Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Qeph_Cy6Q5QOuczqh6grUYTKPV4.roa
File: Qeph_Cy6Q5QOuczqh6grUYTKPV4.roa (raw, json)
Hash identifier: zHSw8qe1UU+C9UdAGvUxlDOfwQ+BkSRTlpZ7x/tJHsg=
Subject key identifier: 41:EA:61:FC:2C:BA:43:94:0E:B9:CC:EA:87:A8:2B:51:84:CA:3D:5E
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018AEBF078B46B40316B4331D47CF1C1F80C
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Qeph_Cy6Q5QOuczqh6grUYTKPV4.roa
Signing time: Sun 01 Oct 2023 15:51:59 +0000
ROA not before: Sun 01 Oct 2023 15:51:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.154.0/23 maxlen: 24
80.83.88.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:eb:f0:78:b4:6b:40:31:6b:43:31:d4:7c:f1:c1:f8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Oct 1 15:51:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41ea61fc2cba43940eb9ccea87a82b5184ca3d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c2:55:46:94:92:78:30:fb:50:b8:86:c9:34:
76:29:c4:af:30:9f:fc:4a:8d:c7:18:b7:91:90:83:
0a:fb:72:6b:52:93:5f:bc:f6:2c:94:8b:43:19:81:
c2:b4:12:1e:12:6a:98:a5:ce:ad:23:48:3e:e9:28:
99:b8:72:c4:e1:58:7c:13:7e:bd:b4:79:c8:21:5c:
cd:46:c4:f5:66:7c:2a:0e:b2:db:19:37:c5:19:25:
40:31:4c:8b:3e:b6:89:17:dd:f9:da:4f:d8:bc:71:
f1:da:71:8a:fb:5c:e0:fb:53:08:9b:6c:a4:ba:c3:
4e:e8:a5:67:8a:61:d1:50:22:b6:63:a4:2e:a1:e7:
9b:3b:b2:3d:d8:2d:0a:ef:cf:95:d1:81:c6:85:0a:
f7:22:3b:f6:b2:a5:12:7b:72:d0:67:ea:f5:12:b9:
fe:02:cb:dc:a5:31:a1:3a:4f:48:6c:05:20:d2:2a:
8b:06:4b:03:67:2e:28:aa:11:ba:2d:19:b4:0c:01:
d3:9b:16:ca:76:50:5f:05:8b:31:37:b7:cc:3b:ad:
ae:7f:41:4f:30:b3:9e:11:1a:64:fa:f0:0a:79:6d:
12:1c:a5:21:59:0e:3a:17:3b:2b:e8:54:4a:61:11:
ef:4e:db:e5:34:f7:b5:82:a8:da:f4:ac:52:07:29:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EA:61:FC:2C:BA:43:94:0E:B9:CC:EA:87:A8:2B:51:84:CA:3D:5E
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Qeph_Cy6Q5QOuczqh6grUYTKPV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.154.0/23
80.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
27:d6:b1:82:01:01:2f:e2:cb:9a:eb:35:85:46:87:9b:2a:93:
3e:fc:98:ed:73:99:08:94:54:95:3d:88:cd:77:be:62:31:0d:
5b:e0:7a:85:f3:37:e8:3f:83:c2:66:6b:ef:ac:72:90:27:9b:
aa:16:5e:f2:e5:4c:a8:3a:43:37:07:11:a3:00:f8:d0:a3:fb:
71:be:de:8a:2b:87:f3:93:57:8d:9f:17:92:d0:88:fb:17:aa:
48:50:96:87:17:dd:19:47:43:f3:a2:b3:0a:80:0f:04:6d:45:
8e:ce:34:43:e5:5c:4d:5a:42:51:aa:bb:69:5b:b2:e1:f7:b0:
ed:a2:81:10:53:9c:80:cc:07:79:cf:78:59:e0:2e:08:f5:da:
1b:d3:e5:33:65:de:9d:16:3c:bc:ce:fa:92:4d:80:40:64:73:
83:aa:b6:bd:a9:84:55:4c:ea:f9:2a:55:12:ae:c2:0f:ef:bb:
35:42:c1:2b:1c:08:51:20:72:05:9a:4f:7b:83:b4:f1:fa:50:
3c:27:9e:03:61:7a:58:89:dd:10:5b:47:45:bf:34:49:98:c8:
95:29:c9:83:9c:74:63:f0:ac:9c:18:a5:e9:8f:b4:23:d7:33:
08:da:c7:3c:21:e8:c4:f8:e8:a2:45:8f:ad:b8:8a:ff:f4:78:
92:0a:ae:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 21:39:40 2023 by rpki-client on console-ams.rpki-client.org