Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/qtPiws_4tEPYVzJiRUFuFHDGMrk.roa
File: qtPiws_4tEPYVzJiRUFuFHDGMrk.roa (raw, json)
Hash identifier: 5TDkRScEdzgxAFS3OmlOe+tT++BjM6/PgIiDH/OaNNk=
Subject key identifier: AA:D3:E2:C2:CF:F8:B4:43:D8:57:32:62:45:41:6E:14:70:C6:32:B9
Certificate issuer: /CN=06c92df2c9faa2915fc5feb5a4270183419faef2
Certificate serial: 01856D78802DB0E949D3FFB2991CE1B9590C
Authority key identifier: 06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/qtPiws_4tEPYVzJiRUFuFHDGMrk.roa
Signing time: Sun 01 Jan 2023 13:14:51 +0000
ROA not before: Sun 01 Jan 2023 13:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213044
IP address blocks: 45.154.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:80:2d:b0:e9:49:d3:ff:b2:99:1c:e1:b9:59:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c92df2c9faa2915fc5feb5a4270183419faef2
Validity
Not Before: Jan 1 13:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aad3e2c2cff8b443d857326245416e1470c632b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:ae:7f:33:bd:9a:f1:e3:55:80:50:b9:82:
c7:b4:c4:3f:0e:23:51:cb:83:85:83:f5:fd:0e:2e:
96:b3:19:78:04:2f:01:a9:99:8f:c0:77:36:f1:0e:
85:ec:f4:49:7c:81:f3:25:bd:4d:41:b3:92:0d:3b:
5c:e2:d3:19:2f:a7:cb:eb:d1:37:e1:48:32:5e:18:
88:ab:1c:ca:6f:2c:33:e2:d5:32:43:56:1f:8e:44:
73:37:9c:2a:16:bc:14:ab:a8:b6:59:8a:92:82:b8:
1d:5d:7a:97:87:dd:eb:99:fc:c2:0c:fc:78:3e:80:
d0:8f:86:55:98:8d:9e:37:ec:12:2e:79:64:8e:3d:
2d:50:c0:1d:59:fb:4e:e6:4d:74:2c:70:56:f2:8b:
39:05:70:28:ee:76:45:89:37:12:a9:69:9f:e8:71:
3c:42:62:9c:c6:c1:05:2c:6b:9a:98:83:b9:36:9d:
46:7a:3e:ee:51:db:aa:e3:0d:46:27:cf:ac:1e:e0:
49:19:95:08:98:2f:03:80:3f:a1:e5:9c:24:6f:3a:
bc:99:7f:0e:49:37:40:df:c2:97:7f:f7:ca:98:b1:
8b:0b:67:56:92:82:4d:53:e7:b7:ca:5d:5e:00:09:
df:fe:3d:63:70:97:de:9a:7a:2c:41:48:7a:d2:a7:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D3:E2:C2:CF:F8:B4:43:D8:57:32:62:45:41:6E:14:70:C6:32:B9
X509v3 Authority Key Identifier:
keyid:06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/qtPiws_4tEPYVzJiRUFuFHDGMrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.217.0/24
Signature Algorithm: sha256WithRSAEncryption
46:48:99:fa:bd:14:d7:cd:4b:ee:ac:a9:7e:26:d5:49:0f:22:
56:ac:a3:8b:f5:a4:1f:9d:8e:96:a2:f9:57:8b:0d:69:d3:75:
e1:e4:3e:c7:a0:eb:62:b2:60:b3:ea:11:28:85:13:24:39:1c:
54:1c:cb:d7:1a:b4:e1:09:ae:4e:6e:42:dc:58:26:17:a1:fa:
3e:74:32:ef:71:a7:25:d5:51:58:dc:84:51:54:9b:0b:37:05:
3b:cd:5a:9b:dc:87:92:ed:77:a7:48:38:a7:17:ad:a1:a4:e2:
68:80:ea:c5:03:38:fe:a0:11:8e:38:9c:3e:04:73:f2:bf:c0:
26:d0:95:64:6a:a1:30:a0:98:81:18:56:f8:5a:0e:ef:da:25:
5d:88:fd:65:71:e5:60:16:76:cc:3d:c4:90:d2:0d:e5:91:3d:
03:55:76:f0:ef:4f:7a:c0:27:1c:8b:60:1d:b4:a1:43:17:c4:
4b:11:bd:79:c6:7d:33:61:37:42:d6:78:2c:8e:6f:5e:3c:c4:
14:28:4d:1c:56:d1:dc:2b:e8:c8:6e:3c:30:aa:b2:ef:4b:51:
cf:b4:d9:db:e7:e9:f1:74:cf:24:ac:7e:04:44:9d:86:3c:79:
3b:54:23:88:df:b7:42:70:a1:a8:70:4e:39:a1:69:a7:25:22:
7d:b5:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:52 2024 by rpki-client on console-fra.rpki-client.org