Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/qLjLvL_t51B9xrTSLd0_w97mHS0.roa
File: qLjLvL_t51B9xrTSLd0_w97mHS0.roa (raw, json)
Hash identifier: LLg8AFtSjsOM/mJwnuPkEqt4E4qgoJK5K0CozvoeN48=
Subject key identifier: A8:B8:CB:BC:BF:ED:E7:50:7D:C6:B4:D2:2D:DD:3F:C3:DE:E6:1D:2D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018C1A19B4C1F20DBF7BC7302424223337B4
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/qLjLvL_t51B9xrTSLd0_w97mHS0.roa
Signing time: Wed 29 Nov 2023 08:02:21 +0000
ROA not before: Wed 29 Nov 2023 08:02:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198154
IP address blocks: 185.215.231.0/24 maxlen: 24
37.32.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:19:b4:c1:f2:0d:bf:7b:c7:30:24:24:22:33:37:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 29 08:02:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8b8cbbcbfede7507dc6b4d22ddd3fc3dee61d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:e4:d9:d1:35:2b:11:90:79:aa:2b:1d:25:
3b:5c:bc:78:b3:e3:df:37:8a:7b:ab:c3:9e:c2:a2:
c6:7c:d7:8f:c0:8a:fc:3e:62:af:7e:9f:56:90:50:
bd:ae:7b:25:02:44:a4:e4:ba:c3:ea:f7:52:b4:7d:
5e:39:f1:8e:97:9f:b6:c1:ea:03:72:df:2c:60:bd:
86:04:9e:29:31:6b:c7:24:55:1a:6d:a9:c0:61:8e:
81:a0:34:5d:f4:c7:8c:c8:eb:12:cc:d8:5e:84:8a:
00:43:a2:bb:19:23:2f:bd:72:13:19:6a:7a:66:04:
2d:9a:5f:40:9f:7a:43:ad:44:37:a3:4a:28:1a:46:
6d:b9:47:b6:bc:fe:fd:a2:be:d8:a4:53:4b:8f:9a:
69:4b:ba:54:01:2a:e0:e1:55:86:8a:a4:6e:f3:a1:
7b:93:e2:6e:db:4c:8d:c9:63:a6:36:ba:8d:c0:24:
ae:56:46:d1:a2:63:69:2e:7f:56:08:e6:cb:77:7b:
84:74:66:77:63:63:47:67:6b:bd:e9:7d:72:ca:15:
48:0c:dc:3e:ef:03:24:87:c7:07:f4:1b:81:84:ef:
6b:98:ed:56:ea:1e:f3:04:d6:17:9f:ff:0a:1b:55:
c1:50:fd:f3:71:da:ad:de:a9:54:75:83:73:d7:aa:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:CB:BC:BF:ED:E7:50:7D:C6:B4:D2:2D:DD:3F:C3:DE:E6:1D:2D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/qLjLvL_t51B9xrTSLd0_w97mHS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.47.0/24
185.215.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:71:38:cc:50:4a:a8:fa:ed:72:eb:80:09:4f:dc:95:92:d0:
11:8a:6b:57:a6:1c:20:9f:df:e1:19:e4:66:21:61:e0:2d:bf:
34:a3:e4:df:cf:52:ff:c6:30:e9:df:9b:54:b4:88:c1:78:25:
d8:e8:e9:31:a3:59:66:e9:03:97:50:bd:4d:89:6a:ca:58:e9:
70:41:1d:15:ff:6c:ec:5e:c5:58:c7:a4:78:bf:73:86:ec:ab:
4e:fe:4e:d6:dc:c7:f7:8f:bc:76:57:15:5e:51:86:80:bc:23:
5b:83:c1:30:61:32:28:08:bd:d2:18:27:37:bd:64:52:48:ee:
de:11:d9:25:e6:38:23:68:ff:72:21:0d:56:3d:a9:b6:85:7d:
11:02:a3:89:42:94:34:84:f2:42:60:58:63:7a:5c:ab:0c:7d:
54:43:6d:62:82:75:11:5d:09:16:66:26:23:17:cf:bd:de:b8:
38:ff:4d:cf:ee:fb:7f:ff:fa:0d:a2:03:53:4c:56:09:08:df:
75:cb:13:19:9a:c3:78:9d:e6:0b:01:cf:cd:13:fe:f9:8c:a6:
f9:5f:a5:28:b4:73:29:68:9e:aa:b5:80:a2:03:a0:2f:53:37:
e9:5d:06:9e:d9:53:a8:c9:be:30:5e:a7:33:42:0f:88:e0:d1:
b0:42:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:10 2024 by rpki-client on console-fra.rpki-client.org