Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/sQMfdzXKMAdT5k-ohCb-KX9vbWo.roa
File: sQMfdzXKMAdT5k-ohCb-KX9vbWo.roa (raw, json)
Hash identifier: yRhT1YVLOoTuY2xpFLZ1z3m4NpDBjiNdgALOiIl6SpM=
Subject key identifier: B1:03:1F:77:35:CA:30:07:53:E6:4F:A8:84:26:FE:29:7F:6F:6D:6A
Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Certificate serial: 018C6394D02B0C1C7976D577C7A68688B600
Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/sQMfdzXKMAdT5k-ohCb-KX9vbWo.roa
Signing time: Wed 13 Dec 2023 14:29:06 +0000
ROA not before: Wed 13 Dec 2023 14:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47914
IP address blocks: 91.247.0.0/19 maxlen: 32
93.157.232.0/21 maxlen: 32
91.245.128.0/19 maxlen: 32
176.108.192.0/19 maxlen: 32
109.206.128.0/19 maxlen: 32
2001:67c:2704::/48 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:94:d0:2b:0c:1c:79:76:d5:77:c7:a6:86:88:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Validity
Not Before: Dec 13 14:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1031f7735ca300753e64fa88426fe297f6f6d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:60:99:d5:26:1b:2e:ab:00:b6:01:cf:78:57:
69:c5:93:65:f1:f5:ea:6c:38:1b:6a:2d:1f:6f:a0:
84:2a:f2:54:fa:f2:0b:60:b2:b3:b0:24:69:a3:57:
20:4a:c4:d0:ab:77:49:f5:55:10:84:04:ea:d0:05:
fc:4f:72:69:50:93:ce:12:5b:9a:45:03:1b:d2:1a:
27:a2:fc:3a:bd:66:f1:b5:b0:c7:80:88:95:71:26:
4e:20:ad:bb:c8:87:47:a6:a3:90:3c:ae:07:09:d6:
7a:9a:3f:13:ca:e1:19:5b:b8:1f:2b:91:8b:18:fe:
87:f6:4e:b4:de:89:10:b3:0d:3e:08:e0:40:b9:41:
64:8f:86:03:39:fe:29:1c:7e:4a:4f:b8:c6:8c:a7:
7f:8d:c8:ce:0e:35:60:69:f0:11:4e:f4:9c:c4:1a:
21:27:0f:05:a2:e2:46:65:79:f7:df:c7:9e:45:97:
81:5f:02:4a:0a:36:81:da:dd:96:e6:fd:60:a3:b2:
2e:68:98:4d:91:c4:e8:92:3a:37:42:a2:7b:cf:26:
c5:76:37:33:ea:60:6c:2b:c8:2b:7d:a3:9c:bd:5f:
47:ba:8c:b8:38:eb:e9:5a:4a:9d:2d:22:24:88:fa:
7a:62:06:cf:e8:a4:de:5a:95:b4:50:14:84:a6:74:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:03:1F:77:35:CA:30:07:53:E6:4F:A8:84:26:FE:29:7F:6F:6D:6A
X509v3 Authority Key Identifier:
keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/sQMfdzXKMAdT5k-ohCb-KX9vbWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.128.0/19
91.247.0.0/19
93.157.232.0/21
109.206.128.0/19
176.108.192.0/19
IPv6:
2001:67c:2704::/48
Signature Algorithm: sha256WithRSAEncryption
0a:e5:c1:55:c9:c1:d2:11:58:70:5b:a5:5e:19:65:08:c7:78:
e7:b2:4c:81:ec:6a:23:90:46:36:31:95:09:9d:83:47:4d:5f:
f7:66:ee:86:17:39:4e:14:9e:c6:80:10:5a:a5:57:45:11:de:
17:6d:82:7c:96:bb:fc:f3:6a:e6:6f:58:14:63:23:db:c6:d2:
78:78:d6:5c:f8:a2:97:b5:67:23:1a:c9:30:6c:fd:fa:5a:34:
85:69:22:0f:cc:3d:e9:67:56:12:a6:14:dc:2a:f9:56:b7:f2:
48:f1:d3:f1:9c:7f:96:e5:eb:21:fa:8c:d7:3f:a3:86:e6:f0:
e1:14:9a:51:79:b5:d7:11:cd:84:9c:96:77:3d:dd:ba:a1:62:
d9:2c:3e:a1:19:59:e5:e4:4e:4c:23:4f:02:e5:b6:ed:75:d3:
42:b8:2e:b8:af:ad:3d:5d:10:43:16:07:dd:d7:4a:0e:18:6d:
16:16:f5:a4:70:c9:0a:cc:17:ac:e1:8a:49:9d:47:ab:5a:d8:
03:ee:d1:94:9a:8b:66:fd:5e:30:2d:4d:2d:45:4e:d5:ef:24:
5b:e4:ca:67:93:77:51:2d:ed:48:0c:08:ce:55:c3:96:23:b4:
7f:52:a7:11:87:65:ca:68:d2:04:9d:bc:3d:4a:c7:83:65:fe:
b3:49:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 18:07:28 2023 by rpki-client on console-fra.rpki-client.org