Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/q19Xgo12inLDuqs9ZE_n2LtncrY.roa
File: q19Xgo12inLDuqs9ZE_n2LtncrY.roa (raw, json)
Hash identifier: wfj+JAuwcunnyUfUwghTLunJPeB8xQVzGZa+sypBVIg=
Subject key identifier: AB:5F:57:82:8D:76:8A:72:C3:BA:AB:3D:64:4F:E7:D8:BB:67:72:B6
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018A40E7731303202A0B6B71CF7D5EC830F2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/q19Xgo12inLDuqs9ZE_n2LtncrY.roa
Signing time: Tue 29 Aug 2023 10:47:04 +0000
ROA not before: Tue 29 Aug 2023 10:47:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 82.97.240.0/20 maxlen: 24
178.236.36.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:e7:73:13:03:20:2a:0b:6b:71:cf:7d:5e:c8:30:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 29 10:47:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab5f57828d768a72c3baab3d644fe7d8bb6772b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:96:98:c8:bd:8c:5b:cc:38:98:8a:ee:76:
b2:74:ee:4e:45:96:c1:c7:dd:98:a9:fc:9e:17:12:
78:2c:ed:6b:5f:4e:ae:f3:30:cb:0d:93:e4:e9:19:
67:60:80:6f:54:ae:fb:c2:65:d8:18:9f:31:d5:e4:
16:2a:55:c9:ed:56:ca:b6:39:0f:2b:1f:09:ab:5f:
f5:f3:20:b4:09:b6:d9:aa:30:b9:e1:4e:2d:83:2c:
e5:d7:c6:dd:88:ff:35:e3:7e:59:e6:fb:34:56:30:
33:0b:e9:1d:59:89:bd:67:ae:8a:68:6e:76:81:e9:
cc:2a:40:0b:e0:4f:9c:e8:5b:fe:87:50:45:05:1d:
07:e9:28:37:81:e1:10:27:c7:8b:48:34:27:9e:e6:
4e:e3:18:58:21:a7:1a:81:c8:ea:9d:4d:2c:f3:a9:
ed:83:1e:05:3e:7b:d2:83:50:00:1f:d1:c6:72:a6:
99:6f:42:c6:69:3d:a6:61:4f:3f:43:6e:f6:e5:9b:
1e:62:25:f5:bd:ac:5a:e0:91:44:ae:2a:b7:1b:cf:
e7:d9:e9:65:66:8a:79:ba:13:5f:4e:45:a9:be:ef:
66:33:cd:7a:46:5e:9f:72:84:bf:d7:e2:4f:31:2c:
60:43:c8:f9:01:a2:9b:c5:e9:6d:72:86:ca:5b:3e:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:57:82:8D:76:8A:72:C3:BA:AB:3D:64:4F:E7:D8:BB:67:72:B6
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/q19Xgo12inLDuqs9ZE_n2LtncrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.240.0/20
178.236.36.0/22
Signature Algorithm: sha256WithRSAEncryption
96:d0:ac:31:5f:c0:67:c1:0f:45:f7:d2:4c:3f:4f:7e:9e:31:
07:1d:95:bf:5d:d4:ef:5e:0d:16:88:10:9c:19:bb:2d:b3:22:
a4:38:64:dc:31:cf:77:fb:46:97:67:9e:3d:18:0f:11:e3:b6:
78:8c:5f:b8:d3:a6:b0:9d:35:8a:6e:96:3f:b2:cf:06:e0:21:
fe:52:de:04:13:c8:d0:35:df:4c:9a:24:31:2d:b5:7c:5e:64:
55:26:3a:60:dd:e3:ca:de:65:4c:3f:09:c6:6f:fb:f6:4d:af:
12:fa:00:c2:fe:eb:a7:95:73:82:7e:41:ca:4c:e7:99:38:f6:
27:5e:31:f4:18:10:ea:34:95:ad:81:8e:31:3b:58:9a:c0:74:
3a:3c:29:c9:cf:6e:df:e5:7d:62:fa:d1:65:a7:bc:ed:f2:f4:
92:26:18:6a:43:40:b8:0c:04:cc:fe:af:43:8c:54:99:b9:a8:
ed:86:75:0a:6e:3e:d8:8a:49:e8:8b:d0:5c:a3:00:72:94:f3:
aa:74:48:f9:e0:97:6c:57:4a:2e:35:c5:ed:a8:fe:3b:b3:a5:
ae:bb:ec:4f:24:73:8e:5f:95:83:75:3c:38:27:e6:30:60:c7:
0c:37:c2:d9:36:79:4f:31:ae:26:30:e1:71:c7:10:c0:14:d8:
d8:3a:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:09:07 2023 by rpki-client on console-ams.rpki-client.org