Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/sqfLaDK8CvBVIe0JhXpyV6CGfkI.roa
File: sqfLaDK8CvBVIe0JhXpyV6CGfkI.roa (raw, json)
Hash identifier: KY7LkHSLnbSqK1m9K4A7qd7o1pBa40jfxwnDXYLTXTg=
Subject key identifier: B2:A7:CB:68:32:BC:0A:F0:55:21:ED:09:85:7A:72:57:A0:86:7E:42
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0188B435B36224C19864B6193FE7A03AC927
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/sqfLaDK8CvBVIe0JhXpyV6CGfkI.roa
Signing time: Tue 13 Jun 2023 10:03:18 +0000
ROA not before: Tue 13 Jun 2023 10:03:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 94.137.75.0/24 maxlen: 24
94.137.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:35:b3:62:24:c1:98:64:b6:19:3f:e7:a0:3a:c9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jun 13 10:03:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2a7cb6832bc0af05521ed09857a7257a0867e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:51:8d:c6:e9:99:30:7c:4e:28:d8:3b:7c:
5f:c2:01:f4:80:f5:68:4e:35:07:0d:01:a4:cf:4e:
16:bb:cf:48:3f:16:0f:26:f1:95:ce:e5:06:54:1e:
45:e4:b6:48:e9:97:02:18:9f:78:0c:ea:63:21:06:
32:9e:2c:42:04:6c:50:25:bd:07:87:5a:b5:87:a1:
26:22:6e:6e:fa:31:b3:0a:36:33:0e:12:04:24:bc:
2b:76:0e:4d:98:ec:ae:a7:64:1f:9e:cb:e7:86:58:
50:0f:d8:96:3c:a9:4b:e1:94:76:b5:eb:03:f5:6c:
71:5d:c2:0b:29:f1:52:da:48:2c:c5:49:01:4b:3e:
ed:3a:6a:c0:88:86:d7:22:db:9c:c7:75:bb:6d:f6:
d1:5f:b4:33:96:5e:57:e5:3b:87:7b:2b:74:0d:94:
22:ea:ff:58:39:b6:cd:6e:82:f0:ac:a4:53:9f:42:
cd:be:8e:21:e5:e7:24:6b:2b:9b:87:8b:15:bb:86:
16:ab:6e:e8:75:a0:d4:d9:58:8e:10:87:6d:3a:10:
06:a2:93:44:4c:14:09:c6:36:c9:04:a6:c2:81:98:
09:ba:39:18:47:8a:45:df:d9:e1:04:c6:18:88:b1:
6e:5b:89:e4:e4:b3:3a:8c:4a:19:10:12:c8:b7:7f:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:CB:68:32:BC:0A:F0:55:21:ED:09:85:7A:72:57:A0:86:7E:42
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/sqfLaDK8CvBVIe0JhXpyV6CGfkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.75.0/24
94.137.77.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1a:0c:c8:fe:cc:15:c2:11:c5:40:1d:1e:37:2f:82:5b:dd:
87:9a:d9:3a:73:6d:a6:b2:d6:86:fb:c8:e0:cc:32:60:6f:60:
14:98:9e:4d:56:29:62:15:76:80:a9:5a:55:82:23:61:0a:c2:
94:07:cd:41:c3:20:96:6e:f5:1d:20:0b:15:7f:bd:08:c8:59:
9b:e2:1d:db:ce:31:ae:b5:78:91:ee:ab:98:ef:8e:c3:d0:09:
18:40:ca:b4:29:9d:36:20:57:96:27:f6:6f:38:97:f5:68:ed:
75:7e:25:f2:ea:d8:08:ae:b9:2f:d4:3d:54:e5:77:be:93:83:
5a:3a:ef:5b:21:5f:0e:e2:c9:97:79:8c:d4:bb:cf:11:99:64:
ad:e8:2a:ad:f3:c5:47:ef:e6:48:fa:2b:1f:9b:5a:20:00:9b:
e5:85:cf:1a:b9:d3:0b:d8:13:57:44:33:27:9a:c7:7b:08:5b:
3f:93:ae:7c:20:f8:37:10:01:8a:fa:fa:a5:40:17:de:1c:fe:
ae:ec:ba:f2:12:10:87:da:34:99:7c:57:37:82:17:c8:f7:5a:
80:27:a0:18:14:0c:50:5d:33:b4:12:f5:17:61:da:a6:2d:ce:
d6:61:6d:3d:88:33:9c:a5:47:97:ee:16:dd:f0:e0:ed:d5:f7:
75:81:87:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org