Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/qS4bD3_Oa74jlxTQaw3zrafwQYY.roa
File: qS4bD3_Oa74jlxTQaw3zrafwQYY.roa (raw, json)
Hash identifier: b51wq97VzoGFUHSkWvGt+zqtRl/2jZGYcYupmXJ1K1w=
Subject key identifier: A9:2E:1B:0F:7F:CE:6B:BE:23:97:14:D0:6B:0D:F3:AD:A7:F0:41:86
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01856B935C2EB17EEA596D1616962D491D61
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/qS4bD3_Oa74jlxTQaw3zrafwQYY.roa
Signing time: Sun 01 Jan 2023 04:24:57 +0000
ROA not before: Sun 01 Jan 2023 04:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8149
IP address blocks: 213.152.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:5c:2e:b1:7e:ea:59:6d:16:16:96:2d:49:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 04:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a92e1b0f7fce6bbe239714d06b0df3ada7f04186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:c0:b2:6e:92:1e:49:4f:5b:98:2f:73:f8:
92:4d:6c:5d:70:8f:a6:e7:6a:3a:8e:01:43:22:95:
cd:f1:69:d7:63:91:a8:f8:12:ab:90:d3:cb:74:b5:
30:ab:e6:b1:9c:65:f8:c0:f0:e8:5c:61:52:9f:0e:
2c:cc:3d:22:30:18:85:f7:64:30:50:b1:05:fa:d1:
33:8f:66:60:da:fa:7d:6c:81:85:c0:5b:84:19:db:
5d:07:a5:8f:58:2e:f3:d3:c6:36:dc:f9:19:7b:ef:
41:ad:c7:72:23:c0:f7:30:9c:b0:d1:95:15:2b:42:
d4:63:53:1c:61:fe:52:66:2f:24:a2:db:61:49:34:
ba:23:e1:4c:2e:e3:6c:d9:44:e3:36:80:3f:04:01:
a8:e6:0e:ba:e2:31:8f:9e:4a:b4:f2:0c:57:cc:99:
d0:11:10:c9:9f:36:49:ef:41:a6:fa:dd:4e:21:a9:
45:cf:c6:57:26:c6:ea:c3:82:f0:5d:78:9f:d7:c1:
9b:e5:f3:d3:2c:ee:fa:27:42:b0:98:68:ec:f0:65:
d9:ae:0e:fb:04:97:43:33:da:2c:64:d4:5a:09:b6:
ca:1c:f2:bc:26:50:ed:3d:e4:c0:94:69:78:f8:da:
0c:34:11:1d:64:88:08:8f:2f:31:aa:89:28:70:0b:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:1B:0F:7F:CE:6B:BE:23:97:14:D0:6B:0D:F3:AD:A7:F0:41:86
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/qS4bD3_Oa74jlxTQaw3zrafwQYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.243.0/24
Signature Algorithm: sha256WithRSAEncryption
77:01:a1:e9:cc:ee:70:11:5d:11:d1:c7:00:a3:87:6c:cb:62:
a6:4c:03:08:e4:b5:98:02:c5:ab:fb:33:eb:b5:26:ea:59:81:
14:0b:11:b5:d1:df:95:6e:d2:82:c5:f4:f4:43:51:8d:b8:d6:
8b:6a:36:35:5e:4d:6d:c8:e5:75:72:9a:14:3b:ed:31:69:fc:
02:a7:c7:ad:e5:e6:3e:34:c6:b1:09:5d:c2:65:7f:63:d1:35:
cf:43:ea:04:55:5f:3b:e1:d2:da:16:51:35:c2:2a:02:f4:f0:
0c:0f:00:ab:41:c4:48:e6:04:35:b2:8a:5a:a5:0b:e6:f1:5d:
47:42:57:b6:d1:0b:18:c1:be:18:f4:06:15:e9:c8:3f:c6:ed:
f0:f2:5b:30:ac:70:d0:f7:06:9f:62:db:59:b4:e0:41:05:54:
77:07:1f:11:3f:4a:4d:8d:44:25:d5:6d:21:bd:5a:6d:5f:5c:
88:cd:51:0f:76:ee:92:45:04:61:6b:73:a8:63:8a:d3:3f:50:
a2:fb:02:3b:a6:aa:33:8d:29:0d:27:bc:fe:33:0a:fd:1a:dd:
ef:0f:cf:e5:a6:20:41:93:56:0e:d7:c6:f1:0f:28:5b:39:99:
e1:5f:b1:2c:05:19:46:10:d7:71:b2:aa:0f:ec:e4:dd:a7:f2:
15:d7:9c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:41 2024 by rpki-client on console-ams.rpki-client.org