Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/C_qLY1cgejP-EpucXbB-cmuBMWI.roa
File: C_qLY1cgejP-EpucXbB-cmuBMWI.roa (raw, json)
Hash identifier: kqcT/xLdPzRU88uRHRJmCD145hAzq5Jq9Zh2zbWgqIA=
Subject key identifier: 0B:FA:8B:63:57:20:7A:33:FE:12:9B:9C:5D:B0:7E:72:6B:81:31:62
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D66443FB6A8B3D5B9E7CDD1BC6B2F1F
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/C_qLY1cgejP-EpucXbB-cmuBMWI.roa
Signing time: Sun 01 Jan 2023 12:54:56 +0000
ROA not before: Sun 01 Jan 2023 12:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46436
IP address blocks: 83.126.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:44:3f:b6:a8:b3:d5:b9:e7:cd:d1:bc:6b:2f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bfa8b6357207a33fe129b9c5db07e726b813162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:70:a4:54:ac:6c:f7:ba:e6:ff:80:46:c4:
3f:ea:df:5c:f3:4b:b2:64:82:ea:be:f9:b7:7c:8c:
e2:a4:e3:cf:54:69:58:e6:81:4d:a2:8d:ad:0a:90:
e6:dd:67:53:be:a0:94:21:41:9f:8c:e9:06:3e:c3:
8b:b9:c0:91:99:e4:fd:c9:3a:25:51:08:b2:c1:2b:
69:da:81:f7:92:a3:67:8c:42:3a:a3:34:19:de:db:
60:b9:38:64:43:c8:55:01:c6:71:e8:4d:83:9d:cf:
f1:ce:d8:64:96:c8:84:52:37:56:86:db:93:c1:b4:
c6:24:1b:98:b5:50:e4:0e:74:72:3c:a8:de:bb:aa:
bf:e2:4b:b2:2b:0d:38:a8:0f:0a:a1:24:25:a3:b1:
ba:a1:d8:0b:a9:8f:f5:9e:46:45:f2:4f:55:80:cf:
a3:ec:33:09:17:75:fb:4e:2f:f6:33:78:9c:35:e4:
af:57:7f:a9:67:b7:80:49:d6:31:0b:47:c0:a7:40:
4f:13:25:d5:81:08:57:61:b2:93:fb:cf:c8:6a:3b:
fc:d5:e7:6f:49:b7:4f:79:ca:a6:31:03:a8:3b:3c:
11:11:4b:4c:5f:04:90:49:e8:2a:f7:90:a0:60:72:
16:28:4b:9c:ff:d7:9f:6c:08:e0:16:79:35:be:76:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FA:8B:63:57:20:7A:33:FE:12:9B:9C:5D:B0:7E:72:6B:81:31:62
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/C_qLY1cgejP-EpucXbB-cmuBMWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.126.54.0/24
Signature Algorithm: sha256WithRSAEncryption
96:66:b6:59:e4:db:85:19:70:c1:f0:da:8c:01:bd:eb:c4:82:
a2:33:49:e0:f9:e0:a7:26:8e:dd:d7:c6:23:23:50:e7:ac:c0:
1e:e2:55:ee:97:c8:08:33:54:27:55:cd:41:d2:92:3d:fe:c6:
4e:44:04:36:e3:3b:2b:d5:57:63:98:e1:6b:8b:2a:60:15:bc:
02:b2:3b:71:ba:05:61:7b:79:5c:e4:55:9f:8e:dc:3f:c7:bf:
28:b3:15:82:2d:02:ce:7a:e4:d2:46:f6:6a:17:ad:7a:03:d5:
80:42:c0:61:a3:e3:9b:dd:f9:20:10:cf:42:6e:af:ef:a3:33:
58:87:8b:34:d3:54:4c:97:f9:94:d1:6f:19:b9:05:61:f5:6e:
c9:1a:f4:87:1f:79:be:95:ed:5b:4e:55:92:9d:89:bb:5f:34:
6a:1f:d5:bb:d7:c6:9f:ea:f5:e9:17:af:54:79:52:92:17:4e:
0b:0b:a5:63:94:ae:82:af:6b:b6:e0:86:50:47:db:4d:c7:df:
3e:67:79:37:7a:fa:77:af:74:67:ae:00:77:76:a2:47:ae:81:
2a:2c:4d:33:39:6d:7e:8e:dd:c3:82:e9:66:f2:e6:d0:6a:da:
89:dc:fd:8f:ad:c5:30:b1:69:02:02:7e:36:5c:60:f7:e4:97:
b8:59:a1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:34 2024 by rpki-client on console-ams.rpki-client.org