Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Qt6EyHwVZ9xeZ8TyCaH9gp46iYo.roa
File: Qt6EyHwVZ9xeZ8TyCaH9gp46iYo.roa (raw, json)
Hash identifier: aCTsxv5o8vT/+WIUgJp4QoknqXqq1dRjeXznPLUogxE=
Subject key identifier: 42:DE:84:C8:7C:15:67:DC:5E:67:C4:F2:09:A1:FD:82:9E:3A:89:8A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7AF2FF09AD9AD655F00BE645FF2A6
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Qt6EyHwVZ9xeZ8TyCaH9gp46iYo.roa
Signing time: Mon 02 Jan 2023 08:44:52 +0000
ROA not before: Mon 02 Jan 2023 08:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203025
IP address blocks: 194.50.188.0/23 maxlen: 23
194.50.184.0/23 maxlen: 23
2a09:ef40::/29 maxlen: 29
2a02:c580::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:af:2f:f0:9a:d9:ad:65:5f:00:be:64:5f:f2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42de84c87c1567dc5e67c4f209a1fd829e3a898a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:32:b9:67:d7:e4:2e:91:ae:7f:f4:6f:78:
50:12:74:dd:99:c8:e3:d5:e2:9e:a7:2d:5c:00:5e:
78:db:f7:32:20:38:a2:91:31:af:ac:0d:aa:a5:02:
dc:cc:5e:77:94:54:f7:0c:7b:ae:e3:e1:ef:cd:8f:
9e:8a:3e:f1:ca:36:77:8e:c9:46:f5:17:67:de:3c:
c9:06:fc:e0:ff:ba:40:73:a7:36:7d:4f:f7:af:c4:
9d:bd:b3:42:ef:2f:ae:99:02:ff:a6:29:91:81:2e:
98:ee:a3:c4:71:ea:b9:64:53:7e:20:a7:d5:3a:d3:
fe:3c:52:62:15:88:d2:bc:4f:b4:56:d6:e7:7b:35:
23:c8:ec:09:52:e2:72:f0:ff:74:c4:07:37:4b:08:
ce:c0:e1:78:a1:e1:7f:11:cc:88:45:6d:39:59:69:
23:17:ef:40:a8:c7:cd:5d:be:b2:6d:a8:67:01:db:
c3:bd:52:45:ac:b2:df:ec:70:f1:54:67:c5:61:58:
6b:e3:d6:22:3f:0e:be:fa:45:9e:d4:00:49:db:cc:
6a:03:65:d0:b2:83:ad:ce:30:2f:17:0b:d0:2e:00:
b7:bc:92:a8:a6:9e:4e:80:a6:8c:53:fc:df:b0:01:
77:6b:96:7a:00:7d:77:b4:95:01:46:fd:34:17:96:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DE:84:C8:7C:15:67:DC:5E:67:C4:F2:09:A1:FD:82:9E:3A:89:8A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Qt6EyHwVZ9xeZ8TyCaH9gp46iYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.184.0/23
194.50.188.0/23
IPv6:
2a02:c580::/29
2a09:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
a8:a7:ed:ca:42:56:7c:6c:04:bb:98:b5:f9:d0:c0:97:e9:70:
ed:3c:c3:3d:b0:55:1c:c8:a0:56:5d:3a:ef:10:9d:cf:ef:a9:
f7:ac:ac:13:5c:fb:e9:c4:30:7b:30:55:72:a6:61:04:7f:fa:
86:09:0b:a0:07:75:77:62:24:4d:78:b5:1c:cf:ee:8a:f9:eb:
1a:5f:a0:58:aa:a6:77:0a:95:39:38:74:13:61:d0:f9:85:e5:
07:ae:c6:08:5a:3f:19:de:97:64:64:9a:16:cc:70:a1:48:c8:
77:74:fb:72:45:8c:72:52:06:71:fe:02:19:ee:79:53:5d:3b:
66:27:2f:b5:b5:0f:b7:54:80:ef:48:8e:d6:58:42:07:c8:4c:
c8:6c:01:e8:f7:94:ca:2e:d5:7b:0f:33:fb:61:a0:4a:15:02:
cc:66:7e:d8:84:79:79:22:81:f8:9b:b3:8d:07:93:1e:40:1d:
0b:91:13:3d:0c:de:76:32:4f:23:5a:7f:eb:9f:00:ad:ea:27:
25:13:86:c1:4d:09:84:5f:0d:03:61:63:a0:3c:20:2e:2f:af:
11:4d:c2:1d:0f:72:aa:62:60:45:76:70:0d:98:58:98:f0:54:
d9:c4:6c:72:7f:3e:fb:f6:2c:6e:47:58:15:61:1e:45:ab:03:
b1:b1:a6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:06 2024 by rpki-client on console-ams.rpki-client.org