Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/QJLGSkd0nN89c35jSi1l_V1i0XQ.roa
File: QJLGSkd0nN89c35jSi1l_V1i0XQ.roa (raw, json)
Hash identifier: tpbdHGeJLDGzw6/PCTz6R0k8DTFne9zsQmmc1jqLc0A=
Subject key identifier: 40:92:C6:4A:47:74:9C:DF:3D:73:7E:63:4A:2D:65:FD:5D:62:D1:74
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 01856E942ECD26D40D73798861C31901E95A
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/QJLGSkd0nN89c35jSi1l_V1i0XQ.roa
Signing time: Sun 01 Jan 2023 18:24:43 +0000
ROA not before: Sun 01 Jan 2023 18:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213019
IP address blocks: 194.39.71.0/24 maxlen: 24
194.39.69.0/24 maxlen: 24
194.39.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:94:2e:cd:26:d4:0d:73:79:88:61:c3:19:01:e9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 1 18:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4092c64a47749cdf3d737e634a2d65fd5d62d174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:2c:ad:06:d4:3a:6a:1c:03:0d:b8:3c:6c:
7e:6f:dd:34:f3:33:c1:4d:02:cf:42:6e:1c:ef:e4:
94:b5:6b:c7:99:f8:62:4c:13:1a:b6:81:d9:8e:9a:
40:37:0b:85:0d:75:7f:31:47:d1:88:f4:c6:2d:ca:
43:1a:a2:6b:d3:30:6d:12:10:28:8f:7f:86:b9:30:
6a:4b:28:a2:c4:f6:c8:af:28:04:74:78:12:4f:bd:
43:fd:04:c5:73:50:3c:64:71:a9:20:ce:a0:14:46:
70:aa:02:71:7e:a2:99:e4:21:ad:52:ff:e4:65:c6:
26:44:3e:0f:24:aa:6b:7e:03:a2:be:2c:96:b7:77:
b0:65:2f:09:ce:9a:fe:fc:90:fe:56:bc:14:05:95:
19:5b:83:0c:2b:f9:4e:03:a5:6a:26:1c:4a:70:dc:
aa:60:84:62:fe:77:ee:d3:0e:74:6c:1d:80:5d:d4:
dd:39:aa:f0:1b:bb:0e:a7:48:1f:63:99:5b:ae:77:
f5:0a:d7:72:56:11:24:35:eb:25:26:9a:d9:d9:fe:
e4:90:d8:ef:a9:ac:30:eb:06:18:cd:53:0b:ed:88:
e1:88:3b:63:6d:a1:88:53:54:d6:e7:79:af:5e:48:
01:3c:34:80:51:01:7f:13:ef:3d:63:ed:62:12:08:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:C6:4A:47:74:9C:DF:3D:73:7E:63:4A:2D:65:FD:5D:62:D1:74
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/QJLGSkd0nN89c35jSi1l_V1i0XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.69.0-194.39.71.255
Signature Algorithm: sha256WithRSAEncryption
3e:ff:fa:b4:00:ea:4e:8d:78:08:54:2a:17:d0:3d:54:24:af:
26:a0:bb:a7:e4:96:da:c0:84:fb:33:d5:f7:f6:02:bc:0d:a7:
8c:ff:49:dd:83:93:15:58:1f:32:e2:06:50:90:a7:1a:e8:04:
55:94:b3:9a:31:b3:e4:ec:3d:9e:09:e1:67:41:1d:f2:9e:ef:
ee:ed:0e:54:42:18:5a:20:00:71:81:34:72:d2:46:b6:2a:98:
03:14:b4:cd:65:34:a4:1a:24:a8:c0:46:d6:a3:fe:62:1b:22:
a8:8b:34:51:f0:dd:74:50:74:bc:28:ec:f1:2b:22:0e:b8:e4:
34:4f:f5:48:ec:1c:bf:a9:23:d6:28:3c:f6:2a:47:2f:fd:03:
b4:53:dc:ce:77:e6:d4:7f:ec:ed:06:d0:ea:05:6b:cb:db:d4:
f7:31:5f:ca:25:21:0f:55:03:ee:24:80:28:45:4a:38:6b:9f:
2d:4a:c5:4e:d7:33:e3:ed:37:9c:f9:1e:c1:e2:1a:bd:8e:6a:
5b:5f:48:9b:42:9f:8d:cc:bf:22:a5:fa:55:12:dd:59:45:e1:
c7:26:88:91:ce:30:fc:1a:f3:8f:40:f3:06:a3:b0:3f:6c:00:
2f:b5:36:3f:06:ab:62:50:1c:0d:ac:d9:61:85:79:28:4b:60:
32:df:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:02 2024 by rpki-client on console-fra.rpki-client.org