Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/QD0me_Ax1aViRmjIQvQTgKc6wTc.roa
File: QD0me_Ax1aViRmjIQvQTgKc6wTc.roa (raw, json)
Hash identifier: V/WAOwfoTCS+tUuSno2BUCyYSrmJDiN2UDGY7SJ0Ngo=
Subject key identifier: 40:3D:26:7B:F0:31:D5:A5:62:46:68:C8:42:F4:13:80:A7:3A:C1:37
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01899B28C14B0A923E5F8B5BAD8D2C4F6ECE
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/QD0me_Ax1aViRmjIQvQTgKc6wTc.roa
Signing time: Fri 28 Jul 2023 06:21:26 +0000
ROA not before: Fri 28 Jul 2023 06:21:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197644
IP address blocks: 45.149.94.0/24 maxlen: 24
80.246.237.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
80.246.238.0/24 maxlen: 24
80.246.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:28:c1:4b:0a:92:3e:5f:8b:5b:ad:8d:2c:4f:6e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jul 28 06:21:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=403d267bf031d5a5624668c842f41380a73ac137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:3f:fd:67:84:71:de:7c:e3:09:bf:66:31:
0e:16:26:66:84:ab:75:64:bf:49:ac:64:00:0b:c8:
2f:ec:00:39:3c:f9:6c:45:22:91:f1:40:54:83:27:
3c:3a:a9:2c:e1:d1:7c:f8:e7:1b:cf:94:60:20:29:
b4:ba:f2:7a:ff:16:f1:ec:0d:5f:7f:fe:71:91:a4:
2e:e0:bc:b2:c0:c6:78:bb:49:e7:ba:09:a4:89:de:
b2:62:40:97:33:dc:51:03:76:3d:08:9a:11:cd:b5:
09:a3:74:cd:1e:7e:06:bc:e9:86:73:5f:30:20:e6:
18:b8:ef:cd:83:d0:81:e8:66:dd:61:8b:a7:03:fe:
d5:24:03:43:26:9d:9e:99:15:63:76:8f:35:f6:64:
93:cc:3d:34:1b:be:4a:fd:8f:c5:08:4a:f1:6c:be:
82:05:a0:7a:4e:d1:f2:ed:fd:c9:98:24:7a:4b:85:
ea:6f:4e:5f:98:0a:24:da:54:9d:2b:68:58:cc:00:
15:63:e2:3a:8f:29:17:fb:ed:8c:5e:31:b8:70:0d:
0c:c2:56:63:94:8f:6c:1f:20:03:ba:44:d5:52:d5:
66:86:18:c9:49:98:14:44:14:95:12:36:cd:28:5b:
b7:a5:2d:85:7d:6b:91:11:de:8c:02:da:9b:7f:13:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:26:7B:F0:31:D5:A5:62:46:68:C8:42:F4:13:80:A7:3A:C1:37
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/QD0me_Ax1aViRmjIQvQTgKc6wTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
80.246.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:6c:00:ba:e6:fe:e7:7e:c7:7d:d0:66:46:73:ae:ec:83:ce:
df:1a:35:b5:37:30:f6:1a:2d:77:b2:9b:9f:d0:f3:67:4e:d5:
a4:bc:ab:ae:47:be:90:48:03:f1:32:f9:7c:53:1b:0f:cd:d6:
5f:38:2b:55:91:d7:87:51:7b:a0:04:19:47:7b:02:2d:38:e8:
36:53:ea:74:20:46:43:35:c7:c7:95:2f:14:28:4b:03:fd:62:
f0:b9:bd:0b:17:e9:7d:7f:79:70:6a:8b:1a:7a:b0:f6:74:f7:
8a:a0:a5:74:9f:00:79:2d:bd:53:56:35:6a:83:fb:1d:93:90:
59:79:92:e3:f1:62:54:01:99:07:51:24:bb:27:9d:9e:83:2b:
ec:05:96:2f:a6:c7:ac:24:18:19:b7:0c:9a:ba:25:91:e0:79:
86:66:18:b7:9d:6d:93:37:a8:7c:ab:29:fd:39:73:4a:1c:b6:
9b:e1:45:b9:1c:a9:ff:0f:35:44:9d:7e:f8:b8:9c:fc:a2:6e:
65:77:4a:2a:c5:c7:1b:f3:2f:68:44:e1:23:7d:cf:85:f9:2d:
6a:00:52:a6:b9:33:06:b6:30:93:d8:cc:55:f0:2d:17:6d:47:
58:e0:da:2c:44:cb:e1:75:57:d4:7e:2e:53:2a:27:78:f9:da:
1d:86:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 16:16:23 2023 by rpki-client on console-ams.rpki-client.org