Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_QBTQpO25mev3WtxG9vSKFNbOFQ.roa
File: _QBTQpO25mev3WtxG9vSKFNbOFQ.roa (raw, json)
Hash identifier: 00+6S9WSenx/2xxXFO3iVuteNAAFxNPweDrQlsmzXBQ=
Subject key identifier: FD:00:53:42:93:B6:E6:67:AF:DD:6B:71:1B:DB:D2:28:53:5B:38:54
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 01857002794D2238EAF6451C8627A869C3E9
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_QBTQpO25mev3WtxG9vSKFNbOFQ.roa
Signing time: Mon 02 Jan 2023 01:04:48 +0000
ROA not before: Mon 02 Jan 2023 01:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15819
IP address blocks: 212.98.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:79:4d:22:38:ea:f6:45:1c:86:27:a8:69:c3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd00534293b6e667afdd6b711bdbd228535b3854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:8f:6d:da:ea:22:20:97:3a:96:26:c3:d9:
c7:1c:81:7e:49:53:59:86:22:c6:8d:c7:35:26:06:
b3:76:fd:26:94:c8:3d:26:5e:e2:5a:df:c5:ed:76:
4e:ac:b8:88:3b:85:92:8e:47:3c:0b:9f:49:0f:f5:
14:2b:4c:7a:5b:d6:0c:ed:c5:ea:4b:fd:32:bf:80:
d0:78:3d:0d:ce:41:2e:58:39:40:ee:8e:58:84:78:
0c:cd:7a:04:e8:c5:62:f4:6e:14:fa:a8:3d:3c:16:
0f:1d:ce:48:4f:5b:c3:a0:20:ef:b7:84:a0:e7:fe:
99:90:9f:77:51:f4:3c:69:b9:52:0a:11:ae:c1:8e:
07:73:28:ed:d8:05:be:d6:44:98:d6:74:ca:52:8e:
ec:f3:36:c3:ed:0c:ae:f0:1f:ad:9a:48:4f:f9:aa:
d7:96:68:0a:fc:20:62:fd:85:84:d6:ef:73:63:7d:
35:46:b1:55:0b:93:8c:0f:ea:14:9c:6a:85:af:45:
0d:4c:ad:d0:34:90:05:9b:d7:fd:ee:e5:89:5e:0e:
5f:45:84:a2:01:77:4c:8f:29:24:4d:d0:28:81:6e:
97:dd:2a:ee:b7:2c:2a:11:9f:dc:11:38:b6:4a:82:
e5:b1:d4:d7:78:2a:29:31:37:3b:3e:1b:76:30:f2:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:53:42:93:B6:E6:67:AF:DD:6B:71:1B:DB:D2:28:53:5B:38:54
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_QBTQpO25mev3WtxG9vSKFNbOFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.98.223.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:83:67:49:b8:96:3b:0b:e7:35:1d:53:89:b2:4d:21:59:cc:
6a:2a:b3:42:d9:38:e7:47:c8:04:b8:37:a9:77:ae:53:31:14:
cf:de:55:69:d6:9f:c3:46:af:20:c9:ef:16:8a:50:01:86:34:
4a:5e:c9:64:ff:e9:6e:17:8e:8c:53:9e:ec:49:54:06:9c:05:
40:98:89:5b:81:f2:a7:17:02:cf:7f:11:07:d1:fe:03:00:e8:
65:9e:45:2b:7d:dd:43:0a:48:8c:ad:6e:c5:ed:3b:44:df:1a:
5a:d0:fa:2c:77:d0:cb:46:e0:d8:69:3f:bf:cf:cc:d1:84:5b:
a2:3b:58:66:88:45:b5:9f:95:fc:57:91:ec:45:e9:10:a9:66:
22:9b:d4:2d:b3:a5:3d:d7:1c:f8:84:ee:37:42:a4:2a:f7:c7:
d6:29:97:67:02:20:7c:82:f8:03:31:5d:bb:ad:24:b5:3b:96:
8f:ff:bc:da:4d:af:7b:a9:d7:21:70:20:55:bb:38:76:8d:fd:
06:a7:ff:68:e9:b0:3d:f0:7a:0c:d6:44:1d:7a:dd:6f:0a:60:
43:55:38:43:72:2b:ab:bb:75:eb:c0:13:3a:b8:84:d4:bd:db:
de:b0:de:cb:0e:f3:db:22:f2:f0:c7:b7:be:33:ce:3a:04:ba:
92:16:9f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org