Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/QX8VOB6OxnaBw0uc5uVJRxgKYZU.roa
File: QX8VOB6OxnaBw0uc5uVJRxgKYZU.roa (raw, json)
Hash identifier: AjKMWHRPrVIH6Jvbw5K5WjLyw2UsbYoOEi3YvS7K2aY=
Subject key identifier: 41:7F:15:38:1E:8E:C6:76:81:C3:4B:9C:E6:E5:49:47:18:0A:61:95
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 01867ED6E459B94CD64D69437E0E73884E82
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/QX8VOB6OxnaBw0uc5uVJRxgKYZU.roa
Signing time: Thu 23 Feb 2023 15:14:17 +0000
ROA not before: Thu 23 Feb 2023 15:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207021
IP address blocks: 194.0.24.0/24 maxlen: 24
194.0.26.0/24 maxlen: 24
194.0.25.0/24 maxlen: 24
193.46.132.0/24 maxlen: 24
193.46.131.0/24 maxlen: 24
193.46.130.0/24 maxlen: 24
193.46.129.0/24 maxlen: 24
193.46.128.0/24 maxlen: 24
2001:678:20::/48 maxlen: 48
2a02:850:ffe5::/48 maxlen: 48
2a02:850:ffe0::/48 maxlen: 48
2001:67c:1bc::/48 maxlen: 48
2001:678:24::/48 maxlen: 48
2a02:850:ffe4::/48 maxlen: 48
2a02:850:ffe2::/48 maxlen: 48
2a02:850:ffe3::/48 maxlen: 48
2a02:850:ffe6::/48 maxlen: 48
2a02:850:ffe1::/48 maxlen: 48
2a02:850:ffe7::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:d6:e4:59:b9:4c:d6:4d:69:43:7e:0e:73:88:4e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Feb 23 15:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=417f15381e8ec67681c34b9ce6e54947180a6195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:f5:6e:ce:b5:d4:d5:52:16:65:48:80:0a:
9a:22:9b:ea:5a:0a:fc:19:29:78:e1:c3:88:da:cb:
ca:82:e9:cd:ef:71:6b:59:5a:b2:79:cf:0c:5b:b2:
d9:c3:6f:a2:01:4b:7d:93:10:14:50:39:69:c7:ca:
29:c3:8f:db:1e:39:fc:1f:43:c8:01:d4:18:71:7f:
a8:10:e8:b5:e1:35:ad:1d:8a:03:80:29:81:65:e0:
5f:8d:07:a1:89:22:f3:91:70:cf:6e:7e:a9:70:2e:
aa:0e:a4:79:89:29:e7:8c:d2:1a:0d:be:5b:99:05:
f5:88:39:fa:70:3e:88:65:d6:8f:8c:12:37:3a:f2:
ea:18:ab:b8:01:50:bd:82:e3:16:c9:1d:29:dd:96:
72:4c:af:2b:83:9b:a8:b3:5f:c7:f5:ae:ab:9e:55:
74:27:59:40:de:54:f0:05:f0:22:65:4b:fc:d1:f1:
93:6d:d3:d8:65:4c:15:2e:29:7e:0c:a6:1a:23:77:
01:5d:15:42:8b:ea:de:fa:93:2b:aa:3b:df:32:d8:
97:6f:72:ed:88:0e:c1:b3:b4:0e:bb:9d:07:95:50:
0e:98:1a:55:bd:f1:4e:c6:08:9d:e6:c8:6f:ea:e0:
fa:b4:b2:34:a1:59:90:52:0d:de:12:19:80:3f:68:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7F:15:38:1E:8E:C6:76:81:C3:4B:9C:E6:E5:49:47:18:0A:61:95
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/QX8VOB6OxnaBw0uc5uVJRxgKYZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.128.0-193.46.132.255
194.0.24.0-194.0.26.255
IPv6:
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850:ffe0::/45
Signature Algorithm: sha256WithRSAEncryption
53:63:06:04:71:b1:16:5f:ea:0e:e1:4c:ac:38:ea:25:75:70:
4a:c9:35:90:ee:cb:7b:05:bc:97:8a:2f:42:b2:a0:8c:59:af:
f1:6c:13:a0:91:59:fc:64:6f:6c:f4:16:be:68:f8:b4:c6:ca:
77:de:13:fd:07:f6:21:ab:36:f1:a1:7d:4d:94:c9:08:93:82:
60:ee:f6:ef:bb:d9:b7:3a:eb:7b:a8:a0:82:2a:03:7a:db:91:
70:30:4b:c8:47:3b:64:10:50:ad:2d:0f:12:ea:63:be:7c:1e:
b9:d6:58:69:e7:73:12:07:b9:2a:f2:95:2e:63:0a:95:65:21:
3e:8c:0a:fd:b2:06:10:24:09:26:f2:71:a3:21:c7:4a:63:ed:
06:b1:b5:e3:b2:a3:19:1e:4f:ff:b4:fe:20:9b:f3:db:3a:4f:
e6:59:e1:18:76:83:f2:95:72:c6:58:da:8d:e9:bb:72:77:7c:
21:d5:8c:af:d0:2d:cf:ba:48:28:82:2b:d5:de:9d:63:f9:01:
f2:a1:f0:cc:9f:18:23:ad:fd:8e:c7:c5:d5:48:45:62:a6:55:
51:3e:c3:1e:72:06:f1:2a:85:0b:89:48:48:d1:c5:4d:aa:fd:
88:24:75:70:af:ff:9b:a4:d5:c6:ed:d5:6b:28:21:f9:9b:23:
86:46:0f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org