Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/qAkfC1BG-A1DetVEzQsHPAHIv70.roa
File: qAkfC1BG-A1DetVEzQsHPAHIv70.roa (raw, json)
Hash identifier: h/OuO+2pNIHUkvPJbPx1AwMQ0AGBQncCoKt/AtoGc9g=
Subject key identifier: A8:09:1F:0B:50:46:F8:0D:43:7A:D5:44:CD:0B:07:3C:01:C8:BF:BD
Certificate issuer: /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Certificate serial: 0186EADD743B1A21F81B6C19956AF7D433A2
Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/qAkfC1BG-A1DetVEzQsHPAHIv70.roa
Signing time: Thu 16 Mar 2023 14:40:27 +0000
ROA not before: Thu 16 Mar 2023 14:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197674
IP address blocks: 185.72.218.0/24 maxlen: 24
185.72.219.0/24 maxlen: 24
185.72.216.0/24 maxlen: 24
185.72.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:dd:74:3b:1a:21:f8:1b:6c:19:95:6a:f7:d4:33:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Validity
Not Before: Mar 16 14:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8091f0b5046f80d437ad544cd0b073c01c8bfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8e:03:50:c5:8d:10:c3:d3:f5:49:c7:e1:fd:
a6:f0:16:54:92:ee:31:d5:ba:0f:95:f9:99:97:27:
b9:3b:3d:3d:7a:62:cb:2a:fc:38:51:cc:28:7f:b4:
dc:98:55:16:7d:b8:46:20:66:c6:a0:2a:32:a9:fb:
b0:61:c6:0c:70:bb:80:8d:c2:c2:37:93:6e:bd:7f:
6f:d3:d4:fe:7e:10:2f:0f:09:5e:e0:4c:8b:93:9e:
d3:db:5b:57:b3:63:2b:02:4d:79:58:ed:33:c1:3d:
74:87:e3:6a:7b:b0:84:71:f3:52:7f:84:e9:b1:ab:
0f:00:c4:72:b2:08:05:c4:18:7c:94:6d:0b:68:8b:
1d:9c:e9:55:b7:77:4d:28:8b:63:0f:6a:ce:a7:00:
8f:0a:54:3d:3b:06:03:ba:b1:83:87:b3:a8:1d:e4:
11:f5:f6:d7:9d:84:6e:89:91:1d:7b:c4:9f:44:22:
91:89:12:9e:32:3b:02:f4:34:25:61:4a:e8:9e:45:
cb:c9:af:94:87:33:22:98:ef:2d:11:ac:c1:39:e9:
88:50:59:66:4f:94:49:b4:3c:f3:6e:75:d6:71:61:
3d:ca:14:87:42:a0:f9:95:b2:5c:c0:33:c8:f3:a6:
72:d4:56:68:64:5c:2e:9d:76:ec:15:15:2c:e2:95:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:1F:0B:50:46:F8:0D:43:7A:D5:44:CD:0B:07:3C:01:C8:BF:BD
X509v3 Authority Key Identifier:
keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/qAkfC1BG-A1DetVEzQsHPAHIv70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:35:97:f3:52:75:c9:c2:48:7b:7a:42:62:c8:12:64:3f:6d:
ce:dd:a8:d3:67:6c:92:77:d9:ce:a2:73:38:ee:66:42:68:a8:
23:ca:4b:1d:a8:42:a5:ab:27:53:d4:9d:2b:11:90:9e:54:b6:
69:a7:e4:03:8c:2c:d5:72:f8:b8:09:45:e8:e4:88:ea:b4:3d:
85:af:b3:63:76:9b:31:56:7e:1b:ed:63:39:92:54:bf:07:c0:
a2:48:69:18:ee:33:9b:8d:a4:cd:b4:29:f5:d5:d9:db:35:37:
e3:23:22:8d:c9:4e:ed:88:60:f3:b2:08:3d:9b:5c:cb:f3:05:
48:0f:64:88:e0:fd:ea:51:c3:a3:b2:9e:af:c1:0c:34:e7:31:
2c:f0:a6:e1:6b:13:fa:9f:73:63:7a:75:b9:05:dc:25:42:3a:
e7:4b:b5:ac:79:7f:bc:2f:4c:e2:0c:eb:e8:12:ff:fa:9c:ee:
7b:b3:f5:be:25:3d:91:66:db:d6:17:a5:d9:b8:64:1b:b2:d2:
c1:3f:98:d6:7e:7c:d4:c0:f7:3c:35:8b:da:a5:9c:08:cf:5b:
5a:91:1e:1f:0d:94:9f:99:3d:65:80:18:d5:e5:32:e5:08:a5:
c1:e0:7b:03:af:e4:74:51:b9:42:e2:a2:7e:7d:bd:85:3f:85:
86:8f:07:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:20 2024 by rpki-client on console-fra.rpki-client.org