Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/qNtT4RCkK_ZuvlmdDU_C2Vlfoto.roa
File: qNtT4RCkK_ZuvlmdDU_C2Vlfoto.roa (raw, json)
Hash identifier: kXKQYYpgNK5p1ekt6sa0xfTUs4M0/Qe3peXaEmv+21E=
Subject key identifier: A8:DB:53:E1:10:A4:2B:F6:6E:BE:59:9D:0D:4F:C2:D9:59:5F:A2:DA
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 01876FB69136789804169F19F4092215B454
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/qNtT4RCkK_ZuvlmdDU_C2Vlfoto.roa
Signing time: Tue 11 Apr 2023 09:47:28 +0000
ROA not before: Tue 11 Apr 2023 09:47:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41998
IP address blocks: 178.212.90.0/23 maxlen: 23
178.212.94.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:b6:91:36:78:98:04:16:9f:19:f4:09:22:15:b4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Apr 11 09:47:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8db53e110a42bf66ebe599d0d4fc2d9595fa2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:a5:b7:d0:0e:72:f8:95:c9:7e:f9:05:c2:
19:4b:df:c2:07:69:5f:f4:af:32:73:90:4a:7f:75:
bb:22:53:b4:ef:23:83:13:62:da:d3:03:ee:c9:b5:
64:a9:26:7f:21:c3:d7:e3:a1:aa:64:67:68:fc:46:
80:c9:16:b4:9b:3e:46:c5:90:1a:eb:b3:b7:08:00:
f4:20:f5:5f:3c:67:f0:2a:c7:cb:12:6e:af:a9:5a:
61:f2:f4:65:9b:19:49:dd:92:74:48:50:61:1b:cf:
9c:3c:64:b4:5e:e1:4d:26:26:51:8f:51:3c:8d:5b:
ca:60:6f:69:ee:0b:cc:dc:ce:6c:b7:17:93:b3:da:
8a:ad:ee:21:7a:56:21:a6:30:a5:81:b8:e3:2b:8e:
63:80:29:77:67:2b:68:65:47:0f:8b:87:60:f9:07:
22:84:33:87:04:80:57:61:ba:89:c4:f4:b6:1b:66:
f8:57:ae:55:ee:11:65:27:6a:2d:19:10:37:16:89:
58:7b:04:c7:14:d6:05:16:1c:32:c8:8c:54:8d:83:
18:70:2e:8e:fc:e7:47:23:99:2c:6a:39:0c:47:8d:
e2:c5:18:58:70:6e:af:42:0d:ae:3b:a4:cf:af:e5:
b4:d6:c8:97:26:35:b9:26:c3:c9:0c:f8:fc:03:a2:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DB:53:E1:10:A4:2B:F6:6E:BE:59:9D:0D:4F:C2:D9:59:5F:A2:DA
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/qNtT4RCkK_ZuvlmdDU_C2Vlfoto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.90.0/23
178.212.94.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:c1:aa:6e:2c:30:d8:bd:3d:69:24:cb:85:f1:63:d7:1d:4f:
b2:38:98:63:92:9f:4b:51:aa:b3:23:5c:95:86:b8:91:fc:25:
e1:33:c3:10:60:00:b9:1b:8a:02:67:d6:79:a4:50:21:a3:77:
9a:98:29:b0:5a:cd:67:88:37:01:7e:10:6a:03:94:a0:68:d7:
04:e4:97:12:73:e7:c7:fa:c8:97:4e:ce:eb:61:bd:c4:21:e4:
6f:14:ec:ee:3b:11:18:bd:b5:34:ff:6b:d3:fd:fe:53:c4:f2:
76:0b:0d:5d:6e:d4:88:6d:6a:ff:7f:35:ee:48:4c:a1:f3:ac:
96:3c:ce:45:cc:18:6f:59:ba:09:29:2e:8b:c4:3b:7f:d3:77:
51:1c:99:ab:84:e4:91:62:da:45:30:6f:e5:d2:e9:e4:10:23:
14:67:78:8e:b2:5d:37:5e:97:df:ad:4d:1f:b4:17:5d:8a:8b:
14:5d:b9:2d:10:ea:b4:08:a7:57:62:2a:78:6b:ac:0b:b1:df:
40:b1:92:14:ba:5d:02:7c:93:33:84:22:60:80:ce:dc:df:de:
18:12:75:4c:9a:8a:8d:9c:aa:cb:1c:73:4c:d8:0e:d8:89:99:
2d:8d:12:37:05:9d:72:d3:0d:9d:03:4a:20:44:c3:dd:ef:ca:
6b:c9:6d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:11 2024 by rpki-client on console-fra.rpki-client.org