Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QnvQ6vNtwYyU6lVmmQDzMPLid1A.roa
File: QnvQ6vNtwYyU6lVmmQDzMPLid1A.roa (raw, json)
Hash identifier: Bx/95ZdXi9xBajVy4nkUbdhTPssppZTm7yg1yp4Ip34=
Subject key identifier: 42:7B:D0:EA:F3:6D:C1:8C:94:EA:55:66:99:00:F3:30:F2:E2:77:50
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CDA7F7A5BEF38C91395BDFA65EB0A
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QnvQ6vNtwYyU6lVmmQDzMPLid1A.roa
Signing time: Mon 02 Jan 2023 03:35:57 +0000
ROA not before: Mon 02 Jan 2023 03:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 83.147.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:da:7f:7a:5b:ef:38:c9:13:95:bd:fa:65:eb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=427bd0eaf36dc18c94ea55669900f330f2e27750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:ba:dd:da:b9:ae:d9:ec:e7:04:d9:4c:21:
0f:fa:0d:a3:e4:fb:f4:07:7d:ca:3d:22:4a:ab:c2:
b3:87:99:82:37:08:8f:f1:7b:04:46:94:38:b6:ce:
2b:14:19:e3:47:3e:6e:e9:ec:29:f9:8b:36:00:ba:
e2:f6:3c:4e:6f:60:be:14:e5:bb:6d:d2:80:d6:3a:
ae:48:ed:ac:46:b9:8e:46:35:ef:43:cb:1d:e3:1f:
82:fb:56:a5:48:9e:a0:8e:e7:09:4b:a5:44:cf:9d:
14:e5:83:72:52:6f:5c:e7:7f:57:53:b5:48:98:b5:
2a:e6:9b:ac:27:7d:bd:eb:3d:16:07:89:1b:c7:cc:
d6:f4:5e:b0:28:fc:98:1c:48:66:d0:3d:55:15:4b:
1c:f1:d0:22:1f:46:9f:fa:5b:85:a6:ed:e2:94:23:
47:f8:79:ed:98:26:64:5c:4e:78:ac:44:f6:08:25:
cf:35:7f:f3:0b:c6:d4:36:52:56:2f:4d:f4:ea:ba:
d4:d0:84:47:17:0a:05:d7:b2:33:96:91:6f:2d:03:
ad:38:99:3e:a8:24:d9:68:d7:db:6d:53:a5:af:f4:
98:e2:dd:67:e0:fc:5b:81:f7:e2:ae:55:da:b9:4b:
51:04:94:18:05:10:2f:69:d5:88:55:c6:cc:39:74:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:D0:EA:F3:6D:C1:8C:94:EA:55:66:99:00:F3:30:F2:E2:77:50
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QnvQ6vNtwYyU6lVmmQDzMPLid1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
Signature Algorithm: sha256WithRSAEncryption
62:e1:72:64:df:61:ef:05:c6:71:a7:ad:7e:f1:17:cf:95:99:
21:48:5e:4b:f5:4f:c6:28:d5:09:99:51:9e:ae:55:9d:7b:08:
db:e9:de:75:9b:34:dd:8b:a0:b9:09:2d:45:50:37:c8:ac:be:
93:f9:21:8a:16:ca:a2:3b:f0:93:3f:be:7d:b6:bb:ef:52:34:
82:60:1c:f8:e0:a9:a6:f7:e3:68:28:d8:bf:55:0a:82:d9:96:
19:cf:de:1e:86:81:ef:fd:d8:dc:df:1e:39:4d:56:e3:fb:d1:
7b:56:c4:fa:99:6e:39:9f:a4:7f:2a:d3:32:35:9e:7b:49:35:
e3:31:82:76:d8:23:48:ff:b5:40:1d:50:15:7e:30:3c:de:1e:
f2:b1:4a:0d:c9:97:4e:b6:b0:be:50:21:c3:c7:86:3f:7e:75:
99:fe:bf:ec:0d:91:08:b8:63:26:1e:6d:87:37:e3:a2:d3:5b:
1b:a0:1a:15:86:4e:97:5d:4b:79:12:fc:6d:2f:44:80:46:71:
d5:93:af:9d:21:e0:15:53:48:fa:bc:1f:a4:50:2f:32:3d:41:
f0:df:2d:6e:7e:d1:ad:08:d6:9d:ce:ed:1f:f6:b3:4b:f4:cc:
a3:e2:e7:f9:58:f6:e5:99:3d:4c:f3:2f:a9:90:d4:81:e0:86:
64:a9:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:36 2024 by rpki-client on console-ams.rpki-client.org