Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/qeyqTo-iPifEswdoFGR8_JiHIGU.roa
File: qeyqTo-iPifEswdoFGR8_JiHIGU.roa (raw, json)
Hash identifier: hXoohsJlATHPJY6H6GiHYqYTIKf7YYcj4OkKGohcsC4=
Subject key identifier: A9:EC:AA:4E:8F:A2:3E:27:C4:B3:07:68:14:64:7C:FC:98:87:20:65
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01867311E1F66563FF3F9E99E167475D0ED6
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/qeyqTo-iPifEswdoFGR8_JiHIGU.roa
Signing time: Tue 21 Feb 2023 08:23:17 +0000
ROA not before: Tue 21 Feb 2023 08:23:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.132.187.0/24 maxlen: 24
185.212.204.0/23 maxlen: 24
185.212.206.0/23 maxlen: 24
93.177.114.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:11:e1:f6:65:63:ff:3f:9e:99:e1:67:47:5d:0e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Feb 21 08:23:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9ecaa4e8fa23e27c4b3076814647cfc98872065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b1:63:5e:01:5b:49:00:68:12:59:71:b0:a3:
13:32:cb:6d:22:e4:9d:af:95:66:3b:e9:33:ef:30:
df:79:b8:5d:e8:76:3c:3c:f7:07:51:59:4a:5e:aa:
af:3c:5d:c4:16:28:65:d9:e6:94:55:bf:8e:7f:e6:
44:dd:11:04:52:00:7c:27:80:b1:16:c7:c3:69:70:
9c:11:cc:f2:53:e2:62:ca:50:74:bb:3c:cf:cd:34:
9c:22:73:32:12:20:a8:83:eb:5c:42:c5:8f:60:d4:
b3:eb:82:b4:e6:4b:6d:88:ab:99:e5:92:99:10:2a:
36:c2:43:85:83:ca:e3:03:c8:d9:12:09:ba:26:53:
67:f2:16:1c:94:f9:39:84:06:af:d1:45:03:51:f7:
77:99:4e:76:12:e1:df:0b:c5:fb:ac:07:36:90:b5:
26:9c:b4:1f:79:c6:46:30:1c:bc:b1:33:d9:91:fe:
67:9b:2c:a2:37:70:84:d6:df:08:d0:bf:d3:32:5e:
d1:2f:59:2b:e3:8f:db:17:e1:54:2c:45:ad:4c:d3:
e8:8e:0f:5d:a2:d9:cd:e5:4d:30:c3:1e:92:64:1c:
43:29:27:9e:e7:a9:c3:08:a5:7f:ca:14:b9:61:30:
46:ff:6e:e8:ba:1b:26:c2:ed:d9:2c:05:2b:97:c6:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EC:AA:4E:8F:A2:3E:27:C4:B3:07:68:14:64:7C:FC:98:87:20:65
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/qeyqTo-iPifEswdoFGR8_JiHIGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
185.132.187.0/24
185.212.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:c0:ec:2e:8a:1e:27:3a:87:8b:e2:08:90:ae:7c:e9:a7:07:
73:f3:30:7b:09:cf:f5:1e:24:ba:8d:e1:ed:f4:50:9e:7c:d3:
fc:1d:9c:c0:1c:55:cb:16:38:16:63:63:14:7d:eb:a5:18:d8:
c5:7b:98:39:b5:5c:6f:f1:e1:80:5e:cb:4c:f1:a7:28:4d:fe:
d6:cd:9e:7a:52:cd:68:e1:bf:79:69:10:44:52:42:3b:1d:5b:
ab:f6:b4:de:c5:33:ad:3d:a5:f1:6e:57:d9:13:55:16:b5:7f:
56:03:fe:bc:4d:01:cc:08:fd:0f:40:31:1a:a6:86:67:38:30:
2a:a5:6f:f8:b4:27:7a:e3:38:ab:c1:21:a7:9d:45:b8:8b:af:
ff:f2:2c:3b:4e:83:90:41:8e:fb:b1:80:5c:82:43:1e:61:46:
d2:04:9b:93:d4:25:bc:0b:0f:26:11:9c:9a:eb:20:b8:ab:5d:
ac:32:6b:b1:6e:dc:fa:9a:f5:f5:ac:c1:06:fb:5d:ec:93:aa:
1c:0e:4c:68:7d:c1:f9:cc:89:39:b1:9e:d9:94:fd:a5:95:f6:
55:3e:b8:d5:69:df:5d:2e:f3:66:61:9e:5a:7c:ca:55:58:31:
7a:b5:09:d2:9a:d1:3f:57:24:47:2c:58:cf:63:23:ca:3e:bd:
16:c2:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org