Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/q_GcYuB3Ds_iFdHowZ6wH6FFK2U.roa
File: q_GcYuB3Ds_iFdHowZ6wH6FFK2U.roa (raw, json)
Hash identifier: cPUh9yNDFNn0KPm1mL1o5IvpqTNcfLHIxfEjhcAopl4=
Subject key identifier: AB:F1:9C:62:E0:77:0E:CF:E2:15:D1:E8:C1:9E:B0:1F:A1:45:2B:65
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0185724705F16CDEF11F156FD7B22B85BBFD
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/q_GcYuB3Ds_iFdHowZ6wH6FFK2U.roa
Signing time: Mon 02 Jan 2023 11:38:55 +0000
ROA not before: Mon 02 Jan 2023 11:38:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44050
IP address blocks: 95.215.0.0/22 maxlen: 24
5.101.89.0/24 maxlen: 24
188.143.128.0/17 maxlen: 24
195.2.240.0/23 maxlen: 24
5.188.192.0/23 maxlen: 23
2a00:1d78::/32 maxlen: 48
2a00:1d78:666::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:05:f1:6c:de:f1:1f:15:6f:d7:b2:2b:85:bb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abf19c62e0770ecfe215d1e8c19eb01fa1452b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:df:5e:10:3f:06:f5:35:eb:08:89:c4:39:57:
6d:74:55:60:29:65:ce:cc:38:16:1e:9a:18:f4:ec:
6d:b1:76:03:26:4a:84:66:a6:99:c5:62:7f:d9:b5:
b5:d9:44:83:41:fe:5e:df:4e:16:f4:79:99:d3:97:
98:d3:ae:b1:17:a0:af:dd:12:25:08:49:0b:a3:5f:
1e:32:66:48:da:b3:cd:29:d3:8d:61:bc:cd:92:4a:
eb:4e:80:6e:fc:d7:30:bb:4e:70:87:01:ee:a2:b0:
e2:05:03:2a:24:e9:3d:57:31:8b:a9:6c:01:05:d6:
e5:99:9f:f0:10:ea:af:99:43:b1:39:19:d6:6f:3f:
f6:14:38:c5:ad:69:b8:5c:3c:d0:53:24:97:22:15:
24:61:aa:30:58:e7:18:9f:29:07:85:18:f1:af:4c:
49:1e:d7:33:9f:8f:26:da:b8:bf:f8:2b:c5:ba:77:
b4:00:d9:8b:b6:da:40:ac:bd:74:e1:f3:ef:32:93:
b2:05:76:a2:d2:2e:35:8f:af:ae:a0:32:13:61:aa:
7e:40:4d:fe:bb:6d:14:ee:70:e3:8a:e5:8e:7c:90:
33:77:88:31:dc:62:74:8f:45:24:4b:a9:c6:38:ea:
67:aa:64:a7:40:6b:68:55:d8:f9:b1:55:58:c3:27:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F1:9C:62:E0:77:0E:CF:E2:15:D1:E8:C1:9E:B0:1F:A1:45:2B:65
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/q_GcYuB3Ds_iFdHowZ6wH6FFK2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.89.0/24
5.188.192.0/23
95.215.0.0/22
188.143.128.0/17
195.2.240.0/23
IPv6:
2a00:1d78::/32
Signature Algorithm: sha256WithRSAEncryption
3b:94:39:e8:ad:30:99:4a:69:ee:7a:34:5d:24:5c:d4:f0:70:
5b:0c:c0:7b:60:83:b2:d1:39:15:9a:c2:33:44:46:0e:bc:4e:
47:77:63:aa:4c:85:10:bf:c0:9c:e7:27:6b:60:dd:79:c1:54:
c9:b1:10:a8:2f:e4:ad:06:78:28:32:6a:34:80:38:d7:f4:a4:
75:22:fc:e8:10:34:b5:5d:d9:f8:01:66:11:6c:04:d9:7c:c2:
42:2f:64:01:10:21:93:30:05:cd:e9:06:a6:ce:58:8c:8e:68:
9b:fa:e5:8e:5e:8a:98:6a:97:64:9c:2c:83:86:a9:83:6e:d6:
06:d5:a2:04:d9:26:e8:2a:c8:d7:0b:16:70:c0:f3:c1:15:04:
d9:73:2d:2d:93:81:8f:af:0d:45:00:16:5d:9b:fb:f2:88:ae:
d1:86:7e:b4:ce:b1:bb:89:7a:70:6d:e1:87:90:58:4a:50:91:
04:32:d9:99:27:6b:d9:71:3b:8f:14:ba:32:2b:e1:77:a4:70:
2d:0c:10:5b:6e:26:93:49:aa:89:55:25:91:ce:a6:07:ce:4d:
7b:f1:a0:d9:c8:16:b1:6e:e8:9e:40:74:8d:a5:72:55:6b:bf:
d8:5d:66:17:cb:fd:13:1f:4e:da:5c:2c:a9:66:80:38:c9:a1:
d9:09:e4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org