Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/D930JQUjJvblcfFulTij2u99CqI.roa
File: D930JQUjJvblcfFulTij2u99CqI.roa (raw, json)
Hash identifier: I1AqUmupo764Tro1w0QgwV1I+v1jUXIt4eOFOqRMDB4=
Subject key identifier: 0F:DD:F4:25:05:23:26:F6:E5:71:F1:6E:95:38:A3:DA:EF:7D:0A:A2
Certificate issuer: /CN=fd0b268321570aa04217b353847c10bf731254b5
Certificate serial: 018572E82D61F07746E46EBF4B3E15537236
Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/D930JQUjJvblcfFulTij2u99CqI.roa
Signing time: Mon 02 Jan 2023 14:34:56 +0000
ROA not before: Mon 02 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51262
IP address blocks: 193.84.120.0/22 maxlen: 22
193.84.123.0/24 maxlen: 24
193.84.120.0/24 maxlen: 24
193.84.122.0/24 maxlen: 24
193.84.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2d:61:f0:77:46:e4:6e:bf:4b:3e:15:53:72:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5
Validity
Not Before: Jan 2 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fddf425052326f6e571f16e9538a3daef7d0aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:73:de:60:fa:c6:43:0d:68:88:b5:9a:23:
8c:57:f1:1d:d3:0a:19:54:5f:ff:cc:34:b2:69:79:
88:6c:ec:1c:22:96:24:fe:fb:88:72:57:85:17:67:
65:81:46:d2:f1:d9:d9:a2:8c:61:2c:3c:b0:e2:eb:
f1:4b:7a:d4:92:f8:72:80:6f:e0:04:bf:1d:2e:ee:
b4:14:74:5b:43:99:3f:51:26:df:c0:8c:e1:94:aa:
fa:d8:7e:60:e0:80:d5:f3:e7:2f:da:ff:f3:7c:95:
76:18:0f:8d:4a:88:e7:6c:83:aa:eb:7d:32:2e:b4:
8b:5c:37:21:d0:0c:a5:4b:a5:8b:61:cc:19:a5:cf:
1c:05:b4:8f:9b:02:c2:6a:1d:ce:d9:22:e8:48:b0:
13:86:fa:f7:f3:c1:9b:9c:53:17:cc:ea:c5:4c:c2:
58:f8:40:c4:f3:49:05:f1:69:d6:c5:16:b2:13:d0:
87:dd:ac:bd:c1:2c:ba:ef:51:79:6e:ad:de:52:41:
26:e9:6d:e1:7b:b4:85:e5:8f:5c:9e:a3:21:1a:7a:
93:02:9b:b6:eb:31:8f:2d:2b:93:53:b6:03:75:37:
0d:2c:e5:46:0e:24:23:d3:4d:35:38:5b:7e:f0:5f:
05:d5:ee:4e:ae:de:e1:9a:5d:16:a8:81:30:6e:6c:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DD:F4:25:05:23:26:F6:E5:71:F1:6E:95:38:A3:DA:EF:7D:0A:A2
X509v3 Authority Key Identifier:
keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/D930JQUjJvblcfFulTij2u99CqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:2c:bf:d3:57:0f:11:5a:0c:71:c5:7d:23:2f:36:95:f5:01:
95:e8:02:64:66:66:28:36:de:00:66:b4:a2:71:ff:ad:c0:b1:
6f:15:6a:56:a0:18:3a:7d:64:95:b3:8f:bc:63:1a:ec:41:4e:
8d:15:35:15:ea:0c:be:00:8e:6f:cd:27:25:77:9c:43:4e:0d:
a0:12:d4:d5:5d:b6:7b:ad:ae:1c:37:bb:6b:3a:bd:7c:09:d2:
b7:99:24:cc:c5:4f:df:29:07:9b:43:df:44:c1:8f:2e:a3:22:
ea:48:22:05:ea:22:c4:bf:38:ef:f3:35:3a:a4:27:f7:2c:61:
3d:16:b7:1c:c1:6b:2a:35:f9:ad:6b:83:23:07:ca:64:fb:a7:
24:16:55:cc:43:a7:09:fc:1f:62:f7:02:75:ec:4a:36:33:c8:
e5:76:60:ab:1f:f4:19:42:f1:ee:95:49:d5:5d:6f:db:3f:69:
73:cf:24:7b:95:7f:d1:09:98:91:f2:91:ad:3a:e9:75:4b:ce:
17:a5:3c:47:4b:51:5b:bb:69:90:1a:57:6c:fc:0b:3b:6d:8b:
f5:41:f1:10:8c:3e:46:08:ff:5a:67:48:61:85:de:d7:a2:a5:
cc:ba:9e:d0:ab:49:f6:e0:08:f0:fc:66:1b:7c:4a:10:8b:12:
fa:9f:4e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org