Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qijxy-UsG9GqI0zGeNxlr2L-4SQ.roa
File: qijxy-UsG9GqI0zGeNxlr2L-4SQ.roa (raw, json)
Hash identifier: DPm2UlHix4eSoirRw7q6TuNulVixxKgWes5gCZOoUes=
Subject key identifier: AA:28:F1:CB:E5:2C:1B:D1:AA:23:4C:C6:78:DC:65:AF:62:FE:E1:24
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018570B076AE38E38D2DDF4FC6255A1D6738
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qijxy-UsG9GqI0zGeNxlr2L-4SQ.roa
Signing time: Mon 02 Jan 2023 04:14:50 +0000
ROA not before: Mon 02 Jan 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142578
IP address blocks: 213.176.76.0/22 maxlen: 24
213.176.80.0/21 maxlen: 24
213.176.96.0/20 maxlen: 24
213.176.8.0/21 maxlen: 24
213.176.16.0/22 maxlen: 24
213.176.32.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:76:ae:38:e3:8d:2d:df:4f:c6:25:5a:1d:67:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa28f1cbe52c1bd1aa234cc678dc65af62fee124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:25:39:1c:a3:74:e7:9a:4b:79:7b:e8:0d:33:
1c:4c:4f:75:ad:fc:56:66:8e:e8:26:b1:fa:92:57:
86:6e:6a:e6:f4:75:1e:9b:ca:4b:c2:28:c2:df:d6:
e7:79:2c:c4:29:0c:f2:ac:82:76:49:03:19:ca:0e:
9e:f7:ed:b8:3d:1a:0d:fd:75:8b:87:39:85:a6:51:
14:22:e2:96:3d:16:7d:cd:c4:7a:9c:1a:34:b1:82:
45:0b:ae:6a:b1:d4:38:94:a9:28:9b:b0:70:89:8c:
51:aa:a2:4b:9d:55:4d:c4:9f:77:98:84:84:c5:19:
36:7f:9e:c5:59:7b:13:8d:0d:10:a4:54:7f:da:87:
3f:6c:d3:80:be:87:74:07:59:58:a8:ef:3f:75:d7:
91:8e:0e:f6:ee:e4:af:b6:8d:45:fe:8f:94:25:4f:
cf:6c:eb:fd:36:ac:7d:1b:ba:76:1d:11:be:e1:81:
51:ea:ea:88:cd:15:1f:99:c1:26:83:2a:ea:b3:70:
ed:4d:22:5a:55:08:3f:c4:ad:c1:33:82:c2:f5:2d:
95:f8:56:55:59:72:a1:18:44:df:f5:4e:fe:90:7e:
a2:b5:19:ef:5e:54:db:94:d4:1b:73:10:fb:fe:d2:
bd:60:20:d6:c5:c8:b7:24:15:a9:d0:20:99:49:f4:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:28:F1:CB:E5:2C:1B:D1:AA:23:4C:C6:78:DC:65:AF:62:FE:E1:24
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qijxy-UsG9GqI0zGeNxlr2L-4SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.8.0-213.176.19.255
213.176.32.0/19
213.176.76.0-213.176.87.255
213.176.96.0/20
Signature Algorithm: sha256WithRSAEncryption
98:06:6d:5c:ba:50:fd:20:00:63:f5:d1:0d:48:a6:5f:ad:22:
ba:eb:44:5b:fc:94:72:8e:02:83:5e:07:8d:d6:98:01:4e:82:
0a:4e:11:10:e0:09:7f:1e:c6:60:d4:23:94:54:be:0a:97:03:
af:e9:13:5f:76:33:04:0b:44:b9:a1:e0:cc:92:79:f5:a1:bb:
d9:a2:fe:98:c5:2d:b8:64:16:01:00:03:cf:2c:19:45:2c:87:
05:31:bc:3c:e6:a6:44:08:00:a3:77:eb:32:cd:39:37:ac:d5:
e8:e6:5a:dc:d7:a5:d4:b2:f3:a0:b8:c2:07:78:fe:2a:5e:38:
70:6d:d1:ad:f2:7a:b2:1f:3e:78:54:a1:c9:a9:81:fc:bc:d2:
56:bb:65:3b:a2:08:2f:e4:29:f3:cb:36:02:7a:e3:fe:1c:aa:
12:34:41:9e:bf:1a:e2:ed:c3:33:17:dd:ad:d5:e3:b8:ba:45:
69:73:29:d7:94:b6:87:b2:e6:91:e3:d6:47:67:96:c3:3f:86:
0a:e2:6c:ed:b8:06:46:31:b6:92:c4:7b:da:4e:de:86:19:95:
f8:30:dd:0a:60:f0:3c:60:6e:90:c1:cf:f8:1b:65:52:62:7f:
1c:3f:ab:34:66:f6:5b:7c:e6:1d:7b:af:7e:d3:b1:ae:2a:8d:
77:8f:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:42 2024 by rpki-client on console-fra.rpki-client.org