Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/qsdPBByOGfAU6Q438fcPBIK6AXE.roa
File: qsdPBByOGfAU6Q438fcPBIK6AXE.roa (raw, json)
Hash identifier: j9iaTJsVpsypR65Q6PF1FItz0BgVInImAxyg+uqDCYM=
Subject key identifier: AA:C7:4F:04:1C:8E:19:F0:14:E9:0E:37:F1:F7:0F:04:82:BA:01:71
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 01856D4ACD47F52A27DE85FEB2B5F617E556
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/qsdPBByOGfAU6Q438fcPBIK6AXE.roa
Signing time: Sun 01 Jan 2023 12:24:56 +0000
ROA not before: Sun 01 Jan 2023 12:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62292
IP address blocks: 95.140.33.0/24 maxlen: 24
94.199.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 18:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:cd:47:f5:2a:27:de:85:fe:b2:b5:f6:17:e5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jan 1 12:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aac74f041c8e19f014e90e37f1f70f0482ba0171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c5:60:7f:64:ac:8b:81:35:75:a4:79:5d:73:
b4:4d:1b:13:d3:14:de:fc:e9:6e:e1:bb:40:35:a0:
4d:ee:e3:d2:99:80:1f:8e:d3:1d:0a:ff:1f:c8:34:
be:cf:7f:88:fe:7f:90:93:6f:1c:c3:cf:8c:4d:55:
f9:80:66:ab:f0:bd:e5:b1:7b:2f:7d:2f:fc:0c:5f:
54:df:66:ef:ee:7e:95:a7:39:5f:c9:f9:1a:46:fc:
57:7c:d2:46:56:54:ba:aa:88:8f:40:54:62:e9:0c:
e5:a2:4e:7a:8c:30:42:24:ab:c8:ba:72:87:30:27:
65:19:49:22:0d:09:16:b0:6e:14:42:f5:b5:95:2d:
37:02:4e:b6:17:46:a5:98:d1:1f:ce:e1:17:ba:cc:
af:ed:9c:eb:02:ee:67:03:3c:a8:e4:d7:95:f2:bd:
8f:e3:4d:f5:a6:7b:a5:fc:77:69:05:51:0a:ee:2e:
91:3b:50:b3:7c:6e:c3:35:60:46:82:b7:1f:c7:a2:
dd:6f:29:be:cd:2f:9d:52:94:6d:20:cd:c5:c9:1a:
d5:66:a8:aa:6e:9c:cb:8b:c0:6a:b6:1f:4f:89:89:
65:4c:5c:36:56:0a:4e:fa:0e:0c:99:60:0a:37:71:
1e:4b:17:26:28:52:98:e9:40:9c:ef:64:a4:89:1e:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C7:4F:04:1C:8E:19:F0:14:E9:0E:37:F1:F7:0F:04:82:BA:01:71
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/qsdPBByOGfAU6Q438fcPBIK6AXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.178.0/24
95.140.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f6:34:a3:1c:12:2a:a1:c5:3b:ec:89:57:43:26:99:e0:94:
ae:d8:0c:63:e5:07:38:3f:bb:16:d2:88:86:f0:73:d5:80:4d:
8e:1f:55:cc:62:da:d4:25:61:75:81:66:39:e3:38:16:f3:c3:
14:f6:f6:7e:44:24:70:b0:bf:25:8a:5d:2c:59:b5:c7:18:4e:
37:e9:25:f8:74:7a:ff:29:d2:1a:20:dd:1d:d8:92:06:16:81:
e8:de:ab:75:85:2d:19:3e:a0:77:64:4c:fe:d8:96:11:99:b9:
b4:6a:b3:5d:1e:e7:2e:a0:98:8d:64:fa:79:c6:f7:c7:f7:d6:
36:fb:98:1a:ec:f0:c3:5b:81:97:e9:d8:88:22:aa:97:f9:8e:
95:c9:a9:9b:90:cc:89:84:b7:b1:f4:b1:79:f8:33:8b:9f:99:
cb:d0:7c:7c:df:18:79:f5:93:b4:2c:ad:ff:32:31:c0:80:f0:
b6:7f:bc:99:40:c1:7c:96:00:99:65:6a:6d:3c:95:40:19:42:
3c:b2:9a:f1:fd:aa:0e:6e:5e:d7:c8:5a:cd:07:71:7c:58:a8:
53:b2:b6:0b:e3:c0:bd:bb:c4:c4:35:57:a5:48:d9:d0:d2:91:
8c:5e:f9:3a:0b:28:74:30:b8:36:3c:f3:9a:0f:c3:f7:d9:96:
ed:7d:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:32 2024 by rpki-client on console-fra.rpki-client.org