Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QD5HP4cp1CEmjk4fd0FLGeBf6xM.roa
File: QD5HP4cp1CEmjk4fd0FLGeBf6xM.roa (raw, json)
Hash identifier: oJhRQ6jSiM111mzsopK1tAKXSlTMOB5qMXT+THhZHgk=
Subject key identifier: 40:3E:47:3F:87:29:D4:21:26:8E:4E:1F:77:41:4B:19:E0:5F:EB:13
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0188D3B2B793FCC3BABB43C6A4A957B279A6
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QD5HP4cp1CEmjk4fd0FLGeBf6xM.roa
Signing time: Mon 19 Jun 2023 12:48:04 +0000
ROA not before: Mon 19 Jun 2023 12:48:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198080
IP address blocks: 92.114.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:b2:b7:93:fc:c3:ba:bb:43:c6:a4:a9:57:b2:79:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 19 12:48:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=403e473f8729d421268e4e1f77414b19e05feb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:f5:20:ef:2d:f7:0a:cd:de:2d:92:35:95:
d6:6b:be:1c:f8:5b:be:fd:53:a9:0a:13:65:cc:d0:
12:28:66:7d:d7:29:80:45:9d:e0:fa:8c:b1:ef:95:
09:18:2f:3e:ba:61:28:9a:a1:14:04:0d:de:12:ba:
69:6b:59:f6:d8:d7:49:6f:5b:e2:da:f4:05:5d:15:
2a:2f:e9:ce:f1:c4:9a:cf:6d:41:ba:51:ad:0d:25:
a3:5d:62:cb:87:a3:e6:58:87:45:5f:5e:56:a8:c2:
be:c4:41:14:ac:76:f5:fe:73:6b:c5:d2:f7:35:96:
66:e3:18:cd:3f:03:99:66:47:25:b2:f3:59:dc:8c:
7f:20:8d:7c:4a:70:0d:9c:5d:9b:5b:21:da:e3:08:
5e:ea:0d:f9:0f:f0:6d:25:fb:5b:f7:14:82:7a:8e:
57:a8:ed:4b:07:87:9d:ed:9f:6e:c5:17:cf:14:c8:
91:4e:15:b2:e4:bc:d6:0b:d8:cc:02:ea:72:49:af:
4d:be:65:22:be:21:1d:96:bd:08:ef:a2:f1:b8:84:
7c:02:9a:2e:78:9a:ce:a1:2c:dd:dd:f7:c7:c0:08:
5f:8a:c1:3e:6b:01:d1:f7:03:1f:ca:ed:08:43:7d:
48:4a:64:e6:b0:75:8d:9d:d0:ee:2e:2f:50:ec:b4:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3E:47:3F:87:29:D4:21:26:8E:4E:1F:77:41:4B:19:E0:5F:EB:13
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QD5HP4cp1CEmjk4fd0FLGeBf6xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.84.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2c:ea:bf:d3:25:07:0b:1a:4b:6d:79:db:3d:7d:c7:69:8e:
57:cb:e5:f9:4d:0d:57:98:17:98:1b:5d:be:f2:6b:64:77:2b:
d4:d1:b4:a5:8f:24:63:d2:bc:19:37:12:b3:82:3a:ed:18:4f:
c5:20:a9:fd:83:52:0a:24:1a:59:dd:2f:4e:ed:e5:4b:c3:47:
4d:0d:5d:7c:1b:1b:d8:35:11:52:f3:5a:3c:4f:9d:1e:6f:56:
d8:c0:ef:af:eb:cf:24:ae:ac:c7:cf:57:b6:68:3e:fa:12:86:
07:08:5a:d1:fe:29:c2:af:5e:a9:3d:24:0f:3e:59:e0:f5:5a:
1a:3f:ad:a1:c5:25:03:a1:0d:83:ea:fd:df:8a:27:24:4b:2a:
27:ed:cb:cb:fc:ab:79:2e:c5:15:7e:d7:c6:9f:a7:ee:69:be:
46:fd:60:1a:85:79:3f:ca:a0:da:e1:16:b7:ba:66:3f:0c:3c:
31:67:f5:4a:b7:84:ff:ae:26:bd:d5:47:62:dd:5b:ef:62:71:
93:a5:c9:2e:bb:e9:d3:52:7f:ee:23:53:5d:10:b0:e2:63:2e:
6d:88:72:6e:5d:5d:a2:31:48:ff:90:5f:6f:20:e5:3c:d4:d7:
56:dd:00:b2:c3:fc:e6:83:b1:ce:10:24:01:14:11:06:e9:04:
0f:92:2c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:18 2024 by rpki-client on console-ams.rpki-client.org