Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/qVzHfIbr3ZXSpbIEC0N3o-7Et_M.roa
File: qVzHfIbr3ZXSpbIEC0N3o-7Et_M.roa (raw, json)
Hash identifier: zUZDbsoHNEY15ipjHY9H6tgKKfMk+Vs9dt2lWB5KyQI=
Subject key identifier: A9:5C:C7:7C:86:EB:DD:95:D2:A5:B2:04:0B:43:77:A3:EE:C4:B7:F3
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 018C69648BE5C6F19A8E21BD675E82998662
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/qVzHfIbr3ZXSpbIEC0N3o-7Et_M.roa
Signing time: Thu 14 Dec 2023 17:34:06 +0000
ROA not before: Thu 14 Dec 2023 17:34:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.225.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:64:8b:e5:c6:f1:9a:8e:21:bd:67:5e:82:99:86:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Dec 14 17:34:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a95cc77c86ebdd95d2a5b2040b4377a3eec4b7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:3e:f5:c7:33:24:81:ca:15:96:36:64:2b:
f2:e3:cf:df:33:7d:80:78:4c:3d:e2:70:42:6f:06:
30:e7:83:e8:53:dd:1c:9c:aa:80:44:5b:21:8b:4f:
e7:0d:61:aa:e1:49:17:2f:60:f9:45:89:77:2a:e0:
99:b8:8c:16:26:a1:ae:4c:f5:9c:22:23:65:58:b5:
31:0e:ce:ad:14:e0:8e:0c:9f:2e:16:30:5e:b4:77:
ac:f2:5e:26:37:34:d5:fc:e1:ae:bb:3a:e2:99:2d:
9e:78:10:56:cb:26:96:25:ec:ce:02:1f:df:e8:1a:
84:36:ce:61:c3:1c:08:78:b8:20:9b:d3:ed:76:0b:
6c:47:58:e1:62:f8:e2:21:2c:eb:f6:e6:19:98:83:
6e:d3:53:51:f0:73:95:a7:e9:78:fe:e2:5e:7b:cc:
a9:66:e9:e7:76:02:20:24:46:da:f7:d4:6b:c1:86:
bc:10:85:d5:eb:34:44:5b:4e:d4:1f:35:dc:14:76:
a9:c5:b9:43:eb:8a:4e:2b:3b:59:bf:90:ca:c2:c4:
0e:d2:8e:8f:4e:01:42:45:a9:34:1a:fc:ad:1c:43:
fc:e4:6d:50:5a:d8:b9:8e:80:03:65:0f:fe:fe:39:
7e:e9:e5:50:67:6a:20:d3:72:5a:75:c7:96:8d:1d:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5C:C7:7C:86:EB:DD:95:D2:A5:B2:04:0B:43:77:A3:EE:C4:B7:F3
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/qVzHfIbr3ZXSpbIEC0N3o-7Et_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:23:e1:84:33:bc:6c:71:28:6c:16:76:ba:ec:ac:d9:23:97:
f8:26:e7:7a:f1:2a:48:96:45:30:18:e2:d9:9a:f4:10:75:e7:
6c:de:4b:5b:c8:61:6f:6d:46:ae:9a:65:d5:22:01:65:42:2a:
9f:f4:8a:ec:7d:bb:2f:21:2c:a3:28:e6:e0:2e:23:ea:e2:67:
86:f6:d8:34:64:66:02:11:8a:fd:73:ca:06:ac:d4:e9:d3:ff:
b2:f7:c0:b1:e9:a3:e9:3e:e9:b6:49:ba:68:40:d2:10:17:9c:
39:99:bd:79:e7:2e:ce:31:c7:d5:8d:3c:18:d3:d5:2a:9c:2f:
60:64:06:69:80:2a:cb:a4:c5:cd:c5:c8:00:cd:89:b1:b2:81:
2d:72:f1:f3:41:81:2f:2a:d2:78:ee:7c:94:31:50:ca:76:91:
8b:ba:59:29:a8:05:75:85:02:c3:f1:e8:ff:95:18:bf:2a:e2:
81:a1:1d:1c:4d:d8:df:ef:ca:95:e3:51:93:c2:98:78:2a:8c:
57:c0:0b:18:66:79:f7:23:3c:95:ac:ae:9a:e3:13:e3:84:3b:
c8:55:60:f0:0c:77:96:5c:15:c1:9b:5c:9d:ca:48:c1:f5:be:
96:ab:f9:29:a7:c7:01:e2:5c:93:2e:b6:86:a7:71:36:35:47:
f9:15:05:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:01 2024 by rpki-client on console-fra.rpki-client.org