Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/QXtQ-KGVS_2V0NTMykmnmpRR_Fo.roa
File: QXtQ-KGVS_2V0NTMykmnmpRR_Fo.roa (raw, json)
Hash identifier: /FEFNqTDZsY5keA4eqBRZ1yD5ftdpWfI8xBUhuse/Hc=
Subject key identifier: 41:7B:50:F8:A1:95:4B:FD:95:D0:D4:CC:CA:49:A7:9A:94:51:FC:5A
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 018A7444FD7A6489BF92F68B1CBFDDC2BFF0
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/QXtQ-KGVS_2V0NTMykmnmpRR_Fo.roa
Signing time: Fri 08 Sep 2023 10:09:52 +0000
ROA not before: Fri 08 Sep 2023 10:09:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202715
IP address blocks: 194.170.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:44:fd:7a:64:89:bf:92:f6:8b:1c:bf:dd:c2:bf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Sep 8 10:09:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=417b50f8a1954bfd95d0d4ccca49a79a9451fc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:5f:98:7b:a3:37:67:d6:af:99:21:22:71:
06:6e:f9:c3:f0:a3:65:3a:39:b2:b3:0d:4a:45:8c:
95:c3:6a:57:2e:04:57:a3:97:18:39:ff:a9:2b:7d:
c4:d2:f0:64:e3:03:f7:ae:d8:0e:6b:5e:57:e4:e4:
df:69:1f:17:7f:0d:a1:35:98:c5:bd:b5:19:aa:af:
f8:81:88:42:36:64:8b:6c:f5:16:75:85:6b:c6:00:
15:ee:cc:a2:b1:b3:61:87:8e:ed:ee:d2:e5:63:e0:
d7:22:fb:57:35:c7:c4:b7:52:e9:f7:41:cf:d5:4d:
57:5f:9f:0f:82:65:c9:bc:6d:58:c2:7a:95:69:72:
a5:ad:3c:f2:87:85:f9:ae:fd:92:3e:13:00:95:2b:
b2:db:ab:75:27:4d:4c:47:64:1d:56:f4:09:63:22:
8e:02:77:76:48:3d:8e:2c:5f:6e:40:b6:36:ee:98:
68:e1:38:1e:26:ae:f7:df:be:f2:6d:10:63:3f:ab:
32:59:d4:6e:d2:2a:06:ee:df:bd:f5:9b:e1:89:46:
dd:25:dc:54:75:92:f0:20:85:ed:01:da:fa:4d:9d:
2f:27:ae:25:34:a7:48:f0:43:64:a2:7b:ca:ab:07:
85:b1:3d:96:55:d8:a9:29:5a:2d:27:58:4a:ce:70:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7B:50:F8:A1:95:4B:FD:95:D0:D4:CC:CA:49:A7:9A:94:51:FC:5A
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/QXtQ-KGVS_2V0NTMykmnmpRR_Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.170.103.0/24
Signature Algorithm: sha256WithRSAEncryption
33:45:ff:36:bc:27:02:58:1e:f4:88:e2:21:aa:6f:54:fa:54:
c7:37:c5:02:eb:70:33:e5:cf:a1:65:97:d0:12:55:e4:86:56:
b5:76:04:ed:7e:37:27:26:cf:5d:ea:38:57:e6:1e:5c:b4:4d:
b8:f4:c3:0f:5d:26:58:e5:73:d0:85:65:6c:d6:7d:7f:ae:76:
bf:c3:77:b4:39:b4:b1:15:1d:8d:1d:6f:b8:91:dc:f7:e4:d3:
f5:75:e5:cc:c4:09:63:4b:e9:24:cd:17:38:94:40:dc:6b:96:
be:8d:99:82:b5:f2:c0:49:d8:b6:8c:a4:c1:20:df:23:e2:5f:
c2:22:14:8c:88:17:bd:eb:e0:28:dc:ee:c2:48:ce:e4:43:00:
7d:98:6c:03:08:19:97:7b:1f:bc:8b:f5:13:4b:25:4b:d8:e7:
33:1a:72:81:13:34:78:e4:82:28:42:41:e5:a2:3f:94:8e:05:
33:d2:5f:6c:8a:99:97:36:ba:46:16:f9:9f:2d:ec:2d:7d:5a:
77:53:f8:08:1a:d9:8f:03:a2:ae:e0:20:ad:08:c6:c1:3e:b3:
08:71:b3:1d:9b:1f:77:3c:e8:49:d2:73:86:74:ef:56:a5:82:
67:a6:8f:3b:85:1e:5d:1e:e9:b0:6a:85:3a:a0:d3:8b:9c:2b:
e0:00:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:06 2024 by rpki-client on console-fra.rpki-client.org