Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/QRuZnvvIbwQsX8P0NBs2JLIhh5A.roa
File: QRuZnvvIbwQsX8P0NBs2JLIhh5A.roa (raw, json)
Hash identifier: r2yMOBXHy6Za2SkatZkeRk/IGujhHEh7NdFg0QqVVAY=
Subject key identifier: 41:1B:99:9E:FB:C8:6F:04:2C:5F:C3:F4:34:1B:36:24:B2:21:87:90
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 018660CB8B74077A0D320B9C132F2C6C7AF4
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/QRuZnvvIbwQsX8P0NBs2JLIhh5A.roa
Signing time: Fri 17 Feb 2023 19:13:17 +0000
ROA not before: Fri 17 Feb 2023 19:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3561
IP address blocks: 62.216.64.0/21 maxlen: 21
188.74.136.0/22 maxlen: 22
178.157.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:60:cb:8b:74:07:7a:0d:32:0b:9c:13:2f:2c:6c:7a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Feb 17 19:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=411b999efbc86f042c5fc3f4341b3624b2218790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:0e:d8:2a:bb:73:3f:fd:f0:01:54:b4:06:
a6:be:f1:d3:78:18:a2:1e:83:6f:f2:f4:92:c2:ce:
a8:93:9b:80:72:13:b1:2c:b2:9b:72:08:d6:d6:3b:
b4:59:d5:93:8e:6e:5b:45:11:29:01:93:46:99:69:
2d:63:fc:ed:66:dc:ff:7a:5d:6a:38:49:49:18:9b:
a0:fd:40:16:ad:3c:ae:3d:f7:c4:b1:4c:44:55:e1:
ee:bb:d5:06:ec:db:15:9d:dd:fa:17:dd:dd:4f:c1:
e4:4c:0d:7a:aa:0a:a1:b9:fb:95:92:4b:ed:1d:ab:
c1:bf:25:7e:76:58:7b:a3:40:63:60:d6:78:ed:e6:
1b:88:d8:b0:12:92:a2:97:bd:86:1f:0c:2a:0e:9d:
c8:d8:cf:92:3c:74:30:a9:26:c9:66:e4:ff:47:b7:
01:40:61:65:c7:8e:40:5d:4f:9b:e2:35:fa:35:31:
e9:ab:e3:36:6a:47:15:d0:3f:c0:2d:57:ef:a5:af:
94:91:d5:47:a1:90:99:da:e5:08:51:8b:67:b6:8f:
15:2f:69:b2:20:b7:43:27:20:3b:06:19:fc:97:e9:
9d:1d:5e:1d:cc:d8:78:0a:a6:19:a8:ec:f3:b2:df:
84:e6:c4:90:42:fb:ee:cd:57:ad:99:f0:89:fe:17:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1B:99:9E:FB:C8:6F:04:2C:5F:C3:F4:34:1B:36:24:B2:21:87:90
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/QRuZnvvIbwQsX8P0NBs2JLIhh5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.64.0/21
178.157.64.0/22
188.74.136.0/22
Signature Algorithm: sha256WithRSAEncryption
95:91:af:34:7a:19:df:b7:c3:c1:8e:6c:aa:a4:b4:24:96:63:
43:da:02:2d:21:64:05:e2:f7:57:ef:86:2b:fe:09:32:04:cf:
34:e5:7d:08:6b:fe:97:9c:76:95:38:f8:e8:90:7c:2f:06:64:
58:6f:ca:56:67:bb:8a:3d:8d:87:62:b0:a2:61:15:c1:4c:1d:
92:d4:5f:b1:5e:e0:ca:5b:5f:79:bb:34:60:2c:58:aa:04:46:
d8:ac:8f:01:3c:cf:57:65:1d:c8:93:82:32:96:74:80:36:19:
2a:2a:16:2e:fb:cd:87:81:06:5e:b2:4a:ed:5e:5c:84:82:ea:
58:d9:7f:5e:fb:17:fa:f2:84:f8:13:60:75:93:3b:b9:4d:c1:
b0:fd:a0:06:41:64:9f:90:f0:4d:de:f4:f5:9d:8c:11:72:b4:
1e:f4:48:b8:e2:24:0b:6c:78:d1:21:94:a5:cd:c3:1d:b9:e5:
d6:4f:a1:c0:fb:07:aa:0c:41:ee:13:08:7e:fe:82:1e:b9:fb:
9f:21:83:1c:4b:62:81:63:7a:a4:9e:2e:b3:b6:a3:dc:a2:3d:
96:61:c4:72:80:44:dc:c2:d8:bb:ce:33:7d:c0:c1:61:bc:71:
d6:b4:e9:a4:83:98:05:47:ce:1b:cb:9a:eb:a0:48:2f:44:91:
73:91:52:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:25 2024 by rpki-client on console-fra.rpki-client.org