Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/QUKk9VAMZfaT5vV9Q17W-8lNQ1Y.roa
File: QUKk9VAMZfaT5vV9Q17W-8lNQ1Y.roa (raw, json)
Hash identifier: e/7GkWbmh3Ae2ibpL5DBHlmIqxnv5T/ZUJ43jmdK5Io=
Subject key identifier: 41:42:A4:F5:50:0C:65:F6:93:E6:F5:7D:43:5E:D6:FB:C9:4D:43:56
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 018C6C99C7916AA37FA26484FD765C6CCB15
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/QUKk9VAMZfaT5vV9Q17W-8lNQ1Y.roa
Signing time: Fri 15 Dec 2023 08:31:06 +0000
ROA not before: Fri 15 Dec 2023 08:31:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 213.232.235.0/24 maxlen: 24
94.103.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:99:c7:91:6a:a3:7f:a2:64:84:fd:76:5c:6c:cb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Dec 15 08:31:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4142a4f5500c65f693e6f57d435ed6fbc94d4356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dc:72:6d:1d:8e:05:6f:d3:1c:e3:1f:60:be:
4b:5b:23:45:55:09:44:9b:7b:8a:2e:4e:b2:6e:f6:
08:bf:bb:d6:e4:f6:01:31:58:b4:6f:8e:61:8d:46:
7a:d9:be:51:d9:e1:6c:8a:56:95:4d:5d:94:5f:60:
18:ae:dc:d1:80:d1:42:f0:9f:b9:d4:e3:fb:0e:3e:
fb:6b:d8:cd:4b:e8:c1:8d:ee:4c:25:59:c6:dd:70:
a5:3b:e9:33:d6:0c:2c:20:ba:0f:3d:db:c3:06:00:
d8:71:19:0d:2f:bd:a3:52:f5:c5:90:b4:4f:49:7d:
f5:e9:24:f3:43:ab:ca:d2:2c:35:51:f6:dd:6c:1b:
be:04:2e:7c:83:6d:0a:6a:dc:0e:00:ab:ce:d6:6d:
c3:36:f6:fb:2f:7e:f9:f3:c0:cd:e9:7e:c3:e2:32:
cb:46:70:d5:1d:67:1f:c1:b1:34:97:5e:77:f9:f4:
d9:d9:06:13:f3:7d:88:b2:ac:b2:13:6f:78:b0:14:
c4:3e:b4:bd:86:2f:0e:cb:4f:52:57:89:48:14:a5:
bf:95:fd:9a:6b:63:f7:8f:1f:38:5c:7a:f2:f7:ed:
36:38:0c:da:df:6c:cd:8f:f0:30:b6:61:0f:b4:22:
45:2a:89:a3:6c:79:56:22:1f:ca:65:a9:9f:c9:d8:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:A4:F5:50:0C:65:F6:93:E6:F5:7D:43:5E:D6:FB:C9:4D:43:56
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/QUKk9VAMZfaT5vV9Q17W-8lNQ1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.188.0/24
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:62:64:9e:2a:60:da:00:c9:4b:bf:35:d5:46:3a:10:3d:41:
16:6f:81:ac:e4:9a:df:a8:ab:1a:56:a0:1f:19:70:87:24:bd:
28:da:82:96:c3:40:06:c3:55:19:71:cd:6b:2a:29:d2:1c:a0:
a6:a0:86:90:7d:26:b0:73:4b:ce:ee:ca:0d:b1:9f:75:67:90:
21:37:06:b1:eb:12:3c:ce:90:62:d7:4e:12:95:76:d4:52:a5:
12:d0:e0:7f:52:28:ae:5a:f3:d2:bc:b7:f5:7b:c5:c9:4f:cf:
3c:e9:b4:7c:da:e3:33:bd:28:47:02:ac:e7:a6:4c:88:cb:7a:
ce:9b:6c:33:52:91:8d:96:68:20:fe:54:b0:e5:cf:ea:63:ed:
be:9d:08:f6:e6:eb:bc:b1:64:e2:8c:91:90:d6:c3:ca:a5:d7:
61:1d:14:d5:47:c2:1b:16:73:c9:ca:12:3b:6d:08:41:18:a8:
a0:32:82:ef:e3:71:85:d8:e4:dd:51:70:21:55:2c:6d:6d:50:
43:1c:8d:a2:75:f2:db:38:1d:42:fa:49:47:58:c4:4a:44:89:
9e:f4:d9:15:2a:dc:17:a9:a1:1b:2e:f3:05:e4:71:1c:b5:ed:
94:89:6f:c4:1e:54:35:55:ac:9f:06:77:5d:a6:0d:88:62:53:
48:46:18:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:21 2024 by rpki-client on console-ams.rpki-client.org