Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/QQH5fJJ1IDZUSOWkinRRuGrvWKA.roa
File: QQH5fJJ1IDZUSOWkinRRuGrvWKA.roa (raw, json)
Hash identifier: lK2ZJSKY6PYE1ZWK8JTdVCIXmC4NIZEf6EyMV4smMwE=
Subject key identifier: 41:01:F9:7C:92:75:20:36:54:48:E5:A4:8A:74:51:B8:6A:EF:58:A0
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0189C14C6DD440E3A3E7A22B4B691FEAE5D5
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/QQH5fJJ1IDZUSOWkinRRuGrvWKA.roa
Signing time: Fri 04 Aug 2023 16:05:58 +0000
ROA not before: Fri 04 Aug 2023 16:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.31.231.0/24 maxlen: 24
81.31.232.0/24 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:4c:6d:d4:40:e3:a3:e7:a2:2b:4b:69:1f:ea:e5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Aug 4 16:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4101f97c927520365448e5a48a7451b86aef58a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:67:a8:7f:08:3e:74:4c:ff:e6:a8:26:00:
8b:46:88:86:47:bf:ab:af:72:9c:01:8a:86:05:2c:
b6:2f:89:33:d6:2f:44:92:21:03:6e:7f:6b:3f:4a:
ed:46:78:ad:0a:ec:63:e5:2e:87:0a:e5:a5:0e:d6:
39:11:c1:7e:f8:64:d8:20:79:1b:98:86:67:28:12:
fc:40:e6:cd:d6:a1:3d:a6:79:2a:36:a1:ad:ae:56:
8c:4c:bd:25:ef:5e:6e:df:1f:5d:36:64:a1:b6:17:
40:8b:df:eb:8e:14:bd:cc:38:12:5c:f3:75:aa:0d:
68:57:44:6f:ff:ef:b3:a6:a7:e5:4f:46:17:62:47:
81:f1:3a:1d:15:f5:8c:21:e2:ff:a7:53:64:08:9e:
4c:67:2c:9e:33:d9:fc:2b:ad:05:f7:d2:00:0b:1a:
8d:58:be:79:aa:93:95:d1:e1:da:86:98:96:79:b8:
6a:00:05:83:28:5c:ee:b5:a3:54:0c:2a:b7:99:67:
4c:fa:4b:17:2d:21:ef:9d:18:5d:b7:31:f1:80:00:
2d:84:58:e2:c5:02:38:7f:6e:85:93:29:cc:a0:89:
9f:a1:0b:15:ad:bf:e9:90:6e:cc:0c:b1:2d:f4:52:
1e:05:2a:c7:11:cf:ad:bd:9c:1d:8a:07:a1:0b:9d:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:F9:7C:92:75:20:36:54:48:E5:A4:8A:74:51:B8:6A:EF:58:A0
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/QQH5fJJ1IDZUSOWkinRRuGrvWKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0-81.31.232.255
81.31.242.0-81.31.247.255
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
80:be:39:78:00:fd:fc:74:7e:dc:d2:d3:70:5f:a2:df:81:af:
d2:ea:60:c1:c0:24:e8:2e:24:78:68:c6:8a:2e:f7:69:d3:1a:
79:e7:eb:d3:0f:03:6b:42:b0:a1:65:25:23:61:88:cb:ae:18:
a4:e9:5b:a0:e6:ad:b9:00:82:5c:7c:df:e8:de:7d:cc:4d:05:
83:26:42:b7:20:12:31:10:81:3d:15:5a:bc:47:f2:e0:7c:6a:
ed:31:d6:67:2c:df:d9:81:da:aa:9d:f6:ea:c9:5b:e8:0b:af:
f6:57:7d:16:32:e4:5b:90:0d:c3:47:59:41:5e:47:a0:b2:60:
1d:29:c9:dd:c7:b3:a8:aa:69:c9:50:60:c8:17:f5:fb:f7:c1:
b6:c0:13:f3:d4:78:c5:69:6b:31:1b:28:a2:a3:9d:dc:c4:3b:
68:ad:23:bb:39:54:d5:49:35:9e:f8:4f:09:56:22:e8:1c:80:
84:64:f8:6d:81:01:87:3b:17:98:5e:89:33:87:d8:2c:f2:62:
fa:bb:be:0c:bd:78:a5:80:62:56:b5:f2:26:14:56:e4:e4:1a:
53:c0:a8:d7:ae:cf:4d:dd:7e:15:87:c9:5c:51:87:1e:20:7f:
41:e8:44:dc:03:ec:6e:8d:82:85:26:3f:a9:af:73:a5:6c:8e:
33:7b:f9:c5
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 5 22:10:13 2023 by rpki-client on console-fra.rpki-client.org