Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qBrUI3jmDig655jjmSdE3HpjTOA.roa
File: qBrUI3jmDig655jjmSdE3HpjTOA.roa (raw, json)
Hash identifier: 0MnziBotNOVRpoHtXlg7NGPvTuLAWy53roQB5Aqqcjc=
Subject key identifier: A8:1A:D4:23:78:E6:0E:28:3A:E7:98:E3:99:27:44:DC:7A:63:4C:E0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A40ACDAD5250CD889CB4558D444C2C61B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qBrUI3jmDig655jjmSdE3HpjTOA.roa
Signing time: Tue 29 Aug 2023 09:43:04 +0000
ROA not before: Tue 29 Aug 2023 09:43:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198981
IP address blocks: 212.192.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:ac:da:d5:25:0c:d8:89:cb:45:58:d4:44:c2:c6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 29 09:43:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a81ad42378e60e283ae798e3992744dc7a634ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:af:aa:6e:59:83:6e:d1:de:51:ae:c5:f7:
26:f2:04:bb:25:12:84:77:17:e9:fc:11:bf:5f:f2:
69:d8:62:31:b6:a2:30:58:61:aa:e1:c3:a2:0b:28:
c0:b3:14:d1:58:96:ea:e5:41:8a:41:29:f2:1d:8d:
71:f1:99:59:42:4c:b0:10:9c:66:3d:d5:41:8e:20:
d1:02:42:44:6f:75:65:36:67:b6:09:d1:60:03:09:
e1:53:a3:18:e8:06:3a:fa:4c:30:98:aa:07:37:db:
12:85:7c:52:b8:7d:7d:78:79:34:c8:8d:a8:eb:b1:
2f:7c:a5:0b:72:7b:d3:b5:f5:c5:0b:69:47:0f:cd:
2b:0a:7f:41:ad:48:84:85:9a:d2:d0:6a:ea:f5:52:
ed:ae:02:bf:1d:b3:39:0f:e8:95:69:1e:22:92:38:
4c:8f:c2:bd:f0:05:56:d7:19:35:a4:eb:11:9f:e6:
bf:26:86:0a:03:d0:b5:9a:bc:37:4e:f9:43:56:e4:
7f:7f:eb:35:a8:ef:89:78:a2:ff:4e:4c:d2:3a:e0:
93:49:4f:da:ab:c8:40:8a:b0:8c:fd:28:f9:9f:37:
92:2a:6d:01:91:8b:c3:af:1c:8d:e3:ed:54:30:be:
bc:3b:fb:f0:fe:a2:5d:bc:26:10:cf:ce:d4:f3:05:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1A:D4:23:78:E6:0E:28:3A:E7:98:E3:99:27:44:DC:7A:63:4C:E0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qBrUI3jmDig655jjmSdE3HpjTOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.250.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1e:d3:e3:bd:08:93:71:35:72:6b:fc:77:33:ff:fc:02:1c:
df:3d:d0:d8:16:f5:e3:0e:41:62:62:f4:41:27:40:b3:3e:b0:
97:03:61:ce:ac:02:f6:11:9b:4a:06:72:fb:2d:50:a4:40:98:
db:36:84:d3:24:09:ad:a6:9d:3a:c1:42:08:c7:1b:8a:4e:fe:
24:91:92:ba:a2:cf:fa:6a:5c:a9:8d:98:76:ff:73:8d:08:cf:
62:a9:e2:47:48:42:d2:1d:00:4a:58:ce:2e:17:69:6f:00:d4:
1f:d5:4b:cd:79:3e:91:bc:85:51:54:d7:a9:55:9e:91:c9:c9:
b3:24:16:35:d2:a0:35:6b:d6:ff:dd:5f:37:d9:00:c2:9e:f8:
59:13:c8:85:c1:ac:8d:3b:ab:0e:82:c1:2f:d4:0d:8f:b1:96:
21:15:c2:1d:a8:a2:e7:0c:b7:be:81:ab:1f:56:37:6d:ff:1c:
ef:5a:11:93:d9:61:c7:6e:19:9f:70:bf:12:56:b2:ed:04:c5:
1b:fe:7b:47:47:77:50:27:3c:28:77:3e:bd:b0:c4:81:13:b2:
cc:52:4f:53:14:e7:5c:b5:20:41:d5:6e:a6:62:44:59:57:dd:
92:18:ee:da:fc:be:7f:f8:7a:2f:2a:ab:f7:bc:18:a6:8a:24:
c0:3e:93:86
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 25 15:33:51 2023 by rpki-client on console-ams.rpki-client.org