Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/QeSahzgcwBwYi4PFhFg5j63ZSNA.roa
File: QeSahzgcwBwYi4PFhFg5j63ZSNA.roa (raw, json)
Hash identifier: dwVtrjVDSfdqXU+3dKGXuHbv08yyXNbHX26Z2q1pV8I=
Subject key identifier: 41:E4:9A:87:38:1C:C0:1C:18:8B:83:C5:84:58:39:8F:AD:D9:48:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 01857169E54D6D9AF1C044D63348F51BA4C7
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/QeSahzgcwBwYi4PFhFg5j63ZSNA.roa
Signing time: Mon 02 Jan 2023 07:37:23 +0000
ROA not before: Mon 02 Jan 2023 07:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62943
IP address blocks: 84.54.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:e5:4d:6d:9a:f1:c0:44:d6:33:48:f5:1b:a4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 2 07:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41e49a87381cc01c188b83c58458398fadd948d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:82:d5:5c:83:cf:5a:f1:6d:72:ca:c8:36:
56:99:ab:aa:a7:f4:4c:ca:01:7e:44:a6:38:fd:5d:
07:cd:33:f4:48:b0:b7:1b:cb:16:97:eb:64:57:31:
82:62:e2:1e:66:79:de:31:1d:c0:e1:03:9e:cc:ff:
d0:2c:b9:99:45:8a:d0:b0:1e:9a:d1:23:bd:b4:6f:
12:19:a5:25:0e:4b:73:00:1c:13:27:e2:fa:48:5a:
76:76:f9:ab:f3:b6:4d:82:d5:be:65:0f:e0:43:99:
c9:c7:cf:8a:1e:77:83:bf:54:f2:0c:5f:c9:db:39:
e5:a2:81:92:e6:18:ce:71:a6:86:ec:82:74:ec:7a:
1f:b0:2d:b8:f0:15:e9:df:f1:d8:b0:a4:e9:ce:71:
ec:e6:95:a5:02:28:16:12:bc:4d:f3:67:71:d0:ec:
c9:c7:d5:32:4f:34:27:84:ab:fc:4c:c1:e3:c8:2a:
70:d8:15:6a:9d:40:2c:f0:89:23:b5:4d:df:02:e0:
c9:17:91:87:6d:01:b4:11:97:31:1f:54:d5:01:38:
6b:59:ac:70:8d:c3:6b:ff:7d:88:28:e4:ca:45:34:
91:a5:6a:bb:3a:fc:9a:69:89:50:88:c7:b2:ac:3e:
c7:40:39:79:b8:fa:30:13:fc:18:eb:43:4f:b4:89:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E4:9A:87:38:1C:C0:1C:18:8B:83:C5:84:58:39:8F:AD:D9:48:D0
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/QeSahzgcwBwYi4PFhFg5j63ZSNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.15.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:82:c5:a5:e5:c8:dd:0a:15:19:43:78:d5:83:7c:fd:23:96:
e5:6d:0b:9b:15:b3:8b:d6:68:19:0a:e6:62:61:81:a9:7e:39:
0f:ed:9f:fa:5e:dc:77:fe:0c:26:ee:d2:ae:62:ce:aa:24:3e:
99:5b:e3:b6:85:d2:d1:cc:1e:27:ac:10:04:f8:8f:5e:20:8f:
0d:71:12:9e:4c:af:37:20:d0:6b:04:43:52:67:59:a1:43:b6:
d7:eb:e6:5b:0f:d0:5a:46:d2:95:73:9b:22:78:89:b3:d5:86:
23:c5:86:c9:44:bf:9a:6b:4f:65:b9:09:6a:92:a9:b1:c9:d3:
93:7c:3f:23:0f:2c:21:65:ae:5c:6b:3f:3a:34:d7:0c:67:5b:
c2:67:b7:27:72:23:bf:15:96:04:c7:93:ba:28:a7:e6:54:c6:
12:c9:b2:77:14:49:95:73:5c:61:38:85:93:05:cc:87:ec:9c:
41:eb:c0:cf:39:0a:e8:f7:40:74:60:b7:28:2d:68:35:44:a8:
60:64:ed:8c:58:90:70:cc:02:bb:c9:96:0d:9e:fe:dd:58:54:
06:0b:3a:09:3b:33:79:d6:cd:59:86:31:be:e5:97:65:83:73:
45:19:f3:bc:09:64:d4:a6:42:e6:55:73:f7:13:e5:aa:b1:3a:
2b:c4:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-fra.rpki-client.org