Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Qx69p56EyP4EPxBSC8QPBQKi2sU.roa
File: Qx69p56EyP4EPxBSC8QPBQKi2sU.roa (raw, json)
Hash identifier: aufdfL71EoVddW8F3BMjUP5BeFkT2c9Ka5uCK/NN5EQ=
Subject key identifier: 43:1E:BD:A7:9E:84:C8:FE:04:3F:10:52:0B:C4:0F:05:02:A2:DA:C5
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018ABF15955D0309BDD63FE877147FDC5689
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Qx69p56EyP4EPxBSC8QPBQKi2sU.roa
Signing time: Fri 22 Sep 2023 22:49:37 +0000
ROA not before: Fri 22 Sep 2023 22:49:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.15.98.0/24 maxlen: 24
188.209.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bf:15:95:5d:03:09:bd:d6:3f:e8:77:14:7f:dc:56:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Sep 22 22:49:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=431ebda79e84c8fe043f10520bc40f0502a2dac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:7b:9f:45:1d:dc:43:2e:3d:87:45:7c:94:
8f:c7:6e:d7:71:20:04:c3:c8:63:7d:01:9a:29:6d:
6c:59:c2:37:9d:47:d6:8f:6b:c8:72:01:e8:6f:85:
19:3d:bf:1f:f1:1e:33:6b:29:c4:f0:f5:b2:0a:f1:
46:c8:80:16:b4:e0:5c:37:3d:42:ad:e4:82:e3:a6:
bb:aa:82:62:31:74:4d:04:73:a2:db:17:11:c2:e4:
ba:bc:74:35:b6:97:f2:bc:21:57:90:f0:c2:be:f3:
77:19:d1:11:69:e5:99:85:7d:94:6f:f8:b6:7f:02:
5f:52:a2:38:e9:d2:6f:ae:5a:a7:55:ac:5c:71:24:
8a:8b:62:c2:cd:b6:9d:09:19:02:e6:9e:a7:d7:7a:
fe:ec:b9:3d:dc:80:f2:f1:8c:4c:e9:88:1e:46:d5:
51:7d:21:71:5f:fa:cf:06:d7:f4:86:0e:3d:e0:20:
d8:2e:1d:6d:49:4d:75:8d:64:1e:3c:b7:f1:4e:20:
ae:91:fe:f8:64:26:cd:cf:dc:97:0a:b1:02:88:89:
df:5d:5c:a6:0e:3e:d9:7b:37:22:30:a8:8f:ad:f8:
a3:f9:f9:57:45:95:b5:7d:a7:e2:d5:37:7a:50:be:
d8:1b:d5:83:c3:8b:08:d8:b9:32:34:06:1e:3e:9f:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:BD:A7:9E:84:C8:FE:04:3F:10:52:0B:C4:0F:05:02:A2:DA:C5
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Qx69p56EyP4EPxBSC8QPBQKi2sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.140.0/22
194.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b7:58:7a:d0:c7:7c:c4:b6:a7:6d:40:73:81:7c:2c:48:0b:
8e:94:3e:1a:c0:0b:ec:59:f9:ce:a9:41:ff:53:35:4b:5c:64:
cf:65:57:0b:7e:e4:78:f4:90:cc:bf:d9:55:8a:dc:ee:69:0b:
67:d1:71:d1:32:96:47:2f:6e:c5:8a:d0:24:0a:a7:cb:26:c4:
4b:09:9f:e6:34:db:77:e4:6a:0c:b6:72:67:88:82:6e:55:24:
c8:77:54:e5:53:0c:52:1f:db:95:05:c1:46:49:de:ec:96:f0:
e8:ad:7d:7a:16:f6:f8:15:61:82:07:58:74:0a:28:d1:db:d8:
19:6c:2b:e0:b1:b9:86:47:b2:4e:d8:d1:87:d3:a1:af:f1:b3:
2c:f5:56:88:b7:a8:fe:3a:68:52:67:22:56:83:b2:e6:61:05:
5b:f9:4b:5f:16:07:46:7a:14:39:7c:3f:a8:cf:af:f3:17:d4:
33:47:b1:6e:8b:42:cd:2f:c4:b0:c6:6f:84:39:2f:7d:f2:64:
1c:ad:67:aa:d3:85:1a:d8:d3:2e:26:37:6c:e8:e5:00:80:2e:
49:41:a3:e3:07:16:13:90:8d:77:58:ec:8f:47:c0:2a:ea:59:
9c:ce:52:69:28:6b:ac:58:71:0a:1c:2e:f8:3b:ed:a2:da:fc:
87:64:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 24 07:00:16 2023 by rpki-client on console-fra.rpki-client.org