Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qzc2lg_w2tApW_oTlPKmwh8GZdg.roa
File: qzc2lg_w2tApW_oTlPKmwh8GZdg.roa (raw, json)
Hash identifier: V9EMoW9LBtYmdDWlibFIaZuQ3MTJEFM6kzGBuPEUEXo=
Subject key identifier: AB:37:36:96:0F:F0:DA:D0:29:5B:FA:13:94:F2:A6:C2:1F:06:65:D8
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01856ECB74CCEF34BFF8D7B168E7051E8B1E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qzc2lg_w2tApW_oTlPKmwh8GZdg.roa
Signing time: Sun 01 Jan 2023 19:25:05 +0000
ROA not before: Sun 01 Jan 2023 19:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39569
IP address blocks: 86.106.81.0/24 maxlen: 24
89.47.116.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.40.82.0/23 maxlen: 23
89.42.142.0/23 maxlen: 23
188.241.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:74:cc:ef:34:bf:f8:d7:b1:68:e7:05:1e:8b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 19:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab3736960ff0dad0295bfa1394f2a6c21f0665d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:77:0a:d5:8b:bc:b5:29:bf:e5:cc:87:e4:
ae:46:56:89:0c:57:8b:db:4e:cc:12:8a:41:8d:c6:
64:d1:68:b4:88:ad:04:38:82:92:21:09:a7:35:3d:
78:c2:96:ed:d9:7d:3a:34:cd:11:77:a8:57:ca:e8:
08:f0:31:5b:b3:8e:ab:c8:15:10:34:9b:65:6f:df:
23:a8:7b:30:4f:1a:13:e7:51:25:a1:08:64:a5:16:
10:2d:95:6d:94:ad:6a:e6:e3:af:a2:a0:85:38:e9:
6a:8c:86:58:14:61:71:e8:07:22:34:52:9f:df:59:
44:0a:08:59:1a:3a:a1:91:b2:90:29:58:5b:f2:af:
39:7c:6a:df:f3:2b:4f:1a:51:1a:aa:22:7d:47:f5:
2e:52:24:6d:a2:44:61:5c:f4:fd:0d:af:7c:2f:cd:
9c:bf:0e:cf:97:57:1b:1d:8e:b6:74:25:1a:08:38:
2e:9a:5e:98:43:86:1d:df:a9:7c:04:44:b9:a1:be:
4e:59:41:8e:ad:cf:19:ef:b0:ff:8e:d2:2b:c5:6a:
14:41:7b:e3:90:20:f1:9f:a6:bb:22:0d:02:26:b5:
bb:88:93:c2:18:d0:ee:4e:e8:da:75:e9:ec:cb:a2:
56:95:c0:8c:ea:36:b8:be:26:90:1a:97:3e:e1:cf:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:37:36:96:0F:F0:DA:D0:29:5B:FA:13:94:F2:A6:C2:1F:06:65:D8
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qzc2lg_w2tApW_oTlPKmwh8GZdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.81.0/24
89.40.82.0/23
89.42.142.0/23
89.47.116.0-89.47.118.255
188.241.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d0:3b:cb:df:0a:97:a5:bd:f6:cc:82:c1:fa:8f:01:49:5f:
c6:13:76:4e:7f:f4:81:eb:4c:57:ac:1a:ef:d7:c8:dd:88:64:
ab:bb:58:bd:85:27:07:7e:da:75:3b:91:cd:cc:0a:fd:b3:0e:
d3:0d:09:d6:cd:20:16:2f:b4:b4:28:39:b6:d1:2b:d5:02:c3:
b0:b9:d7:50:45:5b:9a:5a:1f:69:c0:a4:12:d6:22:9c:cc:03:
8b:74:b2:06:d3:20:a8:9b:76:d1:b9:4e:ce:b3:f0:e8:e2:86:
b1:a0:9d:0d:44:b6:d7:aa:bf:6e:89:07:90:ec:b0:19:3c:b5:
1a:23:87:7f:a5:71:24:08:17:ac:e8:aa:e8:8c:7b:3b:9c:35:
c9:f0:3a:29:a3:10:40:87:d9:df:e3:be:ea:4f:c7:78:30:f2:
55:83:fc:f0:61:dc:e9:21:54:01:19:5f:53:66:5f:0f:54:e5:
49:69:2d:9a:bd:3b:e0:12:5b:88:41:8f:f0:62:f2:85:47:6c:
a8:96:31:a8:db:e0:59:a0:c9:48:ec:ed:2f:48:fa:fb:c7:af:
4b:5a:fe:9b:e6:4f:11:60:1b:c0:ad:e0:2f:c8:f2:89:f5:20:
31:0e:00:29:35:8e:5f:1b:37:0f:8c:24:0a:32:fb:b1:f1:63:
f8:19:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 14:02:18 2023 by rpki-client on console-ams.rpki-client.org