Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/QVhASGA6hUFv5ScRDiYqUUmsans.roa
File: QVhASGA6hUFv5ScRDiYqUUmsans.roa (raw, json)
Hash identifier: EfEcIIsPmpQ5ZuV6QnH+cQXj7SlUgc68DtV6M9KA7kA=
Subject key identifier: 41:58:40:48:60:3A:85:41:6F:E5:27:11:0E:26:2A:51:49:AC:6A:7B
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0189D6994E51EC7D703D45438E87A0E83884
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/QVhASGA6hUFv5ScRDiYqUUmsans.roa
Signing time: Tue 08 Aug 2023 19:21:58 +0000
ROA not before: Tue 08 Aug 2023 19:21:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 178.236.246.0/23 maxlen: 23
94.228.168.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
94.228.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:99:4e:51:ec:7d:70:3d:45:43:8e:87:a0:e8:38:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 8 19:21:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41584048603a85416fe527110e262a5149ac6a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:73:d5:1b:55:26:26:c4:ea:2c:78:fa:80:
4c:21:4f:a7:50:0b:20:16:24:94:c1:2b:34:16:0f:
eb:be:1a:c9:d6:45:7c:14:82:dc:13:df:8a:dd:b1:
f8:cd:4b:80:82:24:62:d1:3f:31:2d:8a:8b:05:1c:
cf:a5:a2:d8:fe:25:a9:18:33:0e:fb:d0:56:d9:d6:
40:90:e1:bc:93:e0:6f:eb:e9:48:a7:fd:d9:fd:92:
a3:f6:1b:0c:a4:7b:bc:1b:33:76:a8:a4:97:53:9d:
87:7d:14:73:b2:7a:3d:16:e8:1e:f9:b7:6e:ea:20:
47:0f:45:64:61:73:65:58:50:71:0b:4e:9e:7c:9c:
65:9d:f2:de:49:ae:85:7b:94:54:17:10:a7:1f:55:
7d:a1:7f:f2:6d:f7:6a:00:dd:dc:95:7a:3f:f6:52:
68:e9:bf:9d:b3:49:d4:46:06:6a:4e:48:dc:7a:b0:
a6:d2:e5:02:8f:62:5e:19:84:99:ab:59:f9:15:25:
5d:29:8e:52:4c:a1:f7:4e:e4:6c:a3:2b:cb:e1:10:
41:c5:be:7a:56:84:7e:b4:f2:9f:5b:92:d4:48:58:
a1:ec:fa:84:2a:f7:f2:14:10:3f:87:d7:66:d2:ef:
1d:a4:54:a9:43:64:e8:b7:89:09:2e:7b:4d:7a:86:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:58:40:48:60:3A:85:41:6F:E5:27:11:0E:26:2A:51:49:AC:6A:7B
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/QVhASGA6hUFv5ScRDiYqUUmsans.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.168.0-94.228.170.255
178.236.246.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:1b:04:7c:22:e7:67:1b:36:c4:fa:36:40:b9:f0:ec:c5:03:
83:ec:c4:7a:82:32:85:24:3f:3f:ab:e5:2b:8d:eb:27:1f:18:
3f:e2:cf:c8:a9:c8:52:26:00:d7:15:50:3b:77:38:17:79:78:
99:83:a7:d5:80:0d:cc:33:90:91:9c:ad:bd:b6:9b:d9:3b:b3:
6b:cb:93:ee:7f:64:f8:87:4f:cc:83:e9:a4:50:87:c8:1f:f2:
78:5d:49:17:73:cc:4c:13:71:6b:48:bc:9f:96:b9:f2:b9:9a:
20:91:e9:d2:79:19:8c:2e:c5:ec:bb:b9:e0:0d:41:6f:86:be:
ef:96:1d:0c:cd:94:58:3b:b2:30:7a:84:4a:85:80:c3:bd:5b:
60:f1:f6:82:4d:a5:48:cb:0b:90:33:3b:9e:23:79:e0:4a:9c:
c7:b7:5e:af:ec:4e:7e:f5:2c:bf:98:fa:3c:22:87:a6:cb:69:
ac:e4:d3:e4:ba:e9:81:37:13:05:71:17:b3:95:9a:c0:38:4e:
39:ed:3e:f0:1a:26:34:0c:39:9b:20:7e:d9:1b:0d:1f:06:40:
06:1b:05:eb:ef:5b:4b:c1:45:bc:e5:91:26:85:68:33:b7:f7:
a8:5c:90:b6:60:53:24:a3:83:09:1d:2a:ac:25:cc:1e:2a:80:
da:b9:de:fe
-----BEGIN CERTIFICATE-----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=
Generated at Thu Aug 10 11:44:28 2023 by rpki-client on console-fra.rpki-client.org