Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qoNc9If2rGsMFlsZGu3rY9c81bA.roa
File: qoNc9If2rGsMFlsZGu3rY9c81bA.roa (raw, json)
Hash identifier: PDeHxqaUvdYwHbBdpPWDKHIshQSBkLWPTnB8VoZSGZ0=
Subject key identifier: AA:83:5C:F4:87:F6:AC:6B:0C:16:5B:19:1A:ED:EB:63:D7:3C:D5:B0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018AAD894A7C0BA21EC99230D84BBF3E13B8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qoNc9If2rGsMFlsZGu3rY9c81bA.roa
Signing time: Tue 19 Sep 2023 13:02:50 +0000
ROA not before: Tue 19 Sep 2023 13:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15428
IP address blocks: 31.148.112.0/21 maxlen: 24
146.158.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:89:4a:7c:0b:a2:1e:c9:92:30:d8:4b:bf:3e:13:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 19 13:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa835cf487f6ac6b0c165b191aedeb63d73cd5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:be:ca:41:2a:c4:25:8b:6b:8e:18:e1:c2:ed:
36:d6:7f:75:cd:bc:da:f4:ce:6b:c8:ef:b9:5e:8d:
56:3c:34:b4:ab:cb:8c:44:b6:bb:90:69:fc:cb:3f:
8c:e3:82:56:95:5d:01:fa:dc:b4:ee:dc:18:81:89:
81:c0:12:5f:a0:ef:90:9b:77:fb:d7:20:d0:58:03:
6a:cc:35:b0:91:48:dd:d9:dc:ae:52:d8:a8:08:4f:
45:b1:dc:ce:47:89:58:44:86:74:1d:76:45:6b:af:
cb:18:eb:42:98:48:33:f2:a9:83:83:38:4e:86:8f:
7a:af:21:60:50:9e:36:4a:dd:52:a3:c5:b0:97:42:
fd:60:de:5a:81:6a:fa:e9:2b:45:5a:17:be:d9:9b:
b2:32:08:25:94:15:df:c8:8e:aa:ea:69:e3:03:8c:
24:79:a8:6c:7b:88:d4:c3:67:e7:62:8f:57:43:8a:
9e:2d:34:23:f1:c9:32:a1:d8:aa:31:a1:8a:58:ce:
6b:5f:43:e4:ae:1f:0e:af:09:86:bd:61:23:69:ea:
00:9a:2a:56:93:87:9d:b0:4c:df:d5:bf:cb:56:c4:
ae:bf:a2:f7:e1:3c:0b:c5:bf:e5:97:69:84:f2:22:
06:3c:66:ad:4f:b7:eb:fa:c6:78:bc:58:51:57:25:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:83:5C:F4:87:F6:AC:6B:0C:16:5B:19:1A:ED:EB:63:D7:3C:D5:B0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qoNc9If2rGsMFlsZGu3rY9c81bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.112.0/21
146.158.95.0/24
Signature Algorithm: sha256WithRSAEncryption
34:43:ac:09:69:b3:94:7b:19:32:bd:c9:a2:cc:3a:69:96:56:
69:a9:51:72:2f:92:ff:55:a0:fd:1a:ec:70:67:3e:6c:10:2d:
0a:23:01:41:f9:ec:2d:f8:f3:33:33:43:b6:a7:51:ce:1c:c9:
68:0d:d6:b8:81:1c:7c:68:ab:f0:8d:a4:b9:ef:44:b3:c4:26:
f1:ca:c2:4c:45:57:83:18:2a:ff:f9:16:c9:60:14:f9:96:8e:
71:b0:d1:90:7b:d8:65:73:10:7e:38:45:18:a3:f2:c3:20:61:
c3:be:40:0b:7e:8f:61:ea:86:c9:ce:f3:d0:be:ac:30:31:89:
14:f8:b2:9b:42:9e:25:bb:83:30:66:88:f4:16:fa:af:91:9c:
1a:02:1c:f4:22:a2:31:f8:73:71:07:c4:2c:69:e7:d0:8c:4c:
22:1c:b7:4d:5c:cf:79:bb:b4:a2:62:67:74:5f:2c:d8:e6:88:
98:4e:36:4d:db:60:02:64:f6:9b:db:84:55:4f:3a:e9:37:6f:
19:44:87:38:6a:3e:6e:00:ff:e9:58:04:f6:e0:94:ee:38:14:
f5:28:16:b7:6a:95:0e:a4:a3:d3:32:63:6f:7a:a3:db:46:fb:
68:20:1d:8c:07:f9:90:e3:ef:9c:f0:87:55:75:1b:45:d8:d4:
5f:0a:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:32 2024 by rpki-client on console-fra.rpki-client.org