Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/QvDhdQ84rT6F6JurnkyV-QHhSMs.roa
File: QvDhdQ84rT6F6JurnkyV-QHhSMs.roa (raw, json)
Hash identifier: W0fEQnDZYn4KqdCENQ8OzH1vmTv/rSCempFJrdThCQE=
Subject key identifier: 42:F0:E1:75:0F:38:AD:3E:85:E8:9B:AB:9E:4C:95:F9:01:E1:48:CB
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 0189B5D11CA44D1554D96FA3FFD224F79F3F
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/QvDhdQ84rT6F6JurnkyV-QHhSMs.roa
Signing time: Wed 02 Aug 2023 10:35:27 +0000
ROA not before: Wed 02 Aug 2023 10:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.96.168.0/23 maxlen: 24
87.251.0.0/20 maxlen: 24
87.251.16.0/22 maxlen: 24
185.203.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:d1:1c:a4:4d:15:54:d9:6f:a3:ff:d2:24:f7:9f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Aug 2 10:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42f0e1750f38ad3e85e89bab9e4c95f901e148cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:d6:8e:ea:28:97:47:a6:67:bb:33:ff:e1:
ed:94:ff:86:88:52:27:96:71:be:eb:69:7e:cc:b1:
c7:07:7e:28:dc:b5:27:06:81:d0:09:28:db:c0:cc:
08:a0:ae:9f:40:d3:80:a7:7f:ed:f2:e1:1c:68:a6:
f7:1c:32:81:be:2f:96:ec:51:7a:f5:8e:f2:a9:15:
04:d4:85:13:ee:6a:0a:90:e7:3b:5f:6f:0a:4c:80:
c7:96:73:e9:21:46:ee:01:93:30:97:99:c7:85:7f:
1a:55:2d:39:f6:13:a2:a3:fb:da:80:07:dc:91:03:
45:ec:7f:c1:ae:70:3a:5e:cf:82:0c:14:12:48:10:
a0:1c:c8:b8:5f:ef:21:ce:6e:2e:4a:0f:0f:52:2f:
3c:3c:57:c2:c5:6e:c8:7f:cd:09:bb:a1:6b:db:7f:
06:5f:2a:fb:c9:3d:b8:d4:b7:f6:4c:d4:64:94:d1:
1d:a5:0a:04:0c:36:22:af:ac:36:80:46:cb:78:0e:
04:d3:89:ad:b6:40:e6:55:d1:10:36:d0:d2:bf:50:
da:8c:b4:5f:ad:34:e8:e7:87:18:63:45:7d:e2:c7:
3a:0a:7b:df:fa:45:6a:1e:7b:80:01:16:69:b3:c9:
3f:a1:2f:bb:78:09:e8:e1:ee:75:01:02:46:0c:c8:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F0:E1:75:0F:38:AD:3E:85:E8:9B:AB:9E:4C:95:F9:01:E1:48:CB
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/QvDhdQ84rT6F6JurnkyV-QHhSMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.0.0-87.251.19.255
185.96.168.0/23
185.203.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b6:2f:e3:c5:ff:25:7e:62:b7:23:3c:43:f0:b8:c8:74:d5:
4b:53:61:03:0e:4e:03:55:7a:4f:81:86:be:90:87:89:cf:3e:
85:0c:f0:25:c8:f3:2f:44:f8:70:19:2b:44:51:7c:57:49:7c:
44:3e:1f:c6:cb:4b:e5:c9:f6:62:1c:50:41:f7:4e:b3:2c:14:
6c:e9:cc:46:cf:ce:1e:39:23:2a:29:7e:c4:cb:2e:e9:d4:ef:
9f:26:68:56:a7:ce:6b:e4:45:f6:2b:84:6c:c5:29:3e:a5:08:
30:fc:88:65:08:05:1a:d6:95:2a:b2:c1:b7:eb:f0:19:e3:cd:
d6:a8:b3:ec:38:53:dc:13:f8:34:97:6f:40:c7:19:85:08:a3:
d8:56:f3:42:28:be:a2:f5:66:89:bd:5c:bb:42:69:a4:75:92:
26:4f:90:bf:95:25:be:f6:11:ba:3f:0f:ab:b3:9c:55:94:4c:
10:ba:6f:d4:ac:16:a3:61:9d:d2:4e:f6:ae:61:b0:37:a4:e5:
21:86:7d:08:fb:7b:f7:1c:0d:3f:0f:25:4f:4a:0b:02:89:45:
1b:ae:a4:2d:6c:44:ec:10:0e:80:c1:8f:77:e5:c7:af:ac:0e:
38:d6:64:fe:21:e9:27:60:4e:9b:b9:6e:d8:f7:5c:9f:cb:0e:
2c:da:10:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 20:47:39 2023 by rpki-client on console-ams.rpki-client.org