Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qyd98GPA36GglLCqaIhbUBdQ9JE.roa
File: qyd98GPA36GglLCqaIhbUBdQ9JE.roa (raw, json)
Hash identifier: KTp3kDGZCUjr1g3qSawXVh7GiyvXKLirqxBnWNuJt10=
Subject key identifier: AB:27:7D:F0:63:C0:DF:A1:A0:94:B0:AA:68:88:5B:50:17:50:F4:91
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186C1B025CE5F208ACC04ADD33E90C5D04A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qyd98GPA36GglLCqaIhbUBdQ9JE.roa
Signing time: Wed 08 Mar 2023 14:46:32 +0000
ROA not before: Wed 08 Mar 2023 14:46:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 194.87.6.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:b0:25:ce:5f:20:8a:cc:04:ad:d3:3e:90:c5:d0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 8 14:46:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab277df063c0dfa1a094b0aa68885b501750f491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:43:a5:8b:ac:32:39:d8:b7:47:ce:f2:ad:6f:
9f:b1:a2:3d:b3:f2:21:5a:71:82:f5:fa:c7:b3:e6:
e3:bf:1f:40:ca:fb:21:47:b8:1b:2b:49:a4:73:0a:
ee:94:b3:c6:59:a5:ce:df:0f:e3:c3:c9:32:23:32:
4b:d4:df:ec:a9:e2:97:5b:dc:3c:40:f1:da:12:4c:
d8:16:67:89:e9:d8:3f:dc:f5:b0:68:2b:bf:41:0a:
31:72:ea:57:6b:06:c0:43:af:79:b6:a4:0b:ad:05:
29:67:b5:a8:77:1f:0a:aa:f0:0f:ea:25:5a:55:0f:
84:12:b3:62:3d:8d:7c:79:1b:e5:81:f0:be:ba:7e:
2e:cf:a8:2e:f9:76:1e:f7:3e:d2:51:4f:29:e6:1d:
61:2a:b0:54:e6:06:d3:13:02:92:d8:d7:7e:ef:b1:
44:19:e3:7c:cf:7d:d8:3d:5b:4b:05:00:82:9b:2c:
78:7d:f9:b0:6f:db:f4:76:c5:36:76:70:eb:f4:14:
cc:10:a4:41:d1:31:72:b4:c8:d0:18:68:54:cf:82:
07:a6:53:c3:3c:5f:41:48:3b:68:74:6b:f0:36:ca:
4c:22:ca:aa:a7:ea:52:d0:e0:0c:bf:4b:d9:98:2f:
95:20:a3:b3:5d:8e:87:b6:48:70:46:f6:a4:7a:5c:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:27:7D:F0:63:C0:DF:A1:A0:94:B0:AA:68:88:5B:50:17:50:F4:91
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qyd98GPA36GglLCqaIhbUBdQ9JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
192.124.183.0/24
194.87.6.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0b:f1:cc:22:76:ef:89:c6:fe:67:66:9c:f2:27:49:e8:26:
e2:9d:17:24:29:21:4c:45:41:36:08:34:21:31:cd:7e:31:7e:
3c:a9:c2:33:1e:86:48:2b:eb:26:fc:88:5b:c9:f1:fb:43:53:
f6:0f:49:65:ca:f8:e2:2b:25:22:ca:3b:2e:e2:aa:e5:f0:38:
a0:12:1f:d5:df:79:23:e2:96:e4:a7:fc:ec:ac:3b:fe:8e:c2:
ca:8c:2d:50:80:61:15:44:14:5d:97:44:fc:a8:f4:0d:7d:42:
c0:2f:05:87:ee:72:39:cd:26:82:74:6a:70:e0:55:81:e8:2d:
b2:e6:15:42:a8:e5:ee:c1:89:0a:d5:17:31:b7:bf:cd:35:7a:
a4:38:67:47:aa:6a:7a:56:3f:83:42:38:7b:bd:29:5e:e1:de:
1c:33:54:0b:88:42:ad:2b:ed:b3:07:6e:95:9b:93:e3:d4:81:
df:f8:f5:ce:e0:b8:dc:c7:4f:01:d4:81:2b:2d:fa:aa:0c:18:
a5:b1:c3:a8:c3:b3:b8:e8:d7:76:a0:2d:65:e4:cf:8f:dc:34:
dd:25:60:ff:fb:1f:6e:f7:48:55:5c:f1:6c:cd:21:8f:4a:29:
dc:c3:ee:e6:94:68:df:c2:71:c0:b3:5a:4d:ac:95:a6:59:09:
54:9d:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-ams.rpki-client.org