Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/Qu6aKlqMK5B9pf_OWMPEfNRt7NY.roa
File: Qu6aKlqMK5B9pf_OWMPEfNRt7NY.roa (raw, json)
Hash identifier: QHMBR7/jwUDgkKWleMlnZHvS9xE8w55mKWfjlw72j80=
Subject key identifier: 42:EE:9A:2A:5A:8C:2B:90:7D:A5:FF:CE:58:C3:C4:7C:D4:6D:EC:D6
Certificate issuer: /CN=e83c7507faff0f4126813851e927e8fb09fb7a6f
Certificate serial: 01856EC2140DFB197F21D3A1B38D8C6B8942
Authority key identifier: E8:3C:75:07:FA:FF:0F:41:26:81:38:51:E9:27:E8:FB:09:FB:7A:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dx1B_r_D0EmgThR6Sfo-wn7em8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/Qu6aKlqMK5B9pf_OWMPEfNRt7NY.roa
Signing time: Sun 01 Jan 2023 19:14:50 +0000
ROA not before: Sun 01 Jan 2023 19:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198530
IP address blocks: 91.236.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:14:0d:fb:19:7f:21:d3:a1:b3:8d:8c:6b:89:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e83c7507faff0f4126813851e927e8fb09fb7a6f
Validity
Not Before: Jan 1 19:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42ee9a2a5a8c2b907da5ffce58c3c47cd46decd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:5f:d6:13:5d:8e:50:64:ec:a0:a4:6d:86:
db:6c:60:d3:c9:52:42:df:a9:7b:79:c5:c9:6a:3f:
23:7e:d3:2a:b0:5b:3f:1e:22:59:2f:aa:dc:8e:a5:
89:8e:b5:67:2c:8c:30:82:ce:a5:9e:0b:a8:6f:1e:
96:9e:4d:ce:34:fb:61:ce:5e:43:dd:c2:4b:37:bf:
db:f5:64:09:0b:a4:7d:ef:7a:e9:45:ea:b7:a8:06:
1e:04:e8:d8:52:5e:be:21:e0:a5:9b:0f:b3:c9:a3:
ed:f7:fd:62:45:76:13:47:6d:5d:45:02:0c:1d:72:
bb:ea:5c:58:d2:80:64:fe:6f:d7:22:6b:d9:35:6b:
f4:70:9e:e2:03:05:ea:79:b9:e9:46:5f:62:7a:bb:
d0:bc:1d:2c:bb:74:80:c7:49:4e:68:a2:0b:be:c1:
c4:5f:4c:63:90:4a:87:16:81:6d:de:9a:02:34:5f:
1b:46:1a:50:7e:85:50:cd:f8:33:db:de:d9:54:c5:
5e:b0:d6:d0:80:5e:f6:04:b0:74:c0:2e:07:8e:f6:
2f:f6:1e:43:08:a1:73:af:4f:65:8b:54:24:fa:0b:
94:77:4f:2b:a9:dc:b7:be:a8:fa:a6:e8:c2:91:03:
98:f4:97:6d:50:81:73:8c:11:d8:84:0b:27:93:7c:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EE:9A:2A:5A:8C:2B:90:7D:A5:FF:CE:58:C3:C4:7C:D4:6D:EC:D6
X509v3 Authority Key Identifier:
keyid:E8:3C:75:07:FA:FF:0F:41:26:81:38:51:E9:27:E8:FB:09:FB:7A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dx1B_r_D0EmgThR6Sfo-wn7em8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/Qu6aKlqMK5B9pf_OWMPEfNRt7NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.16.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f3:30:e7:9e:20:34:9d:5d:cf:fc:05:e3:22:13:19:48:d6:
1e:83:ee:bb:06:d3:5a:d3:70:e4:48:d4:fa:b8:93:14:49:db:
85:02:2d:cf:75:42:64:dc:d4:cf:a7:17:9e:87:3a:d6:0c:45:
fd:74:43:d2:c4:fb:bf:97:99:a4:09:e9:7c:4b:d4:66:44:74:
80:52:af:58:df:be:04:13:1c:0e:03:75:f9:3a:64:ee:e9:75:
67:e8:11:9b:a1:3c:6e:43:53:6c:12:e0:b3:9f:9c:c6:95:e7:
07:6c:b7:af:f2:27:b8:38:73:41:d3:78:1f:0e:97:04:29:68:
94:aa:28:16:ae:59:ef:92:c6:23:67:bf:40:64:40:a0:24:f8:
b1:00:ad:3b:7f:2d:a8:04:80:60:0a:70:c6:c0:ae:28:b0:b5:
a0:7c:11:b4:fc:45:07:41:9e:05:2e:5c:78:fa:e6:b7:16:e1:
92:fe:19:a9:6d:20:c7:05:82:03:42:69:5a:0d:b0:17:cb:e8:
f8:96:37:7c:b2:b2:b2:f8:98:8b:a9:81:c0:57:c1:cd:84:5c:
08:cf:9c:04:f5:50:58:25:aa:1e:ab:e9:a3:1a:1e:4a:9d:3c:
37:16:8f:0d:f4:46:0d:56:db:5e:02:07:1f:ac:ea:4e:64:cb:
23:2a:db:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:02 2024 by rpki-client on console-fra.rpki-client.org