Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/qDzNSvFAGF9xLHnoMlqufM9uTTw.roa
File: qDzNSvFAGF9xLHnoMlqufM9uTTw.roa (raw, json)
Hash identifier: pJBHzZiEC/p62EAWh7upAezygcO6FUhz2Eb/f3Ng3xo=
Subject key identifier: A8:3C:CD:4A:F1:40:18:5F:71:2C:79:E8:32:5A:AE:7C:CF:6E:4D:3C
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 01856FCB9C858ACEE368F9E45696A3CCB464
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/qDzNSvFAGF9xLHnoMlqufM9uTTw.roa
Signing time: Mon 02 Jan 2023 00:04:52 +0000
ROA not before: Mon 02 Jan 2023 00:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24991
IP address blocks: 81.93.192.0/21 maxlen: 21
81.93.202.0/23 maxlen: 23
81.93.201.0/24 maxlen: 24
81.93.204.0/22 maxlen: 22
2a03:da00:1000::/36 maxlen: 36
2a03:da00::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 16 Feb 2023 06:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:9c:85:8a:ce:e3:68:f9:e4:56:96:a3:cc:b4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Jan 2 00:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a83ccd4af140185f712c79e8325aae7ccf6e4d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:fe:32:96:64:bc:87:2e:52:76:a5:d2:f4:
27:7f:81:ef:61:68:7e:17:7a:de:9c:64:b2:38:1e:
db:0c:d1:55:0e:be:38:74:2d:92:cb:b5:45:08:ed:
d6:7e:2e:2b:3a:fd:f9:05:79:44:da:68:49:f4:1c:
e6:85:82:dc:24:4e:9b:40:82:6a:c0:4d:bc:92:93:
21:3c:0a:e9:9e:ff:45:d3:cf:83:66:b9:7b:0a:b0:
25:c9:f9:ad:c5:d7:aa:b1:54:12:6a:5c:55:94:b3:
d5:e0:7a:fc:e8:78:be:34:ff:14:3c:02:2e:97:6f:
cf:a3:5f:d0:ea:e1:ac:40:70:59:ae:16:33:da:a9:
b5:81:61:9e:20:ca:4c:97:82:36:64:36:55:c8:2c:
b9:6c:f9:fc:90:eb:0e:2d:68:2e:b8:6e:bf:22:9c:
38:49:57:e5:8a:4c:c0:ad:e4:dc:73:2d:54:6a:cc:
dc:ef:67:e9:ab:a0:13:a2:de:9b:83:78:20:2d:a4:
fc:9e:bf:74:c0:e1:12:c8:8c:9e:fe:05:8d:b3:47:
9b:e3:79:4d:5e:c5:78:88:44:16:44:95:ce:40:62:
bd:91:6b:45:cf:b0:fe:65:d3:e2:5a:38:5a:30:34:
0f:cc:2f:f6:8c:61:1a:db:2b:c1:d0:24:1d:9a:a4:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3C:CD:4A:F1:40:18:5F:71:2C:79:E8:32:5A:AE:7C:CF:6E:4D:3C
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/qDzNSvFAGF9xLHnoMlqufM9uTTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.93.192.0/21
81.93.201.0-81.93.207.255
IPv6:
2a03:da00::/35
Signature Algorithm: sha256WithRSAEncryption
d0:9f:23:22:b4:89:f8:c4:39:59:10:4d:c3:4c:9e:2f:d3:50:
c5:65:c6:97:ab:2c:00:d7:02:53:6f:5a:30:fd:94:d6:8a:f5:
ba:f2:a4:2d:7f:f1:85:42:9a:fe:8a:af:f1:76:48:ea:a9:da:
32:8d:45:0f:8c:03:a0:cb:37:9d:ac:ac:2c:92:d9:f2:41:37:
1b:74:f2:4b:8f:e8:02:49:9c:6d:b5:18:ff:a2:31:a8:36:13:
88:e9:5e:c2:94:0a:b3:32:da:20:2c:9e:32:1a:c7:b4:bc:4e:
09:85:98:14:56:66:86:1a:73:13:fc:70:71:80:35:34:f4:0d:
36:39:2b:a6:5c:e7:49:a6:7c:16:d9:60:25:3d:0f:59:d2:e0:
89:2f:06:83:dc:f3:85:bc:8a:5f:5b:d3:c0:8c:13:7e:7e:bc:
32:e5:d1:24:05:aa:6b:3d:1a:f5:8d:95:0e:73:78:13:89:a9:
5c:19:37:aa:8b:6b:73:f7:a2:eb:35:64:6c:ee:46:28:09:21:
b1:0e:f0:fc:0f:07:a4:9a:05:26:d7:c3:6e:d1:49:0b:e3:eb:
9f:01:ab:d3:9b:c4:a0:89:31:1e:01:9a:b9:47:2a:d7:91:b4:
74:2b:ef:17:91:75:be:d6:7c:2b:03:27:2a:f6:b2:cb:52:80:
ee:17:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:44 2024 by rpki-client on console-ams.rpki-client.org