Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/QYNDQeSxrPRYKRdbIGQ_ATEOfN4.roa
File: QYNDQeSxrPRYKRdbIGQ_ATEOfN4.roa (raw, json)
Hash identifier: CFCDNd0pZPI9m5rhl6vJPH9pgNoeX/v6awoXelVRnoQ=
Subject key identifier: 41:83:43:41:E4:B1:AC:F4:58:29:17:5B:20:64:3F:01:31:0E:7C:DE
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01856BDC9F0680EF0FF0042EC4AC9626D331
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/QYNDQeSxrPRYKRdbIGQ_ATEOfN4.roa
Signing time: Sun 01 Jan 2023 05:44:58 +0000
ROA not before: Sun 01 Jan 2023 05:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:9f:06:80:ef:0f:f0:04:2e:c4:ac:96:26:d3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 05:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41834341e4b1acf45829175b20643f01310e7cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:ab:77:b0:0e:93:d4:5b:51:95:68:36:62:
21:9c:31:b3:12:ec:b6:d2:14:4a:41:ed:73:72:ac:
ae:61:20:e8:28:0d:55:27:b7:9d:75:d7:0d:da:c9:
fd:7b:d5:1a:e1:83:4c:1a:cf:ef:a7:a7:13:53:b9:
f8:72:1e:2e:d0:12:a8:44:6c:23:c5:39:f1:53:81:
67:76:f0:b3:76:f6:e1:5c:96:b3:1a:43:2c:26:7a:
b5:6b:72:99:59:c3:23:2e:c3:8d:31:26:ad:60:a6:
38:8c:b9:3d:31:cb:9f:49:bb:8d:42:0f:41:90:b9:
da:bb:62:14:db:ea:94:9a:ed:0c:5b:92:72:a9:d7:
ea:41:90:c2:a6:29:a9:91:97:4e:32:8b:54:c9:95:
7a:6c:60:df:c3:09:83:30:4f:97:ed:6b:78:35:46:
32:be:79:66:36:ff:24:17:76:31:38:76:54:52:77:
7d:a7:fe:b5:d0:81:b0:bc:c3:84:70:09:88:18:d9:
47:fe:de:cf:c2:84:60:a9:6a:37:e7:8a:61:7f:49:
cc:28:e0:b0:d6:33:84:a1:a2:84:0e:b6:8e:67:c4:
cf:f0:28:e8:a7:53:54:52:34:01:63:04:9e:7b:81:
5d:f1:c3:69:50:5f:02:2c:a0:04:d8:76:7e:09:15:
66:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:83:43:41:E4:B1:AC:F4:58:29:17:5B:20:64:3F:01:31:0E:7C:DE
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/QYNDQeSxrPRYKRdbIGQ_ATEOfN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:32:23:37:c2:cb:61:10:83:ce:8e:14:a0:e0:42:48:40:d7:
e2:6e:ed:18:8b:26:18:ea:3e:4f:e6:6f:a3:eb:b2:ff:63:9a:
c4:72:69:1c:df:3e:d3:79:04:3a:c9:74:b8:7a:7f:50:6c:8f:
cc:ba:7c:cf:d3:fb:e1:7b:7b:8a:3a:2c:62:41:6f:6b:5c:27:
dc:a1:6b:bc:2d:70:9c:60:d3:bb:08:71:7d:60:7d:35:d8:e7:
72:ef:60:54:21:c4:00:17:f1:c2:fe:9c:33:44:5e:9e:7a:dc:
f8:9c:0c:4d:14:75:01:f7:f7:59:f1:be:a9:63:a0:43:f0:92:
9f:c5:d2:b5:53:6c:19:33:53:08:8f:9a:4d:b4:69:c0:0a:f7:
b7:96:4c:98:91:52:2a:43:fb:ab:97:7c:ff:6c:1b:c0:3f:49:
41:f9:7b:09:79:2f:83:96:51:15:a1:3d:da:a7:c0:4d:80:d2:
d9:14:1c:db:11:40:fd:df:d1:44:83:ce:0b:ac:50:58:b2:f4:
1f:da:1d:62:1d:b8:3d:2c:49:b6:a4:5b:40:fc:be:69:38:a1:
27:d9:77:af:b8:71:e3:51:b6:81:47:47:c1:93:f8:f2:12:11:
72:1d:d9:2d:4a:18:1a:54:72:1d:4c:fa:42:f6:f9:cd:fb:a3:
12:dc:b0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org