Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/qg3pYJJobcXUE3ZKqRuDvyIf2wY.roa
File: qg3pYJJobcXUE3ZKqRuDvyIf2wY.roa (raw, json)
Hash identifier: SJpN5PhXdQlHT1hbV0tDMp/rWlFPH3q0ja+Xiogb67M=
Subject key identifier: AA:0D:E9:60:92:68:6D:C5:D4:13:76:4A:A9:1B:83:BF:22:1F:DB:06
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018BD3A0E0404FE5C6C8283F51FA8640688C
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/qg3pYJJobcXUE3ZKqRuDvyIf2wY.roa
Signing time: Wed 15 Nov 2023 15:36:57 +0000
ROA not before: Wed 15 Nov 2023 15:36:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40934
IP address blocks: 83.231.212.0/24 maxlen: 24
212.119.11.0/24 maxlen: 24
83.231.145.0/24 maxlen: 24
83.231.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:a0:e0:40:4f:e5:c6:c8:28:3f:51:fa:86:40:68:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Nov 15 15:36:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa0de96092686dc5d413764aa91b83bf221fdb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5b:bc:5c:c7:de:de:6d:67:21:70:37:64:7d:
57:27:ba:fd:13:b8:f3:a9:7b:ac:87:3a:73:ac:4a:
af:b5:1d:24:6e:e4:bc:52:90:55:33:b2:b3:96:7c:
2d:6a:ec:a4:69:48:e0:23:5e:fd:7f:53:bb:d6:52:
cb:c3:61:ed:9f:fd:b0:96:38:99:91:93:bf:6b:39:
60:50:0f:6c:2b:a9:9d:56:44:ed:ad:61:d2:52:8e:
73:48:50:1b:a8:a1:8d:18:69:ce:eb:74:4d:94:ce:
cd:d1:40:25:7b:13:c9:ae:71:75:df:c1:62:2b:fb:
fe:96:4f:ea:5e:4b:2d:8a:4f:08:d0:ab:7a:0d:dc:
a9:e2:2e:e7:c9:25:8c:0f:11:3e:8f:57:ec:2f:03:
49:13:2a:c6:08:c8:f2:82:86:e3:eb:56:e9:7c:68:
77:4e:1d:57:2b:64:9a:f5:fe:7f:09:4f:a4:c1:62:
49:52:de:6d:d9:86:16:27:fc:1b:3b:4f:99:96:8b:
90:7f:03:81:e9:3e:af:ed:1b:b1:ba:03:15:ca:cb:
fb:57:3e:e9:8c:fe:2b:29:b3:a9:89:5d:c5:08:38:
44:13:b1:d5:22:16:53:75:eb:6d:1b:b5:ef:ad:0f:
4d:bc:a2:13:fb:90:cc:3d:a2:5a:25:b0:a3:f4:4c:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0D:E9:60:92:68:6D:C5:D4:13:76:4A:A9:1B:83:BF:22:1F:DB:06
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/qg3pYJJobcXUE3ZKqRuDvyIf2wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.145.0/24
83.231.169.0/24
83.231.212.0/24
212.119.11.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8a:93:2e:b3:5c:a7:bd:f4:69:70:7e:95:1b:70:db:b6:a7:
e1:eb:72:23:72:3e:49:f4:53:f7:e3:dc:04:d9:2e:c4:da:6f:
71:6b:ed:23:b3:89:50:c6:90:cb:cc:c8:1d:43:7a:20:9f:de:
58:a0:ad:c6:8f:4c:85:e9:37:e0:77:1b:a2:d3:86:38:92:59:
8b:f0:32:19:6c:a9:0e:c9:9a:44:fe:c6:c2:a6:98:e8:87:09:
24:44:70:60:f8:ad:f3:03:06:29:49:83:f0:fe:0b:47:d6:e5:
dd:40:d0:ac:f0:f2:db:e4:7e:df:0f:8f:55:6a:c7:74:bf:b0:
cb:81:df:6e:06:39:06:fe:f9:3d:27:34:7e:b3:48:8f:01:b8:
ea:89:30:60:e9:58:0b:a7:3d:dc:2e:0a:aa:31:90:a1:cb:f6:
60:41:dc:4d:dd:b7:6e:6e:e9:c6:bd:4e:38:ef:14:98:ce:e1:
8a:75:60:e6:f1:55:ac:ff:ae:e5:91:d9:c2:14:39:65:65:0c:
9c:20:89:79:17:54:42:1c:0c:83:bb:72:60:05:f5:f1:51:2f:
df:91:f4:ee:e2:08:4a:57:5a:d2:58:59:5c:26:5f:88:37:7d:
f8:06:4b:4c:f8:92:dc:b5:33:c5:fd:89:9e:0a:0d:35:99:8e:
5f:ba:1c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:21 2024 by rpki-client on console-ams.rpki-client.org