Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/QeGU4k2PxHumHCgQA15Vja6pkDE.roa
File: QeGU4k2PxHumHCgQA15Vja6pkDE.roa (raw, json)
Hash identifier: CYVtFcyai2V10/Kk0cxSo1Jd+1n5CtEX/a2txJmxlZ0=
Subject key identifier: 41:E1:94:E2:4D:8F:C4:7B:A6:1C:28:10:03:5E:55:8D:AE:A9:90:31
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 01856CCB042C49D78E641F16E487F1CD1616
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/QeGU4k2PxHumHCgQA15Vja6pkDE.roa
Signing time: Sun 01 Jan 2023 10:05:22 +0000
ROA not before: Sun 01 Jan 2023 10:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50126
IP address blocks: 77.232.145.0/24 maxlen: 24
77.232.144.0/24 maxlen: 24
77.232.147.0/24 maxlen: 24
77.232.146.0/24 maxlen: 24
77.232.152.0/24 maxlen: 24
77.232.148.0/22 maxlen: 22
77.232.154.0/24 maxlen: 24
77.232.153.0/24 maxlen: 24
77.232.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:04:2c:49:d7:8e:64:1f:16:e4:87:f1:cd:16:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 1 10:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41e194e24d8fc47ba61c2810035e558daea99031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cb:3d:c6:09:25:99:9d:63:f4:71:03:c6:ad:
f2:20:8b:c2:bf:60:9f:a7:10:bb:09:98:0b:8b:e6:
55:3c:43:88:c0:76:98:4c:2b:27:b7:34:c8:74:40:
48:72:6f:48:8c:d3:5a:18:fc:89:90:88:ce:13:c8:
30:9f:08:b1:e8:fe:bd:47:5b:d5:3d:a0:33:e2:3f:
ff:00:c3:27:1d:0d:40:d7:a9:c0:32:32:56:23:3d:
e2:9e:95:e7:2d:6e:da:6a:76:e0:01:f9:42:63:53:
2a:1e:a6:cc:59:50:b0:7d:c1:62:aa:71:90:50:87:
07:80:49:76:4f:79:c6:92:f3:13:dd:1c:ee:ba:2a:
cf:68:b1:92:a9:d2:4a:5e:86:9e:c1:10:5a:80:be:
d3:c6:1b:df:d9:19:43:0f:ea:9b:6e:c5:c7:58:23:
f4:dd:98:c2:eb:f1:4b:2b:f9:69:48:ba:a5:38:b2:
e8:5a:67:63:a0:f7:c7:bf:78:d0:0d:f3:b4:27:de:
77:ae:ea:b8:ed:82:86:ed:87:85:40:04:0d:9b:17:
2b:56:e3:9b:be:cc:3d:de:e1:14:e5:e0:df:b9:11:
4c:8f:e0:3c:cd:60:ff:f4:37:64:29:dd:0a:21:35:
47:df:b5:cb:57:d7:3a:88:d4:b8:36:3d:26:79:88:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:94:E2:4D:8F:C4:7B:A6:1C:28:10:03:5E:55:8D:AE:A9:90:31
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/QeGU4k2PxHumHCgQA15Vja6pkDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.144.0-77.232.155.255
Signature Algorithm: sha256WithRSAEncryption
68:72:bc:d5:61:99:a0:f3:48:f6:05:b8:45:1d:78:b4:c5:17:
87:15:fa:5a:cf:89:e7:4e:2a:e9:33:50:c7:68:06:c8:55:87:
81:8f:ea:01:aa:b0:0a:5f:70:45:35:22:55:cd:70:f5:9b:06:
e7:9c:8e:1c:2d:76:05:24:8e:1c:2f:8a:97:98:95:7a:97:92:
4e:66:5b:ab:3a:62:5e:50:67:aa:3d:37:34:09:87:35:9a:a5:
29:1c:92:6b:c3:fb:32:62:76:cf:0d:d3:64:df:4f:06:06:a5:
4b:3b:d6:6e:b7:ff:93:45:1e:80:6d:39:de:ea:6f:3c:c0:63:
bf:be:e8:ab:d5:43:49:9d:33:cb:5a:77:ce:85:df:f7:ed:0a:
30:f3:48:e5:91:16:c5:60:09:8e:6c:bb:f1:60:d2:9d:73:b6:
72:b9:af:e6:06:32:73:38:c9:ce:07:2c:e3:72:89:80:ba:41:
b0:de:b7:3f:49:9c:75:e0:86:9c:59:01:6b:48:b2:32:15:eb:
f4:2f:35:cd:38:20:7d:0e:01:ab:be:a0:91:42:50:de:7e:95:
5f:0f:78:96:4e:34:be:d6:3c:33:63:b9:b3:73:38:06:70:70:
e8:0e:d2:c4:78:5a:29:6c:a5:33:d3:1e:ee:f6:61:96:56:e5:
99:39:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:44 2024 by rpki-client on console-ams.rpki-client.org