Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QgR8cB-np85az2mABSpzeWNGQ3I.roa
File: QgR8cB-np85az2mABSpzeWNGQ3I.roa (raw, json)
Hash identifier: 03K9HDQylmmhL3K1Rk4dKDgg4/vNPy/Tb5KYpEnP7HA=
Subject key identifier: 42:04:7C:70:1F:A7:A7:CE:5A:CF:69:80:05:2A:73:79:63:46:43:72
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B44670EB62F1FF8EB36E9754BC000DF7C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QgR8cB-np85az2mABSpzeWNGQ3I.roa
Signing time: Wed 18 Oct 2023 20:08:06 +0000
ROA not before: Wed 18 Oct 2023 20:08:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.8.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:67:0e:b6:2f:1f:f8:eb:36:e9:75:4b:c0:00:df:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 18 20:08:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42047c701fa7a7ce5acf6980052a737963464372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:0c:52:a4:a9:b7:c0:03:03:91:0f:21:59:
c1:06:d8:a1:2c:bf:0e:c5:c7:9d:02:6f:27:47:a9:
c9:6b:19:88:1d:12:e8:c7:d0:af:95:1c:f4:95:c5:
7f:d8:07:6c:23:42:c3:3f:ec:1f:77:9b:41:c2:cd:
e6:d4:f9:bb:ed:90:c5:ad:82:c4:33:cc:e0:84:4f:
37:87:17:9e:27:8b:7e:14:d3:8c:5a:fa:37:8f:d7:
c3:d1:dd:ad:80:a7:f0:28:88:c4:eb:1c:89:9e:cd:
6c:90:14:3a:59:39:0f:a8:0d:bb:20:e7:3f:92:c8:
ee:fc:14:cb:e1:04:17:28:cc:c9:32:2e:08:76:ca:
8f:e8:af:8b:40:cc:25:71:cb:ef:f0:fa:ea:92:31:
bc:b3:f2:e7:4e:80:9d:db:54:e1:e5:b2:99:c3:c6:
9a:a9:ba:34:71:b5:be:b4:ad:a0:00:4d:0a:26:ee:
90:c4:bf:ca:db:73:f5:66:d4:78:c9:aa:30:2f:3a:
cc:a2:46:f5:57:d3:76:24:dd:78:2f:44:cd:b7:a1:
49:72:9e:50:9b:b3:87:e2:32:ec:16:6e:62:b1:a8:
d9:5d:5d:c9:de:34:cc:5a:22:0f:35:aa:5f:6c:59:
96:e8:db:53:18:3c:f6:ec:2d:9d:6e:2f:2b:e6:de:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:04:7C:70:1F:A7:A7:CE:5A:CF:69:80:05:2A:73:79:63:46:43:72
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QgR8cB-np85az2mABSpzeWNGQ3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5e:64:c6:b3:f5:25:46:1a:b1:db:9b:c5:03:e0:ef:5c:66:
b5:db:68:3b:2c:c5:40:51:cc:69:03:4a:e2:ab:53:16:f6:b3:
85:d1:89:f5:4e:77:7a:b0:29:ca:29:ba:cf:79:83:bf:60:f1:
04:c4:6f:60:2c:38:4b:cc:f3:d0:4f:8c:5f:62:be:45:86:88:
36:8f:c4:95:8c:87:b0:9a:ff:38:1d:b7:f2:48:fc:e4:ea:4a:
86:df:21:8d:b9:34:19:63:38:c2:7f:c8:68:ef:e9:34:7a:61:
3b:28:fd:16:c5:26:8b:61:c4:fe:22:33:56:c3:71:18:ff:c0:
95:39:17:44:49:f1:d1:aa:70:24:8d:80:47:cc:e0:18:4e:83:
d4:26:b8:0a:b3:da:46:60:ac:9a:ee:77:67:ae:58:b3:3b:da:
70:4e:a2:53:f8:33:11:18:ad:2a:ba:ac:c6:51:fa:5f:26:c9:
b7:ea:00:b6:43:56:38:3e:e2:3d:d7:c0:03:f5:6c:d7:ae:01:
d9:8d:33:18:5e:94:4e:75:1f:61:8c:88:bb:24:3c:ae:bc:d6:
0c:76:21:52:0b:9a:1e:42:be:0f:58:d3:e4:85:b4:6b:b7:26:
cc:37:30:38:fe:d0:ea:97:c6:26:ad:3a:98:dc:8f:3b:41:1d:
0f:f3:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 09:13:34 2023 by rpki-client on console-ams.rpki-client.org