Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/qwfIiyCnrn7P0YtUUs-k6Ffyi6E.roa
File: qwfIiyCnrn7P0YtUUs-k6Ffyi6E.roa (raw, json)
Hash identifier: YzPq7PtqPTkwgKpBRonWUrKVm4tiXZ/1Z677ORIn8Vs=
Subject key identifier: AB:07:C8:8B:20:A7:AE:7E:CF:D1:8B:54:52:CF:A4:E8:57:F2:8B:A1
Certificate issuer: /CN=03452c9dbfc9e4193c7e55e0d2016568d9465285
Certificate serial: 0185723A3B6C4A02E6D928D194EFF7B22C1E
Authority key identifier: 03:45:2C:9D:BF:C9:E4:19:3C:7E:55:E0:D2:01:65:68:D9:46:52:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0Usnb_J5Bk8flXg0gFlaNlGUoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/qwfIiyCnrn7P0YtUUs-k6Ffyi6E.roa
Signing time: Mon 02 Jan 2023 11:24:57 +0000
ROA not before: Mon 02 Jan 2023 11:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 213.232.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:3b:6c:4a:02:e6:d9:28:d1:94:ef:f7:b2:2c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03452c9dbfc9e4193c7e55e0d2016568d9465285
Validity
Not Before: Jan 2 11:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab07c88b20a7ae7ecfd18b5452cfa4e857f28ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:4d:88:28:46:a7:23:1f:5c:5d:7c:32:95:
53:fa:ab:4a:b1:91:d6:b9:28:eb:6d:85:ea:4a:7f:
fb:95:a6:f8:53:b5:90:9a:07:2d:16:4f:a1:54:c6:
60:20:e2:49:2d:28:c2:eb:22:b6:53:57:7e:4d:f1:
ce:2b:cf:c7:90:12:c1:d8:6c:44:3a:67:ec:10:63:
0f:e4:e0:c5:3c:fb:ac:9b:d1:59:fe:09:02:60:7c:
1d:72:5c:91:65:48:20:63:d8:33:0f:f5:5b:1a:9a:
3b:23:b8:21:0e:ba:d3:61:ce:99:e1:fb:c8:a9:11:
42:0f:eb:a5:1d:84:c2:d8:92:f8:8b:e7:c6:a9:e4:
be:08:86:29:d9:71:21:b3:16:1e:27:0d:5b:13:f9:
c1:3a:94:94:25:01:96:9a:88:0c:4f:f2:0d:19:a7:
46:1d:da:14:ca:25:e8:8b:ee:ef:aa:ae:b6:1f:f6:
8f:b5:1d:35:a6:32:1d:8d:a5:53:16:c4:21:c8:4d:
e2:d6:7e:e1:c1:93:f7:6e:a9:3b:90:49:57:8e:63:
f7:59:2e:1b:f7:d5:81:4c:ce:28:41:aa:df:c8:cb:
54:88:1e:77:83:1a:3c:a0:55:8e:62:5a:10:23:bc:
70:2e:4d:f3:16:ef:77:2c:a2:13:06:81:01:d8:b8:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:C8:8B:20:A7:AE:7E:CF:D1:8B:54:52:CF:A4:E8:57:F2:8B:A1
X509v3 Authority Key Identifier:
keyid:03:45:2C:9D:BF:C9:E4:19:3C:7E:55:E0:D2:01:65:68:D9:46:52:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0Usnb_J5Bk8flXg0gFlaNlGUoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/qwfIiyCnrn7P0YtUUs-k6Ffyi6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/A0Usnb_J5Bk8flXg0gFlaNlGUoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:95:b5:97:5e:86:c1:7a:ac:5f:89:99:65:54:8b:d1:30:a2:
59:62:9b:8c:e1:ca:40:b7:78:bf:86:33:50:bc:d1:4f:fd:4b:
7f:35:22:dd:5f:3b:dd:5f:20:ac:ed:10:96:01:04:56:84:e0:
a7:a4:db:e1:a8:16:c6:88:1d:b2:ae:7d:47:83:1f:fa:c9:1e:
fe:39:e0:2a:b9:86:70:56:d2:1c:e1:c5:83:9a:db:7f:8d:cb:
e4:8c:8d:d9:98:33:db:d9:58:ab:24:64:26:9b:f2:ce:18:58:
5c:08:7e:a4:c2:e6:bd:bd:6a:86:b9:cd:01:9e:32:2a:ef:3d:
09:2a:ab:39:16:c6:4f:2b:04:7d:d6:97:1e:6d:95:31:cd:a9:
f9:c4:70:2d:ab:ef:a4:f7:f1:51:94:07:44:d9:d9:ce:68:df:
77:c4:1d:95:39:f1:5c:40:73:d7:e2:74:51:e9:95:bd:56:5d:
e0:05:63:fc:c1:08:ee:61:52:b1:ff:62:a2:bc:c4:65:53:d4:
21:b8:57:a6:8d:46:ca:11:e9:17:e6:98:7a:c6:39:72:1e:79:
c6:63:37:45:8c:cc:3d:68:84:60:79:7e:2d:95:71:b7:17:69:
ba:fd:02:a6:23:fc:68:70:a9:6b:81:1b:55:c9:63:1d:ae:f8:
3a:ac:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:10 2023 by rpki-client on console-fra.rpki-client.org