Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/qaRimM2hDbFN2vFU7mDioSaCWYg.roa
File: qaRimM2hDbFN2vFU7mDioSaCWYg.roa (raw, json)
Hash identifier: q3h3IU8Qh166au29btn7aAJ4y8AFyTOFmsrB5EP6MIk=
Subject key identifier: A9:A4:62:98:CD:A1:0D:B1:4D:DA:F1:54:EE:60:E2:A1:26:82:59:88
Certificate issuer: /CN=d31af2872c3f5503073866dffef488b71783dab6
Certificate serial: 01856CE61648D9A2E0FEB8F6C911B102EC7E
Authority key identifier: D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/qaRimM2hDbFN2vFU7mDioSaCWYg.roa
Signing time: Sun 01 Jan 2023 10:34:56 +0000
ROA not before: Sun 01 Jan 2023 10:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198076
IP address blocks: 176.123.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:16:48:d9:a2:e0:fe:b8:f6:c9:11:b1:02:ec:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31af2872c3f5503073866dffef488b71783dab6
Validity
Not Before: Jan 1 10:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9a46298cda10db14ddaf154ee60e2a126825988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:31:43:cf:c7:c4:51:0f:5d:e8:89:b2:47:
cc:cc:3c:3a:62:64:73:df:83:35:9f:34:37:f1:cb:
80:70:a6:0a:29:3c:1a:02:cc:4b:b8:e2:d0:2a:a4:
6d:57:69:10:5b:e6:29:77:ce:8e:1e:66:c5:b8:9d:
d1:fa:8b:54:70:80:b5:21:63:da:85:2d:4b:7a:ac:
44:13:30:bf:6d:d8:32:32:cc:1e:80:2f:0d:48:ab:
04:22:60:b6:ef:58:7a:34:4e:d3:e1:0f:45:b6:c4:
26:dc:1f:e9:5f:2e:73:02:8a:4e:b4:d1:97:ad:f0:
e8:55:a7:6e:7f:50:45:96:36:4a:88:4c:c6:4e:56:
45:56:98:29:12:2b:93:d4:0f:96:ec:8d:d0:3b:e4:
d6:8d:62:d4:69:f2:a1:07:b0:4f:e9:df:3d:e7:ea:
ff:cd:82:a5:47:62:46:88:50:7b:2b:0d:2b:81:5e:
9f:56:3c:c3:c1:13:36:24:de:19:13:93:a1:e0:5b:
7f:c5:dd:1d:91:01:d0:d1:0a:68:71:91:e7:fe:e0:
9a:02:c3:06:df:6f:8b:f2:69:7b:0a:86:b5:b4:d8:
fd:59:b3:a4:f4:3b:c6:59:d5:5a:94:c3:dd:4e:3c:
73:a4:b0:4e:68:0f:ea:50:f0:1d:c6:bb:94:4d:7d:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A4:62:98:CD:A1:0D:B1:4D:DA:F1:54:EE:60:E2:A1:26:82:59:88
X509v3 Authority Key Identifier:
keyid:D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/qaRimM2hDbFN2vFU7mDioSaCWYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:50:0a:ac:5e:4c:4e:45:a3:7d:56:51:19:30:f8:a3:9d:a0:
43:84:88:d9:b5:bc:09:6d:bc:dc:6c:29:b2:2b:8b:fc:30:1d:
f8:a8:1d:d0:11:26:2a:09:f9:e6:7f:a0:40:33:01:d9:04:6f:
9f:ae:d7:c0:ac:2e:75:e7:6e:3b:77:24:88:62:92:68:98:2e:
74:d8:34:9d:0a:78:44:39:44:7c:17:5d:32:32:cb:61:b3:6b:
26:37:7d:fd:fd:6d:42:0b:22:e3:69:14:f1:2d:f6:76:23:be:
92:39:32:fa:ed:2d:85:58:15:ab:52:c2:69:f6:38:a6:a2:9e:
e4:19:7f:4a:1c:b7:b7:68:75:62:aa:b3:9a:46:4e:b4:34:72:
1d:37:0a:e3:09:90:78:32:de:77:88:7d:a5:a7:2b:af:3f:6f:
a6:5a:d9:6b:56:ea:f4:d4:e4:dc:7b:e1:83:b5:a2:d9:7a:3e:
7a:f3:e4:f3:6e:fb:44:49:06:e9:fc:b9:8e:76:7b:3d:f1:bd:
23:10:3d:d8:a2:26:8d:a5:d5:2f:78:06:f7:f5:b8:95:93:c6:
0a:b5:d2:78:c8:bc:43:88:1e:b4:f6:62:dd:3f:43:2f:65:7e:
b3:77:bf:d6:ae:a2:93:37:e8:17:dc:33:a6:c4:aa:99:b6:e7:
2d:d6:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:29 2024 by rpki-client on console-ams.rpki-client.org