Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/QtHguGxbEGF4ZjVpKe1sDWBIwe4.roa
File: QtHguGxbEGF4ZjVpKe1sDWBIwe4.roa (raw, json)
Hash identifier: rKUreQPjRgwmWDz0spGdFKq6J5CDTh2ZiKPQYQrasXM=
Subject key identifier: 42:D1:E0:B8:6C:5B:10:61:78:66:35:69:29:ED:6C:0D:60:48:C1:EE
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 018573FDF54B06CB903A8F074ED6B4273DEE
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/QtHguGxbEGF4ZjVpKe1sDWBIwe4.roa
Signing time: Mon 02 Jan 2023 19:38:21 +0000
ROA not before: Mon 02 Jan 2023 19:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.10.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:fd:f5:4b:06:cb:90:3a:8f:07:4e:d6:b4:27:3d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Jan 2 19:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42d1e0b86c5b10617866356929ed6c0d6048c1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:7e:c9:8b:dd:27:9e:2d:ee:e9:02:5b:f8:
06:12:c3:ea:bb:ed:29:16:44:dd:3b:55:aa:a2:5e:
7b:a3:10:95:55:0d:c3:3d:ed:22:36:78:75:e9:a2:
42:4b:ad:f7:55:ba:b8:bd:01:30:04:a6:dc:ec:e9:
f8:89:2b:25:a5:14:e4:32:b5:91:b6:15:c7:e7:3e:
fa:ce:86:dc:b8:15:f5:6e:b4:fc:0d:a7:ca:1c:0d:
3e:6b:f0:1e:37:8b:cb:26:b8:2e:8b:b2:13:ce:79:
1e:24:fb:69:b2:d4:2b:a2:4c:fb:a3:c4:8b:82:79:
fb:82:f7:0b:67:20:15:14:39:85:db:0f:fe:8b:45:
9d:26:0e:fd:f5:d2:87:87:d8:a1:23:2d:e9:15:f1:
c5:b0:0a:20:74:11:2f:a5:29:5c:f8:00:1c:3e:c1:
56:b0:46:6e:51:81:0c:1c:b0:ac:91:11:38:ab:40:
c1:50:59:a0:d6:ba:fc:d0:ea:88:e5:25:84:a1:a0:
4b:42:ab:ea:61:84:58:de:95:2d:c8:90:28:fb:9d:
0c:4c:ce:07:3e:e8:8c:64:36:6a:c1:1d:e9:43:61:
58:5c:6e:25:cf:0b:b8:d9:40:59:85:2e:21:50:6b:
ea:39:61:20:86:c5:d2:3b:db:23:84:5d:00:66:64:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D1:E0:B8:6C:5B:10:61:78:66:35:69:29:ED:6C:0D:60:48:C1:EE
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/QtHguGxbEGF4ZjVpKe1sDWBIwe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.123.0/24
Signature Algorithm: sha256WithRSAEncryption
44:bf:d0:f2:e7:5b:09:7c:93:df:f6:cb:1b:c6:c3:95:fb:40:
b3:3c:f9:63:63:ec:78:f1:48:08:b1:40:68:07:af:e8:07:5f:
00:03:99:dd:1d:dc:99:0f:7b:7b:d6:3d:16:e8:e6:51:5e:23:
ad:2d:ec:b9:ee:9a:21:ee:65:18:47:0c:f8:59:75:f2:ef:79:
6c:6a:2d:5c:0d:7b:b6:71:46:91:ae:db:42:12:2d:eb:1b:fc:
93:e6:55:e5:a7:b9:00:7e:f0:1a:91:70:37:83:7a:ff:a6:7f:
21:fa:eb:98:7a:01:79:0c:3c:d6:70:67:40:35:3c:f4:e5:4c:
f2:ec:5a:6a:75:8c:b7:82:70:7e:ff:b0:fc:29:da:b0:cc:51:
3c:91:fb:f5:3d:29:9e:44:ce:e5:60:b8:49:d3:06:1d:97:06:
89:f4:39:e3:3b:e4:c1:8b:2c:90:df:23:2d:b5:45:ac:53:48:
0a:86:b8:4c:65:ea:85:b8:e8:68:b2:c5:e0:e4:31:2e:93:62:
78:85:b6:08:04:a1:a5:5c:1d:f6:79:96:a5:af:e2:4e:39:57:
cc:c8:5c:2f:2a:d5:83:76:8a:93:0b:5c:be:58:b3:a0:b9:d2:
c7:08:50:36:41:95:58:f9:c5:80:a7:4a:bf:ad:ef:05:b1:2f:
ef:db:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 10:19:22 2023 by rpki-client on console-ams.rpki-client.org