Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/QvwXeVjFXBk7i0iy-pGBFbxBcvE.roa
File: QvwXeVjFXBk7i0iy-pGBFbxBcvE.roa (raw, json)
Hash identifier: moGkAU+m/17NiVEhdUGVg5GGjRr4TeQ5I1ligB2NyyU=
Subject key identifier: 42:FC:17:79:58:C5:5C:19:3B:8B:48:B2:FA:91:81:15:BC:41:72:F1
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD548E8EAB624DBF9B706447F6E1404
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/QvwXeVjFXBk7i0iy-pGBFbxBcvE.roa
Signing time: Mon 02 Jan 2023 00:15:26 +0000
ROA not before: Mon 02 Jan 2023 00:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62448
IP address blocks: 188.212.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:48:e8:ea:b6:24:db:f9:b7:06:44:7f:6e:14:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42fc177958c55c193b8b48b2fa918115bc4172f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:f9:2e:a1:f0:e8:d0:a1:4d:40:8b:0b:2b:
a8:57:c3:81:70:dd:37:d4:07:35:fe:33:9a:af:e9:
06:72:2b:78:63:5d:de:c0:ff:f6:96:f5:b4:3f:7f:
c2:74:f6:db:eb:fd:80:e4:b8:1d:5e:5b:24:79:e1:
c3:03:74:ce:3a:f1:ec:a9:07:15:75:d3:74:61:03:
bc:75:f7:5a:38:ed:2e:20:07:c8:fa:4f:4f:94:ee:
24:a8:c5:28:a4:fe:85:f7:95:63:23:0d:db:5b:de:
99:fa:1f:61:c6:cc:88:a8:00:51:cc:b9:bf:5a:a6:
07:62:d2:3c:df:ff:71:b4:85:9d:36:6c:d5:b6:57:
22:36:d1:90:e8:e9:3c:06:5f:5e:9e:15:71:a4:39:
01:41:59:56:1e:fe:5e:25:bc:02:fc:64:ad:22:63:
cd:9c:a2:50:48:d8:e1:12:eb:d6:fb:33:c9:2d:6f:
df:00:44:61:a0:02:04:a9:db:12:5c:e2:1d:0e:52:
40:ee:8d:09:f7:d8:fd:ca:12:9e:aa:48:ff:84:94:
5e:5d:60:3e:46:a4:e2:5b:90:3b:aa:9d:75:9e:c6:
df:e6:83:bc:a7:00:06:c6:67:0f:60:a3:b6:18:92:
a3:37:c9:f5:f6:9d:8c:93:07:6c:22:fc:20:34:ce:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FC:17:79:58:C5:5C:19:3B:8B:48:B2:FA:91:81:15:BC:41:72:F1
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/QvwXeVjFXBk7i0iy-pGBFbxBcvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.131.0/24
Signature Algorithm: sha256WithRSAEncryption
63:6d:c0:1d:69:47:ca:3f:53:13:cd:d1:88:7e:85:c3:93:5a:
59:19:94:cf:d3:d3:ed:fb:09:b4:7d:9c:9a:1a:c4:e5:c0:92:
c5:2f:72:07:d8:49:f8:32:31:63:16:67:66:05:7c:4f:f7:a8:
dc:7c:9a:ec:31:2d:2d:4c:87:17:f5:7f:c1:70:7d:12:04:b7:
c2:7b:43:49:68:4e:0c:6f:b3:e9:89:9a:94:2c:25:3d:7f:a4:
e1:1f:89:fe:d9:89:d8:d8:f6:a1:cc:05:06:ac:28:42:b3:01:
b0:4f:56:5f:c4:bb:74:29:bb:8c:3f:8a:a4:32:3d:70:72:8e:
cf:c1:9e:73:42:05:48:6f:74:15:b8:10:02:46:e3:e1:9f:72:
1b:35:ea:15:fe:0d:cb:e5:69:94:70:58:1c:cf:eb:85:cd:67:
90:47:e3:57:9b:7c:fd:63:b1:50:07:b4:49:b4:f5:52:89:f3:
3e:ef:37:37:f5:f3:4b:f5:41:01:9b:81:09:45:48:e8:56:6b:
2d:05:25:41:a4:4e:3a:df:1f:5c:50:0e:db:22:af:6f:95:a1:
1b:bd:57:b2:ff:f2:80:4b:d8:c8:17:6e:05:bc:6e:58:8f:a4:
ef:2b:de:24:c9:21:16:e1:90:7e:e2:86:1f:be:8a:f8:47:7d:
4f:ad:1b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org