Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/QvMh78Tfps9ZABZqiqgPMirMTmM.roa
File: QvMh78Tfps9ZABZqiqgPMirMTmM.roa (raw, json)
Hash identifier: lNWoJ4NG2dkUWPX/4GkXJ/W725R/zcsNsmqQ8+csDHI=
Subject key identifier: 42:F3:21:EF:C4:DF:A6:CF:59:00:16:6A:8A:A8:0F:32:2A:CC:4E:63
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0185706765FE2582A51BD24289DE0F3D51CC
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/QvMh78Tfps9ZABZqiqgPMirMTmM.roa
Signing time: Mon 02 Jan 2023 02:55:02 +0000
ROA not before: Mon 02 Jan 2023 02:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 185.227.83.0/24 maxlen: 24
45.141.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:65:fe:25:82:a5:1b:d2:42:89:de:0f:3d:51:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 02:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42f321efc4dfa6cf5900166a8aa80f322acc4e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:07:d4:a1:e6:fa:e5:55:5c:f3:b0:e5:51:3e:
ed:ff:3e:33:9e:97:90:9c:2b:5f:80:e2:4d:51:0f:
4c:36:30:4c:a6:e2:a6:8e:e5:47:75:1e:62:60:f7:
01:09:28:74:a0:32:f9:d3:92:be:79:cc:4f:12:ff:
9e:ac:5c:ad:95:db:0a:6c:ee:44:34:c3:d0:2c:14:
46:53:d0:98:38:c7:ae:90:78:c4:33:f0:54:ea:4e:
cb:7b:11:18:74:93:4e:07:fd:14:b0:fd:9e:c9:06:
a7:0f:5d:03:80:b7:4c:b0:87:73:ab:0d:b3:fa:2b:
8f:7c:fb:46:ee:0a:01:1f:1e:49:97:c3:47:26:ff:
1b:85:d8:b3:ee:c3:98:7b:33:5f:20:ec:b6:c7:f4:
ff:7a:0a:5d:87:35:26:a9:dc:99:fd:48:a0:41:e7:
14:c2:27:4f:f0:30:ab:aa:1e:9a:e3:7e:96:30:42:
68:eb:05:8b:3d:11:10:12:d8:ba:e2:cc:80:59:84:
0a:63:12:8b:e4:d9:f2:25:ed:e2:8d:6e:2d:ef:50:
7f:2a:8d:ac:f8:73:fe:56:15:d4:7a:be:19:ce:ec:
e1:dc:b1:63:8c:aa:2a:f0:cf:b8:b4:73:17:97:18:
09:6e:9c:3c:17:97:f0:c2:ca:fc:07:1d:38:6e:55:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F3:21:EF:C4:DF:A6:CF:59:00:16:6A:8A:A8:0F:32:2A:CC:4E:63
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/QvMh78Tfps9ZABZqiqgPMirMTmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.60.0/24
185.227.83.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b9:b2:51:cd:21:ab:91:80:96:28:1b:82:03:b1:ba:f0:4e:
94:98:d1:ba:2d:a0:4e:72:fe:56:e5:18:e6:70:04:e4:32:e5:
65:12:f8:6a:c3:69:52:6d:d8:31:85:74:de:a4:79:d8:f7:6e:
66:1f:33:96:46:d2:e5:e3:48:a9:0c:98:79:82:69:f9:8a:fd:
cc:1d:29:42:03:44:24:b5:9b:64:54:b5:5d:73:6b:e7:a0:36:
20:f2:2a:17:dd:3b:55:42:18:0d:b0:04:71:12:de:aa:40:d2:
5c:39:ab:3c:8f:03:9d:00:9b:11:bc:c6:84:5f:63:6e:5d:41:
ab:96:84:bc:2d:c1:8b:38:f4:26:d6:18:b8:53:e8:02:82:89:
ca:38:fe:5c:1b:5b:78:ca:9e:75:e6:2e:e9:95:88:32:92:ca:
d9:b1:76:ac:ee:54:f5:00:73:36:ac:45:88:bb:c5:96:25:8a:
62:64:8c:e0:04:8c:dd:67:19:0e:07:79:96:96:36:32:19:b6:
a2:6d:cc:04:cc:bd:92:99:69:4e:a4:b9:21:a9:9d:02:51:8b:
bf:d8:08:21:b9:70:4a:2c:ef:f3:30:05:97:bf:dc:92:fc:ee:
e6:30:6e:82:1e:27:58:c3:16:6e:c5:26:bb:d8:32:fb:7b:99:
7d:2b:57:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:20 2024 by rpki-client on console-ams.rpki-client.org