Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qhlXl7E2ZS5uKcnXCaDNsa8JWEU.roa
File: qhlXl7E2ZS5uKcnXCaDNsa8JWEU.roa (raw, json)
Hash identifier: 2BI7/f7e6Ewj5iijxnW61Wa+1h3oECe7J+2IVI2hWFU=
Subject key identifier: AA:19:57:97:B1:36:65:2E:6E:29:C9:D7:09:A0:CD:B1:AF:09:58:45
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018CF516F034E4D7BCA99F441A9534755A1E
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qhlXl7E2ZS5uKcnXCaDNsa8JWEU.roa
Signing time: Wed 10 Jan 2024 20:36:10 +0000
ROA not before: Wed 10 Jan 2024 20:36:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.145.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 11:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:16:f0:34:e4:d7:bc:a9:9f:44:1a:95:34:75:5a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 10 20:36:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa195797b136652e6e29c9d709a0cdb1af095845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:c8:cf:ae:62:7e:0a:a3:6d:5c:75:62:75:
9e:09:e4:b3:b2:d9:74:0c:70:9d:ff:07:2a:9a:a9:
f0:6a:fa:09:da:3a:c5:31:33:a7:43:68:81:34:ac:
73:9d:00:8f:45:bf:1a:dc:1c:6b:2d:86:1f:d9:fe:
64:37:07:31:97:10:72:cc:84:8d:22:70:17:eb:64:
3b:ef:ee:65:3c:a8:b3:b0:7c:39:99:2a:5f:e6:bb:
33:a6:cb:40:5c:5c:d5:99:7c:ac:7a:a4:35:f3:4b:
08:c8:81:b8:49:9c:fa:37:ed:2f:22:83:8a:4d:8a:
b5:19:1e:54:08:cb:a7:3c:ab:9e:ea:de:8a:a9:20:
83:68:3b:3f:03:0a:f6:4b:66:fb:84:ad:f3:4a:0c:
cd:6c:6b:35:f0:43:a9:9f:29:a1:13:14:4c:ba:39:
23:c1:7c:7e:2b:c4:e9:03:61:b8:c9:d7:2a:5a:46:
e1:b5:c7:cb:7c:b5:5a:67:71:ce:0f:f8:54:cd:23:
64:9c:0f:20:14:c7:b3:f4:f9:44:07:9a:e0:d8:5c:
e8:38:90:e1:ba:d5:28:9a:5c:4a:a8:d3:47:bd:af:
e7:69:f3:8b:67:03:2d:d1:3d:88:b6:6d:db:15:28:
9a:b5:64:2e:56:f7:b7:35:da:18:1f:8b:30:ce:d7:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:19:57:97:B1:36:65:2E:6E:29:C9:D7:09:A0:CD:B1:AF:09:58:45
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qhlXl7E2ZS5uKcnXCaDNsa8JWEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
185.230.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b6:a4:16:be:8d:4a:02:f6:19:b6:7a:84:51:2f:a5:36:8c:
12:59:ea:1f:b6:07:8c:e8:4d:b6:73:0a:3e:c8:89:d7:94:a0:
3d:0a:a8:f9:a8:2a:44:82:62:8f:95:02:54:0d:dc:1f:d7:13:
6a:43:e7:43:6b:8f:7a:52:0f:80:e7:66:51:78:f3:9c:52:91:
94:80:a6:26:5e:74:5f:2b:01:c3:14:c8:22:df:45:8b:4b:7d:
89:d0:f0:8a:eb:34:d2:ac:82:76:63:f2:f8:17:f5:95:ab:50:
4e:09:b8:a8:73:80:b7:47:7a:8b:1e:a3:d2:f3:88:dd:26:2b:
6f:78:9d:8b:46:44:83:84:a8:4c:9e:ec:ec:a3:33:d6:36:6e:
1b:b7:ae:fb:28:44:3a:f8:92:6d:3b:3d:ef:c8:88:f4:62:f5:
6f:a7:4f:e6:bd:d2:18:1c:62:fe:41:8b:d9:a1:57:e7:31:65:
e0:38:81:bc:c1:ba:e8:5a:7c:77:19:54:38:ad:54:41:9b:53:
4f:53:8c:42:2a:c6:1e:f5:82:e5:ea:dd:9f:81:9b:61:60:f5:
af:df:74:95:00:3f:6c:a2:02:8c:48:80:99:9a:90:2a:e9:c7:
fc:dc:17:2d:80:1e:7a:43:8d:f2:bf:74:54:80:ec:f1:60:ad:
93:77:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 15:08:17 2024 by rpki-client on console-fra.rpki-client.org