Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/q7gkkqV3CqCLCiMIfuP7eWI5oss.roa
File: q7gkkqV3CqCLCiMIfuP7eWI5oss.roa (raw, json)
Hash identifier: JTcHPFGCiGEVCLJVC0zFEvB37fDRl5FRCA/DRZsbuSA=
Subject key identifier: AB:B8:24:92:A5:77:0A:A0:8B:0A:23:08:7E:E3:FB:79:62:39:A2:CB
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0189258E51248C7743CB8EE9918A62794B68
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/q7gkkqV3CqCLCiMIfuP7eWI5oss.roa
Signing time: Wed 05 Jul 2023 10:17:10 +0000
ROA not before: Wed 05 Jul 2023 10:17:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 81.29.145.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:8e:51:24:8c:77:43:cb:8e:e9:91:8a:62:79:4b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jul 5 10:17:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abb82492a5770aa08b0a23087ee3fb796239a2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:4f:25:50:b4:dd:ad:87:90:40:b6:a8:d1:
03:c4:55:b0:64:59:a3:7e:1c:20:08:ec:9b:92:20:
fa:a2:dc:42:6e:d5:79:89:8b:e6:60:4e:8c:8c:ec:
4f:44:1d:aa:a4:b0:fe:c0:12:fd:21:82:c3:bc:62:
d4:3c:69:a8:75:e8:3c:2f:e7:22:6f:d5:ca:5e:cf:
56:9f:1a:0e:9c:ad:61:08:67:bd:d0:10:26:18:a6:
d6:f9:2b:a3:ba:34:31:36:3f:68:45:b5:ac:96:2f:
db:c0:aa:f8:94:4c:42:1f:d2:4f:29:86:76:ce:c7:
18:a4:a1:22:96:ab:b4:11:fe:0f:bc:18:54:a2:be:
43:f5:b0:d8:7b:e0:98:e4:e1:4b:89:05:86:c1:c2:
25:ea:2b:eb:69:7f:f8:be:c9:66:ed:b3:e1:33:44:
10:b8:6c:ab:f9:98:bd:ae:2b:a2:94:bf:83:d9:1f:
89:26:13:bc:b3:dc:8e:d4:2e:78:5b:64:a8:af:31:
89:cc:ee:a8:39:09:e4:38:06:7b:42:0b:46:bc:43:
d8:ba:fb:6a:55:9b:d1:46:9d:03:13:49:32:ba:3a:
a3:6b:f7:97:41:60:c3:f1:b3:fa:d4:be:f4:1c:14:
33:32:4d:2f:61:b7:b2:20:36:f6:f3:f0:c4:c3:9d:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B8:24:92:A5:77:0A:A0:8B:0A:23:08:7E:E3:FB:79:62:39:A2:CB
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/q7gkkqV3CqCLCiMIfuP7eWI5oss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.145.0/24
81.29.155.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:74:e7:e8:03:86:79:da:b2:5e:1c:de:26:29:8e:90:c9:e7:
e3:4e:bd:c3:f5:5b:0f:84:1b:e4:ea:3d:f0:e5:c7:8f:bb:dc:
2c:b4:89:67:d8:fd:9f:9a:96:7c:24:e6:55:8b:51:8e:38:5b:
e3:19:1e:5b:35:3d:39:de:1e:8c:2a:92:64:73:ea:c5:08:62:
e5:cf:5b:97:17:32:7b:b6:5b:cc:48:ab:ae:9e:b3:84:9e:fe:
05:b8:5b:eb:b1:5c:a2:49:8e:d4:ad:a6:e2:20:cb:d1:cf:11:
14:92:a7:69:01:e9:c7:4a:81:51:97:10:09:c8:d8:00:ae:c6:
8e:ab:a9:ac:31:94:ac:52:28:b0:9e:74:9e:aa:6d:dd:34:81:
4b:52:92:c0:92:af:e8:8a:33:4d:bf:6e:55:d5:bd:d9:de:13:
02:b3:49:44:43:88:e5:70:31:cb:09:80:22:66:c0:9c:92:fe:
d7:f6:5f:e0:0d:4f:16:03:7d:b4:b0:b1:81:48:aa:fa:d0:82:
d7:30:13:de:76:7f:76:de:e2:72:a4:1a:b9:b3:5f:7e:d2:f6:
44:76:ec:a1:f9:2e:b0:b6:a9:b0:6d:96:a4:a3:34:8d:c7:a8:
09:86:02:cc:2d:b3:3a:fe:bd:da:05:e5:d5:93:f3:04:92:ad:
01:86:ae:c9
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 20 06:05:55 2023 by rpki-client on console-ams.rpki-client.org