Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qOMyRkZjYzFnLwtE0GqybvG6aNE.roa
File: qOMyRkZjYzFnLwtE0GqybvG6aNE.roa (raw, json)
Hash identifier: XON/kl2wuB3jxB4pairj21rm4chIF6c1oOI5U7ztBMQ=
Subject key identifier: A8:E3:32:46:46:63:63:31:67:2F:0B:44:D0:6A:B2:6E:F1:BA:68:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B8B2D7EE353BB04CCA0EB6C9C7EDD2090
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qOMyRkZjYzFnLwtE0GqybvG6aNE.roa
Signing time: Wed 01 Nov 2023 13:58:16 +0000
ROA not before: Wed 01 Nov 2023 13:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 185.226.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:2d:7e:e3:53:bb:04:cc:a0:eb:6c:9c:7e:dd:20:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 1 13:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8e3324646636331672f0b44d06ab26ef1ba68d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:20:56:07:c6:4a:e8:4e:be:0e:22:d9:1e:
90:d3:9d:c4:60:29:9d:9c:a6:19:fb:45:15:31:da:
88:5a:6d:07:0c:c8:0a:2b:0d:87:af:6f:5e:05:c5:
9e:f4:b9:2a:4b:07:96:9e:d7:80:82:1c:31:ce:10:
95:c0:17:61:60:58:7e:29:89:3b:0d:08:54:b0:de:
d1:f8:70:c0:79:50:59:20:f0:de:06:90:b0:a6:49:
48:8c:8f:6b:48:a4:1c:f2:c2:e4:22:bf:69:b5:ba:
8e:e2:14:7e:1d:bc:a6:94:b6:4a:03:ca:a2:29:0a:
a9:eb:22:0d:b6:01:b6:54:31:21:63:85:49:d5:21:
5b:95:fe:1e:56:01:1c:d0:ba:76:af:6d:4e:f1:ef:
bb:8d:1a:a4:0b:d0:b6:9c:18:12:d3:d3:af:8c:d4:
f8:66:85:3e:29:1c:fd:68:37:4d:37:a6:4c:73:3b:
f6:53:ca:22:cd:98:9e:8a:2c:e2:42:b3:b4:34:1a:
4c:12:ad:c1:54:6a:bb:d8:f4:20:6c:24:87:92:92:
36:14:3b:4d:40:c6:7c:90:7f:7c:85:3f:70:06:41:
9e:fc:f5:76:ca:7a:f4:67:ea:03:4e:59:b3:4e:75:
51:0b:92:61:77:6e:b3:7e:8a:42:81:36:fe:7a:21:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E3:32:46:46:63:63:31:67:2F:0B:44:D0:6A:B2:6E:F1:BA:68:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qOMyRkZjYzFnLwtE0GqybvG6aNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
34:60:fb:72:8d:e6:1a:44:f3:e9:01:67:5f:d0:94:38:9e:28:
25:72:30:cf:ff:14:c6:57:b0:cd:c7:38:64:16:5b:8c:dd:c1:
df:22:0a:c8:41:9d:f8:81:95:bb:e2:33:6e:ed:4d:ae:97:6b:
ab:d0:bc:dc:3f:bc:ef:a3:26:92:87:40:d3:10:e9:a2:ee:b1:
0f:be:cf:8a:46:98:a4:1a:6d:7e:d5:7b:44:55:9d:9b:5b:12:
8a:45:c8:9d:79:2d:b9:d3:f3:1b:98:15:28:5f:fb:26:88:a0:
37:04:94:e2:3e:e3:09:12:51:ae:24:87:48:f4:28:27:c0:75:
97:7c:db:6d:24:7e:cf:80:2c:40:d8:91:a2:67:b4:d2:31:cf:
99:35:85:b4:31:3b:6b:23:56:7b:24:9a:e4:02:97:df:1c:65:
13:e3:83:45:24:d1:8b:d3:24:0a:0b:5f:1f:63:09:96:53:d0:
c2:f7:0c:70:7d:fa:59:d4:17:3d:3c:97:40:a3:c9:86:3d:1c:
4a:86:c8:63:63:dc:bf:b4:3f:10:70:38:e5:51:bd:8e:1c:c8:
cb:ae:80:3b:5d:eb:6f:f1:f2:8d:2f:37:b3:52:a3:d2:16:e2:
cc:52:e7:33:c7:dd:b0:7a:a1:b9:2a:0b:3b:02:31:2b:00:0c:
ee:d5:d6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 09:30:05 2023 by rpki-client on console-ams.rpki-client.org