Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/qMkQzix8G1e6a-KTSbHlDFWv66Y.roa
File: qMkQzix8G1e6a-KTSbHlDFWv66Y.roa (raw, json)
Hash identifier: MLxo1B/VzRjHqaAShkOJQAdhJgQdMfS7rp5mYB5rRjA=
Subject key identifier: A8:C9:10:CE:2C:7C:1B:57:BA:6B:E2:93:49:B1:E5:0C:55:AF:EB:A6
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 01856FC24B7D1E01F6ECE35CAD41BD76E0C2
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/qMkQzix8G1e6a-KTSbHlDFWv66Y.roa
Signing time: Sun 01 Jan 2023 23:54:42 +0000
ROA not before: Sun 01 Jan 2023 23:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 193.25.32.0/20 maxlen: 20
192.108.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:4b:7d:1e:01:f6:ec:e3:5c:ad:41:bd:76:e0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Jan 1 23:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8c910ce2c7c1b57ba6be29349b1e50c55afeba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:57:5b:d0:58:0d:fc:5d:17:d4:ce:7c:cd:
8a:06:c7:ce:42:a0:54:d8:ef:16:4a:a1:73:10:14:
04:47:eb:c9:d1:1f:91:80:5b:bf:c8:08:95:77:69:
f1:e4:b8:b1:77:1b:71:67:74:85:85:6d:85:da:b9:
0c:b8:25:4e:40:6c:b5:78:80:ed:5b:43:f3:41:51:
e7:53:71:f5:04:10:8f:40:8a:57:cc:b1:a4:0b:b2:
36:6b:d3:57:c5:f4:6a:f3:dd:90:57:ae:ef:3e:44:
aa:a1:02:53:0c:55:d6:87:9d:cc:20:c9:ad:ae:8e:
00:94:26:6c:41:dc:b5:e4:db:58:38:23:82:ba:ca:
d5:6b:0e:37:0d:4b:1e:8c:42:a5:65:d0:5f:4c:8c:
35:66:91:7a:3a:df:81:73:94:2b:08:d5:82:54:66:
9e:82:a0:47:e3:d2:07:9e:5f:62:d0:5d:f7:bb:d7:
a1:7f:42:d3:c3:f8:63:be:1d:b6:fd:dd:47:ac:1f:
59:8f:1f:44:14:dc:6a:fe:0b:0f:ff:da:3c:d4:f2:
05:98:0c:4b:2f:73:65:47:0c:df:65:48:76:3d:d8:
d0:d5:35:68:5e:02:01:e1:a8:f6:49:2f:42:8b:78:
f0:88:3a:83:a3:63:cd:74:71:17:0a:e9:7f:3e:07:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C9:10:CE:2C:7C:1B:57:BA:6B:E2:93:49:B1:E5:0C:55:AF:EB:A6
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/qMkQzix8G1e6a-KTSbHlDFWv66Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.32.0/24
193.25.32.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:31:dd:ff:46:ec:66:a2:7a:5a:3b:8f:5d:05:a4:aa:32:b8:
18:c4:86:14:92:7b:04:8f:fd:76:3b:89:e9:1f:1e:8c:87:01:
39:74:a6:ac:98:2c:90:0f:27:4c:9e:d3:09:b7:a7:7b:0b:96:
b9:9f:b0:01:83:51:aa:a3:cd:38:57:ca:8a:cc:e3:12:da:19:
9a:53:b8:d0:66:48:5f:61:03:f8:3c:c4:5e:5d:83:44:5c:33:
61:06:4d:51:27:1d:82:de:04:0e:e2:1b:9e:02:94:59:f8:34:
d4:2b:ac:9b:5c:cb:3e:14:5a:9c:50:60:9d:97:de:27:c1:6b:
11:3d:3f:64:ee:3d:e3:c1:b4:23:8d:d4:aa:f3:1a:40:75:2f:
e0:ca:9f:3e:bd:d1:73:fa:64:78:f7:f6:26:fa:7c:60:20:97:
de:aa:af:64:ba:3e:45:6c:d1:b9:aa:e6:1b:66:2d:b0:ee:27:
10:50:84:6a:11:25:48:9c:47:71:b2:70:b5:42:82:7a:82:17:
74:61:64:ff:d0:26:ed:e3:27:bd:14:0f:f7:fd:ad:51:6d:1d:
3e:0a:8c:45:d4:0b:98:b7:3a:f5:92:f2:ca:30:f8:dd:97:88:
81:e6:b6:2d:ff:4a:18:62:0d:01:08:21:b5:1e:90:d2:6f:04:
db:e8:3a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:30 2024 by rpki-client on console-fra.rpki-client.org