Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Qiolakb03_vW1wGNTsqv-ruau6c.roa
File: Qiolakb03_vW1wGNTsqv-ruau6c.roa (raw, json)
Hash identifier: phahRqxzgLpeJ3oH1IUDpVNIXFs6U0GD4NoZHHShKok=
Subject key identifier: 42:2A:25:6A:46:F4:DF:FB:D6:D7:01:8D:4E:CA:AF:FA:BB:9A:BB:A7
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018C11A565EF5C56B8CDE89E072ACB281D69
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Qiolakb03_vW1wGNTsqv-ruau6c.roa
Signing time: Mon 27 Nov 2023 16:38:21 +0000
ROA not before: Mon 27 Nov 2023 16:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21769
IP address blocks: 81.29.159.0/24 maxlen: 24
81.29.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:a5:65:ef:5c:56:b8:cd:e8:9e:07:2a:cb:28:1d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Nov 27 16:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=422a256a46f4dffbd6d7018d4ecaaffabb9abba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:b8:b6:b8:a9:19:7e:81:b9:fd:e8:4f:75:
e6:15:cd:fb:77:42:02:5a:26:a6:a7:2f:06:89:fd:
af:c2:13:3f:36:61:71:7c:09:18:9a:f5:5c:d0:45:
c4:91:88:18:3b:19:71:f5:83:06:54:e6:bc:a0:06:
e6:09:4d:6a:90:1b:96:ac:bb:9b:8e:57:78:1c:dd:
87:6e:b1:98:4a:80:b7:9a:e1:7a:3d:ce:4b:eb:58:
a7:63:c4:ee:6b:ef:ee:da:44:82:5a:71:7a:da:77:
a6:bb:a3:a9:ed:1b:5f:40:70:6a:75:eb:cd:a1:c5:
72:d4:04:33:74:cf:fc:a0:8a:1b:89:f1:3c:cd:c9:
81:ae:89:3f:09:1e:37:9b:f6:9c:a2:6d:be:35:88:
9c:c2:53:3c:34:7a:73:9a:e9:b2:90:a9:ac:7c:1c:
d9:92:ca:71:01:5c:81:2b:8e:58:99:b2:58:81:23:
3e:34:e1:4b:26:aa:2a:d0:01:12:a9:68:72:19:08:
10:76:da:c6:74:f3:1e:70:1a:35:9d:dc:46:41:71:
90:e8:32:90:bf:66:97:09:09:f8:51:f5:bc:da:b9:
0b:b3:fb:10:b1:0e:d6:ec:1e:2d:58:cc:8e:a4:2a:
5e:08:30:d9:88:69:25:a1:f3:e1:cf:c0:ab:f4:7d:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:25:6A:46:F4:DF:FB:D6:D7:01:8D:4E:CA:AF:FA:BB:9A:BB:A7
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Qiolakb03_vW1wGNTsqv-ruau6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.154.0/24
81.29.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:3c:47:78:c0:9f:69:77:2d:4e:b4:0a:89:3b:6b:fc:a4:08:
38:05:75:f0:fe:d9:99:e5:d8:6e:70:33:67:ff:3b:05:23:64:
8b:09:4e:39:f0:77:bc:c4:eb:d6:28:58:70:4e:a7:ef:eb:53:
1b:2e:95:bf:5c:3c:c0:b3:ea:5b:ee:5f:19:30:d6:b9:fb:79:
2f:05:19:d9:1e:e9:5a:cd:ec:71:95:25:23:c2:26:c4:fb:82:
a2:f9:82:a1:e3:90:67:dd:5e:8e:56:c2:c8:fa:6b:14:be:9d:
21:7d:cc:3a:49:25:d5:14:da:69:60:18:26:21:37:ba:60:2b:
8c:c7:11:92:f0:bb:e7:cb:c1:57:53:82:33:9a:26:c4:58:ea:
50:56:47:e4:b4:cd:5e:64:e9:8b:82:6d:70:ea:aa:2b:c7:51:
ab:69:51:f3:ee:5e:42:43:2a:2b:10:b9:84:b3:3c:ca:50:f8:
1f:4d:4b:3a:7f:7b:e0:4b:20:ca:81:93:54:0d:bd:53:b7:03:
41:8c:cb:48:68:1c:39:c2:13:da:c8:2c:37:b7:88:40:36:fb:
19:85:27:6e:6b:58:69:a9:6a:5a:78:07:49:a1:06:67:a3:49:
df:18:90:99:71:05:b9:b7:b8:81:10:c2:2a:ee:41:62:a4:c5:
03:89:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 07:05:10 2023 by rpki-client on console-ams.rpki-client.org