Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QDD1WCzqzO2IK1sRLxsM0aHqzAQ.roa
File: QDD1WCzqzO2IK1sRLxsM0aHqzAQ.roa (raw, json)
Hash identifier: CjWn7C1o9q53vGbaWY34aH5OOCw95Yob12q+3tGP7Eg=
Subject key identifier: 40:30:F5:58:2C:EA:CC:ED:88:2B:5B:11:2F:1B:0C:D1:A1:EA:CC:04
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018998214F7A178AD397619A81BB20C57000
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QDD1WCzqzO2IK1sRLxsM0aHqzAQ.roa
Signing time: Thu 27 Jul 2023 16:14:27 +0000
ROA not before: Thu 27 Jul 2023 16:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 83.147.223.0/24 maxlen: 24
178.253.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:21:4f:7a:17:8a:d3:97:61:9a:81:bb:20:c5:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 27 16:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4030f5582ceacced882b5b112f1b0cd1a1eacc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:ec:e3:5f:42:5f:12:8f:4c:ba:2a:e7:f6:
91:c8:cb:43:cc:c5:9e:22:f9:e6:5f:73:e2:43:bb:
ed:20:b6:fe:a9:cf:e7:b9:0a:20:2f:10:1b:1c:70:
4a:24:16:b0:07:17:69:ad:07:90:f2:e1:e0:f8:da:
ef:9a:24:ee:13:7b:3e:39:85:62:e1:27:55:1e:d0:
e3:c1:c6:ad:35:95:16:31:0c:42:bf:16:a6:96:4b:
b9:49:8d:8b:9d:b6:4d:a6:d0:62:be:62:36:a6:1d:
10:aa:34:a6:bd:41:fe:cc:91:21:94:f1:7d:86:63:
1b:94:97:8d:8d:6a:db:cf:7d:d0:b5:85:d6:7d:63:
13:57:80:67:5b:cc:84:e7:2e:79:99:08:52:79:d4:
96:1c:85:93:57:4c:dc:e6:2b:b3:61:f6:1d:8a:5f:
89:20:5d:fc:cb:e1:8c:6f:67:27:5d:ce:8f:f8:2f:
3b:73:d0:85:cd:68:f8:53:65:a1:59:b1:56:50:0e:
68:f9:1b:80:2b:5a:86:05:68:7d:7b:b5:5e:38:19:
d0:b2:d3:26:52:b1:82:84:8a:4a:56:5f:bc:e9:97:
8f:2d:9d:ac:65:e8:d0:09:30:83:16:58:db:b0:79:
81:45:27:d0:7a:f4:1c:a1:0d:9f:5d:79:37:35:6b:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:30:F5:58:2C:EA:CC:ED:88:2B:5B:11:2F:1B:0C:D1:A1:EA:CC:04
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QDD1WCzqzO2IK1sRLxsM0aHqzAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
80:bb:95:a9:c5:b2:75:f7:0d:47:3e:44:98:74:44:92:24:72:
d3:33:45:d6:a9:b1:dd:e8:31:95:24:5f:0f:13:c5:e6:6f:22:
c6:dd:c6:c9:1c:35:09:f3:72:66:78:ca:91:70:25:99:94:17:
6a:1a:7c:01:bc:6f:6c:b7:ac:01:a5:fd:3a:7a:5b:41:ab:4d:
eb:3f:22:40:ce:e7:0a:9a:66:94:7c:3a:7b:5d:b3:1e:bf:bb:
98:86:c4:a3:a3:b6:28:e2:c5:88:fe:4e:1b:94:b0:ad:5b:e8:
83:ae:c2:01:49:cf:19:48:5d:e5:a7:89:54:65:cb:85:e4:60:
c4:46:4d:16:d5:42:29:6b:6d:a9:5c:9b:89:32:6f:52:a6:2b:
2d:f6:c8:0f:35:66:57:20:98:57:c8:ca:16:8f:09:b5:62:ae:
e4:b3:e9:de:2f:19:fc:85:dc:aa:cf:25:70:7d:5d:3b:2c:4f:
77:92:87:94:bd:50:41:8e:03:ce:71:2b:89:20:bf:7c:ac:88:
b3:a7:95:5a:c9:35:1f:02:75:55:d9:c0:cf:f8:32:38:85:79:
0f:24:8d:e6:03:16:0d:de:24:79:5d:f4:fe:e2:90:ba:8c:46:
75:5b:4b:bd:7b:ee:8b:bb:d9:bf:cc:4a:57:57:78:d5:b1:78:
3c:b4:99:12
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 28 20:47:03 2023 by rpki-client on console-ams.rpki-client.org