Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/k-QtJkzalPZkUAeVS6sZ4R42jfM.roa
File: k-QtJkzalPZkUAeVS6sZ4R42jfM.roa (raw, json)
Hash identifier: 8ILkgeKmCCbtoKIKaF9zYZnsUdXzTIsytwOgjdBtVPY=
Subject key identifier: 93:E4:2D:26:4C:DA:94:F6:64:50:07:95:4B:AB:19:E1:1E:36:8D:F3
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 01856F42D55D7886D8516CFEAE1FCA823CF8
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/k-QtJkzalPZkUAeVS6sZ4R42jfM.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 194.56.124.0/23 maxlen: 23
194.56.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d5:5d:78:86:d8:51:6c:fe:ae:1f:ca:82:3c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93e42d264cda94f6645007954bab19e11e368df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:b0:b8:50:c2:2b:27:52:28:70:87:c5:ab:
b2:8a:48:89:96:6e:bc:73:d4:52:f1:57:24:dd:c5:
1b:e9:42:3f:75:63:c1:ea:8e:24:6c:60:8d:65:46:
ca:da:46:d2:1f:f6:92:2a:10:03:6f:18:53:36:65:
eb:db:7c:d9:4b:28:29:df:f6:5a:2b:60:3e:db:fe:
fe:10:d4:c7:73:da:69:6a:63:61:d6:c9:b6:65:48:
5b:b5:03:91:dd:45:6c:31:32:cc:4d:bc:ed:5f:5e:
ff:24:70:56:ca:28:70:cc:89:a1:f6:62:ab:d4:95:
cb:f1:bf:6a:3e:3c:17:38:d0:41:a5:6b:e7:be:76:
d0:d9:10:29:fb:31:d5:44:ff:c5:65:ee:a2:dc:f7:
76:a0:f9:e8:a2:29:2b:8f:13:84:82:c9:14:c0:f9:
46:df:56:1b:a4:29:78:0f:fc:62:e6:ce:0f:1b:e0:
43:c6:0a:83:68:6b:89:0a:d3:e0:89:fc:84:48:77:
5e:aa:dc:ad:6b:69:a4:ea:e8:c4:8d:19:96:65:75:
f7:78:75:e2:37:21:55:c3:c7:b4:37:e7:fa:7e:00:
8a:aa:3e:68:1f:2f:b6:62:43:a5:3f:80:0b:97:24:
9b:4e:31:a0:b9:72:ab:3c:70:c3:5b:d1:00:ae:4e:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E4:2D:26:4C:DA:94:F6:64:50:07:95:4B:AB:19:E1:1E:36:8D:F3
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/k-QtJkzalPZkUAeVS6sZ4R42jfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.124.0-194.56.126.255
Signature Algorithm: sha256WithRSAEncryption
0f:cf:c5:0d:83:75:4e:2b:d6:fd:0c:f5:e8:c8:7d:3f:01:b7:
9a:0a:83:2b:f5:dc:62:77:7c:66:6c:52:ad:97:32:f5:04:70:
0c:68:1f:5e:a6:48:b9:7a:1b:e8:0b:22:6e:40:16:4f:91:5b:
b0:e8:41:5e:1c:0f:dd:35:dc:a5:1f:f3:72:14:67:fb:6a:db:
39:fd:28:54:a5:48:40:96:61:d8:33:68:f3:5b:7e:3c:ee:c2:
f5:10:d9:58:d4:a9:e0:c9:50:26:7e:aa:b3:0f:df:04:a2:1a:
7f:70:6d:57:4b:da:d4:37:45:e8:fb:d3:66:ba:47:33:62:0f:
ac:dd:58:8c:5c:9b:cc:a4:42:c1:34:92:58:80:20:3a:5e:1b:
0f:a8:4e:de:a7:31:34:50:6f:05:51:73:b8:30:dd:f8:ee:3e:
c3:71:f9:be:62:49:07:9c:7b:a2:0c:f1:c6:87:34:9b:0a:87:
65:8b:96:38:57:6c:d4:3d:04:f1:97:5d:94:1e:41:1b:9b:dd:
35:83:5d:3b:b0:a5:2b:06:8e:b6:16:a1:82:c5:21:7a:15:dc:
a1:3b:f3:4a:85:b3:f7:28:71:a5:86:d0:3e:49:15:a2:e4:a4:
9e:56:cd:36:75:ff:1d:32:27:b3:b9:1c:04:65:28:d3:43:75:
78:21:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:05 2024 by rpki-client on console-ams.rpki-client.org