Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qYPl0jx2ogeeK-ZtJgXHmkk-QGA.roa
File: qYPl0jx2ogeeK-ZtJgXHmkk-QGA.roa (raw, json)
Hash identifier: n1OjA0t3zofgisXHjqI6ausPCl9z1qdHaqHIFjrN1IE=
Subject key identifier: A9:83:E5:D2:3C:76:A2:07:9E:2B:E6:6D:26:05:C7:9A:49:3E:40:60
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0188527DF00A8065264D528E143D6BE90E41
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qYPl0jx2ogeeK-ZtJgXHmkk-QGA.roa
Signing time: Thu 25 May 2023 10:39:24 +0000
ROA not before: Thu 25 May 2023 10:39:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31418
IP address blocks: 81.45.21.0/24 maxlen: 24
81.45.22.0/24 maxlen: 24
81.45.20.0/24 maxlen: 24
81.45.23.0/24 maxlen: 24
195.53.129.0/24 maxlen: 24
195.53.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:7d:f0:0a:80:65:26:4d:52:8e:14:3d:6b:e9:0e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: May 25 10:39:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a983e5d23c76a2079e2be66d2605c79a493e4060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:fa:02:88:3f:da:08:c3:a5:fe:be:7b:6f:
fb:d3:96:fb:04:e9:2a:53:a8:ec:ba:68:8b:7b:b2:
15:bb:f6:69:10:bf:3d:8b:c4:d6:e3:fe:2d:94:b9:
9b:93:00:ea:6c:b0:71:16:64:f3:61:61:dd:c3:f5:
db:29:72:67:8f:28:d7:9a:16:46:d7:fa:4f:1b:93:
91:68:5e:ca:a0:47:4d:f5:ec:e4:b6:36:91:14:67:
b8:e2:77:f8:a0:5e:52:4d:1e:b2:cf:7f:7d:96:e3:
b8:05:dd:bf:41:da:66:3a:91:10:78:16:6d:c0:c1:
f9:e2:1f:f0:18:9c:7c:fc:f9:cc:8a:6c:b2:b9:f8:
8b:b2:a8:65:25:4c:72:7c:43:1b:6e:45:38:fa:9b:
47:2c:fb:58:9e:aa:f1:f4:3b:11:90:f9:ad:e9:67:
23:e6:fc:13:9a:54:8a:4d:e5:36:d3:1c:1b:d3:20:
de:fe:85:44:d7:b7:34:24:37:ed:7d:7e:a6:b3:99:
54:15:35:5a:fe:04:8d:49:8f:8b:9a:e2:f0:cd:6d:
3d:03:87:d0:03:c2:51:c0:f4:1e:ba:b3:d4:de:8f:
64:f4:67:9c:55:5a:aa:83:85:3d:99:82:99:25:36:
fc:d2:1b:ec:88:f8:df:f0:29:71:3f:3c:bc:99:9c:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:83:E5:D2:3C:76:A2:07:9E:2B:E6:6D:26:05:C7:9A:49:3E:40:60
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qYPl0jx2ogeeK-ZtJgXHmkk-QGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.45.20.0/22
195.53.128.0/23
Signature Algorithm: sha256WithRSAEncryption
af:49:b8:4b:28:f0:92:d3:be:5f:69:eb:db:98:6a:70:d1:3b:
45:c9:c6:c0:85:26:dd:af:fa:ca:5f:5c:01:bc:e6:a7:d6:71:
5d:60:27:b1:8a:59:19:57:b1:e1:f1:6d:74:0c:58:ec:a4:ac:
49:3f:24:5b:55:1b:c3:00:1b:23:4b:4d:c8:8f:f3:44:45:be:
98:f0:bf:4f:6e:10:4b:fc:5e:bd:81:94:42:51:97:f4:93:a3:
32:88:bf:b4:dd:13:d8:ce:b8:c8:c1:6d:d2:35:0a:fa:55:c4:
18:6e:c0:74:9c:d7:31:03:b7:e2:2f:a0:5d:42:9c:69:e8:34:
8c:55:5f:08:31:10:42:93:24:b0:0e:99:b5:f1:79:f6:32:39:
1e:3f:fa:ac:31:cd:6d:3a:c9:d9:97:5c:54:78:a2:28:6e:a5:
16:3f:d1:7c:56:dd:ca:bb:70:41:e9:ac:9f:bd:33:b9:a5:80:
c6:91:cc:45:95:43:aa:e4:65:85:4b:8f:56:08:4f:78:3e:8a:
f5:ab:c7:ce:7a:1f:20:7a:6a:46:0d:43:a4:cf:38:d2:81:43:
ea:24:a7:e0:59:e7:b0:c4:e3:48:72:9c:37:b9:94:e2:6e:09:
80:4c:d2:32:7e:b3:05:db:e4:9c:52:f2:d0:5c:85:ab:89:4c:
65:7c:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:35 2024 by rpki-client on console-ams.rpki-client.org