Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qzgTa9MXCsEuQCeSStV6J-yIEZg.roa
File: qzgTa9MXCsEuQCeSStV6J-yIEZg.roa (raw, json)
Hash identifier: kCJ072xpRS1jMVlcAetHQRf/jI/JaGa/qH5NzKU+mbI=
Subject key identifier: AB:38:13:6B:D3:17:0A:C1:2E:40:27:92:4A:D5:7A:27:EC:88:11:98
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018573F18EFE536DDE7A167768DD7C894D9E
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qzgTa9MXCsEuQCeSStV6J-yIEZg.roa
Signing time: Mon 02 Jan 2023 19:24:48 +0000
ROA not before: Mon 02 Jan 2023 19:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6906
IP address blocks: 81.198.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:8e:fe:53:6d:de:7a:16:77:68:dd:7c:89:4d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 19:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab38136bd3170ac12e4027924ad57a27ec881198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:f3:d7:d7:4d:99:48:60:4f:c7:8e:a3:cd:
1c:e3:dc:4b:f3:cd:81:fe:a9:5a:83:ed:fb:c9:49:
1c:77:d9:2e:e5:29:a4:99:2d:0c:77:9f:06:f5:b6:
54:f6:0d:13:ef:fc:58:2e:84:cb:d5:89:9d:24:09:
36:95:f3:a5:7d:f3:86:f8:40:ae:4c:f9:73:38:0e:
0a:21:15:89:1d:1c:e0:79:fa:f4:f9:8b:67:f1:a5:
4c:37:ce:98:b6:f7:c1:4d:20:b5:3d:ea:3d:be:14:
99:09:40:0e:fa:a9:f9:9a:b4:e6:e0:1c:5a:02:08:
af:d2:96:18:66:c9:20:7a:80:06:18:4c:4a:69:d2:
95:14:6b:02:28:a7:dc:49:8b:db:7b:22:ea:16:d6:
e4:46:85:b4:fe:f0:0a:8b:a8:b6:ba:0f:b9:7b:fc:
00:a4:0f:40:88:1f:cd:90:2e:3b:dc:f5:48:3c:5c:
49:96:e7:90:5a:29:5a:ec:80:a8:29:57:8d:ea:ba:
e9:88:70:03:e6:00:4b:d1:66:05:5d:8e:ec:2e:04:
3e:44:e9:9c:f3:da:cc:29:6d:e2:e1:00:ed:b6:35:
f1:e6:56:3b:3d:22:2f:e9:19:3a:0c:79:45:85:8f:
56:18:e7:af:0f:3a:ea:94:63:cb:75:ab:65:a7:9b:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:38:13:6B:D3:17:0A:C1:2E:40:27:92:4A:D5:7A:27:EC:88:11:98
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qzgTa9MXCsEuQCeSStV6J-yIEZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.174.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f2:71:77:eb:80:f6:68:b0:a2:f1:c1:52:51:95:3d:d7:8a:
c0:e8:d6:7c:1d:9d:09:c4:e0:8f:5a:27:a3:f8:f4:7c:87:1a:
a0:cf:01:a3:15:b3:45:dd:37:19:fb:6a:e8:0a:38:0f:49:d9:
41:bb:8f:29:4d:34:80:bb:e8:e5:98:e8:6a:e7:d4:bb:f5:a5:
29:6b:46:85:25:c8:b5:52:a0:4d:6b:7e:e3:74:52:7e:5e:7f:
20:e9:aa:03:54:54:85:4d:61:c1:42:de:9d:97:25:ee:c4:2f:
3e:5c:47:aa:68:7a:a5:16:29:43:25:78:c6:c9:0d:09:f8:2f:
32:b0:ff:ef:02:45:57:4f:d5:d9:c9:9f:68:e5:15:25:db:2b:
a1:3b:e3:5f:6a:2c:9a:be:c6:87:c5:e6:7b:29:81:86:b1:6c:
d4:f6:1b:b2:fa:25:b4:76:be:d8:fb:19:2e:26:65:9f:f9:85:
bd:1b:0b:91:66:fe:49:7f:07:c7:d7:63:ba:37:a9:ab:c1:46:
2f:c6:56:26:a8:db:41:89:2a:b6:b7:44:f0:f7:75:f7:70:d2:
66:39:b4:fb:47:0e:5d:fc:7f:bc:34:a0:56:97:af:40:1f:54:
b7:cb:73:86:bb:ba:69:df:38:7a:67:fd:06:58:00:49:a0:1b:
45:55:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:12 2024 by rpki-client on console-ams.rpki-client.org