Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/qQNcX_AqeqK7tu8OSsDNHqZxpSM.roa
File: qQNcX_AqeqK7tu8OSsDNHqZxpSM.roa (raw, json)
Hash identifier: 39ExjhkRVS/MlUBIPONzX54ux+ImzWi6ismz8hQ+N30=
Subject key identifier: A9:03:5C:5F:F0:2A:7A:A2:BB:B6:EF:0E:4A:C0:CD:1E:A6:71:A5:23
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DDA53F40572DFBAE3567626766E8F
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/qQNcX_AqeqK7tu8OSsDNHqZxpSM.roa
Signing time: Sun 01 Jan 2023 20:55:05 +0000
ROA not before: Sun 01 Jan 2023 20:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206499
IP address blocks: 45.14.68.0/24 maxlen: 32
45.14.69.0/24 maxlen: 24
193.177.223.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:da:53:f4:05:72:df:ba:e3:56:76:26:76:6e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9035c5ff02a7aa2bbb6ef0e4ac0cd1ea671a523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:12:4b:43:7a:0a:cd:da:a5:13:0c:52:42:
46:7b:c1:15:d0:94:62:81:12:0c:bc:c5:24:dc:c3:
4b:6d:16:74:12:c3:f4:cd:d8:fe:06:18:ad:ac:74:
7c:e8:98:7d:0b:5a:45:e4:c6:d9:46:08:52:e9:7d:
4f:00:cd:5c:ea:80:34:f9:e7:14:97:da:08:9c:e3:
ca:ac:8e:f1:30:19:40:91:1e:9f:20:cb:f9:c6:fb:
fa:f5:f5:ce:de:97:3a:d9:0c:8b:42:de:23:94:ad:
d9:b0:42:39:07:a8:9f:50:3c:8c:58:84:3d:a0:ec:
ac:13:46:d9:f6:cc:39:94:18:63:80:d4:3b:bd:37:
4f:f3:ad:6d:6c:14:dd:84:75:c6:3d:75:5c:4a:cd:
ef:80:bb:ce:94:d4:91:01:4e:f5:f2:9c:21:a3:32:
b5:c0:74:a9:16:e6:5f:9a:13:ae:ae:4b:d7:f6:99:
8d:a1:f0:9a:fe:12:0f:15:63:27:4c:9f:ac:83:dd:
24:f6:62:d0:36:5b:63:15:f0:98:fb:a6:ae:49:79:
19:25:ea:55:8a:a6:a0:14:06:2b:94:a9:c0:b5:22:
84:3d:ca:f3:c6:fb:e3:d1:98:ef:c8:36:4e:b6:67:
84:e7:56:1c:d2:fe:43:87:b0:c0:f3:0e:fd:8a:7b:
64:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:5C:5F:F0:2A:7A:A2:BB:B6:EF:0E:4A:C0:CD:1E:A6:71:A5:23
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/qQNcX_AqeqK7tu8OSsDNHqZxpSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.68.0/23
193.177.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9b:9a:f6:f9:b8:fb:b9:62:09:6f:f2:74:cc:15:b8:09:cf:
f1:e1:71:8a:6b:03:9d:7b:ac:4b:75:0e:b1:08:48:d3:42:91:
35:b8:4b:8f:9b:e5:f5:99:41:83:be:39:07:d3:15:93:d3:70:
c8:b1:e6:29:09:0e:8a:f7:cd:ef:b1:f4:90:0e:fc:da:65:21:
67:f6:5d:b2:be:e0:74:d9:c2:09:38:a6:bd:cb:7e:18:67:fe:
2f:55:69:73:8b:fa:e5:af:c8:95:ff:20:72:fe:92:ac:6e:4e:
da:ec:92:4c:83:b3:5b:3c:4c:03:2c:8c:a7:2a:1c:e0:79:9a:
6c:54:a1:54:06:9f:e2:e1:5a:7e:9c:ef:27:b4:59:37:ac:89:
43:4b:37:3c:07:87:59:aa:cc:a8:7d:42:c4:72:48:30:a3:c6:
e5:ec:7a:4c:50:d1:34:35:60:55:df:a9:34:11:ad:05:f6:92:
72:f6:be:84:0c:21:56:d8:46:a1:fc:af:bf:2b:40:3c:3b:2b:
90:05:cf:1a:ce:0f:e9:25:d3:88:68:9a:8d:bc:6f:1c:6e:4b:
28:6d:34:70:a7:d9:95:be:6c:5d:1f:13:e0:b5:b6:75:9a:09:
8f:c0:07:a9:49:44:80:ff:b0:f0:e2:68:4c:70:ba:21:17:83:
54:08:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:34 2024 by rpki-client on console-fra.rpki-client.org