Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/QitpRfGC5k-w_70zbOnbgbXvYiU.roa
File: QitpRfGC5k-w_70zbOnbgbXvYiU.roa (raw, json)
Hash identifier: Gvj2N6mlauUIAIxaxL5gK5tMBJ/LdYMDXQQnW4bcaV4=
Subject key identifier: 42:2B:69:45:F1:82:E6:4F:B0:FF:BD:33:6C:E9:DB:81:B5:EF:62:25
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 01880FFDCAFBFCAF2B5463B20C7B7B0DE9F0
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/QitpRfGC5k-w_70zbOnbgbXvYiU.roa
Signing time: Fri 12 May 2023 12:44:30 +0000
ROA not before: Fri 12 May 2023 12:44:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200456
IP address blocks: 31.12.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:fd:ca:fb:fc:af:2b:54:63:b2:0c:7b:7b:0d:e9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: May 12 12:44:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=422b6945f182e64fb0ffbd336ce9db81b5ef6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:d0:18:e5:c9:10:45:64:5b:74:75:fc:32:
b3:54:d1:33:19:88:3e:6f:2a:03:f7:f2:95:90:78:
a6:0f:48:ae:a4:c5:31:55:63:bd:7a:67:d0:0d:70:
0b:b0:20:2f:8c:fe:75:38:aa:2a:e1:9b:39:b7:e9:
c0:60:61:28:ca:4c:38:07:ec:8f:b5:d3:81:a8:77:
54:3e:62:c5:25:23:30:a4:2e:0a:d8:09:17:7c:6c:
77:56:9b:fc:b0:cd:f5:43:e8:fb:86:17:58:7b:8b:
66:c6:ef:3a:30:b0:67:7a:49:f8:c6:27:9f:e9:91:
13:2d:c4:35:6c:3e:24:ce:7d:6c:44:d7:29:7c:6f:
fd:f9:a9:86:fd:7c:05:c1:fa:25:f3:3d:32:98:5c:
83:95:76:08:dd:31:c7:e0:6f:47:7f:e3:d0:e8:a5:
bb:25:27:80:ad:71:2f:0d:30:e5:85:a0:45:42:a9:
7e:98:7b:18:8b:75:f7:d5:d2:2b:aa:22:97:db:33:
e6:a3:ac:75:5b:64:2e:24:59:3e:3e:8f:c5:d1:67:
b0:1a:a0:e8:9c:e2:99:21:b1:40:1f:79:15:8d:57:
35:ee:94:c1:89:6c:68:1c:af:2f:0e:23:ba:74:d6:
86:c5:b3:e7:5a:27:11:20:bf:b5:27:0c:0b:a7:6a:
70:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2B:69:45:F1:82:E6:4F:B0:FF:BD:33:6C:E9:DB:81:B5:EF:62:25
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/QitpRfGC5k-w_70zbOnbgbXvYiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:af:b5:0c:fa:78:f0:2c:5c:d7:af:a8:25:4e:dc:4f:df:b6:
7d:6d:bc:ff:e1:66:6f:d0:98:94:55:3f:d8:fe:ef:a9:32:3b:
c2:26:02:31:49:4d:0a:44:99:e3:2d:35:aa:5b:70:71:21:bc:
85:67:a6:53:08:a6:47:d1:43:35:88:ea:6a:61:ec:5e:3a:97:
1d:03:4c:3e:e5:43:38:ba:0f:78:a9:31:8b:da:6d:9d:1c:d2:
8c:d2:74:1f:61:07:83:2b:d7:e5:b9:95:10:48:0e:f1:c6:57:
92:5f:bf:65:f0:28:e7:cd:24:ae:19:4a:1f:50:62:57:68:ff:
98:5d:3b:a7:f6:19:b0:1c:30:83:1f:56:44:49:77:13:87:97:
56:86:3b:7e:62:15:01:a6:5b:fd:64:05:78:51:5b:9b:ee:a4:
d4:b1:12:c1:d1:80:95:bb:4c:97:4a:15:95:67:6e:ec:92:75:
94:54:0d:78:a9:5e:4b:fd:1c:f2:29:ee:bb:51:b4:19:16:93:
a5:53:77:e7:20:89:f3:d8:0e:8a:df:e6:13:94:f3:bb:5d:d9:
65:41:bc:69:57:db:e0:81:52:50:ba:d4:fb:86:b3:3d:c9:a8:
45:d2:43:7f:30:10:ad:35:51:44:2b:56:1e:d2:35:2b:65:81:
73:64:7c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:19 2024 by rpki-client on console-ams.rpki-client.org