12:2c:90:c6:1f:5e:54:a2:a5:
a9:fd:44:7f:2f:ff:0b:19:85:fb:46:ce:7e:84:cf:
ea:79:0b:60:5a:3b:d2:ef:99:df:d2:25:5b:29:49:
c1:e1:ae:77:24:dd:fd:90:27:1f:fa:f6:2f:59:a8:
6c:f9:fa:97:34:4f:0d:5f:03:6a:78:55:9e:02:91:
66:e9:a7:de:aa:d8:27:a6:ea:7c:31:27:66:68:20:
73:e2:f6:38:df:df:02:cc:a3:ee:d2:18:dd:62:76:
64:b3:8a:15:3f:31:49:84:e7:73:bc:c6:11:c5:b9:
5f:b4:b4:b5:97:4d:01:80:c0:06:13:ad:a7:3f:b3:
19:99:91:cf:ab:e8:c5:1a:29:20:83:42:66:29:db:
16:17:90:f5:f0:6f:a3:68:84:3d:0d:e1:93:7e:69:
02:c0:15:0a:a0:72:a2:e4:3a:c8:fd:35:1d:93:25:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:FE:76:58:4E:32:79:E6:5D:8B:86:04:97:56:70:40:93:F7:DB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q6f-dlhOMnnmXYuGBJdWcECT99s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
212.192.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:4b:9f:f9:25:1b:25:a1:96:6e:c5:4a:62:ab:c3:1a:0d:be:
48:8c:fd:fe:6f:de:cd:e9:7a:8d:5c:ba:78:dd:46:c2:42:7a:
fa:a9:fd:2b:7d:29:50:ab:d8:79:2e:4b:01:ba:82:35:67:18:
56:32:ca:48:88:7d:f0:82:96:ae:85:cf:36:0c:37:eb:ac:b8:
01:69:56:cc:79:78:e9:a4:60:16:21:1b:e0:f4:a8:d7:6f:63:
94:f6:79:fe:45:7d:21:c9:e2:d9:36:7c:85:7e:77:4c:91:d9:
48:96:e2:b8:c0:c0:ce:89:a3:30:3b:77:b3:77:34:16:8d:bc:
ee:00:62:46:f1:41:52:56:40:43:6f:d9:52:cf:a6:8d:e5:9f:
7f:0c:7d:94:37:27:94:fa:09:b0:f9:a1:1a:c5:d7:d1:58:24:
d0:7e:59:6f:ff:88:a8:d2:ac:92:39:70:55:55:b5:a0:30:99:
27:10:fc:76:e8:3f:20:b7:54:03:c5:2d:9c:e5:78:cc:5f:88:
f1:45:bf:21:22:42:c2:73:87:ee:c1:de:9d:e9:92:4e:5a:b2:
ac:a9:e9:d3:f9:dc:98:0d:a2:be:ff:32:3d:e3:03:e4:05:0d:
3c:10:2c:29:a4:1d:36:83:a2:8f:ee:c1:63:54:f2:1f:59:6e:
ae:a9:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:21 2024 by rpki-client on console-fra.rpki-client.org