Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qiQ5W_FXPm0jU9Gh1Dmno5_UJr0.roa
File: qiQ5W_FXPm0jU9Gh1Dmno5_UJr0.roa (raw, json)
Hash identifier: q9rT6M69xw+LFZhDeACBzQOGYFw8EmQkxi2SoqzgMf0=
Subject key identifier: AA:24:39:5B:F1:57:3E:6D:23:53:D1:A1:D4:39:A7:A3:9F:D4:26:BD
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0189CF6F7FB4916ABAB712D26A28B96DE9E8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qiQ5W_FXPm0jU9Gh1Dmno5_UJr0.roa
Signing time: Mon 07 Aug 2023 09:58:58 +0000
ROA not before: Mon 07 Aug 2023 09:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 217.74.16.0/24 maxlen: 24
194.32.123.0/24 maxlen: 24
45.135.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:6f:7f:b4:91:6a:ba:b7:12:d2:6a:28:b9:6d:e9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 7 09:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa24395bf1573e6d2353d1a1d439a7a39fd426bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:eb:57:95:3a:b8:5a:11:67:aa:75:4a:28:
a4:43:77:c7:3c:e4:d8:58:ed:ee:c8:2d:f0:b2:05:
9d:78:ff:15:48:ac:84:df:b6:7e:8e:b5:6c:57:c4:
39:90:7d:7e:b2:0a:31:c3:fd:9f:4b:9e:96:66:bf:
01:8f:dc:6a:c1:d1:61:16:86:b8:85:97:9e:b2:62:
ef:e8:fd:b3:15:a7:ec:6b:64:7a:1e:16:ec:9a:e2:
42:71:8d:47:03:7b:3d:18:23:44:fd:5f:cb:3b:56:
a9:29:9a:c4:2c:e8:97:f1:f3:c2:e2:cc:96:65:88:
81:a7:81:0c:0f:21:a4:63:08:5d:e2:ee:e4:df:af:
d5:de:89:0d:13:3b:21:e4:b4:c7:1c:6d:00:8e:77:
5c:ff:11:13:1b:c5:e6:91:29:f2:a8:ff:0a:be:be:
8e:7b:32:31:54:db:1e:c0:10:11:dd:7e:b9:ef:b4:
1b:e6:66:37:be:8a:d5:be:19:73:e4:eb:86:f6:99:
e9:13:6b:dd:54:c7:ca:34:aa:d0:43:d9:82:71:ce:
84:42:99:93:e3:8f:0c:7c:98:a7:12:f7:ca:a3:c0:
e5:03:76:5f:fd:c0:e0:25:b2:0e:6d:57:69:b9:10:
7f:34:03:93:36:e0:a7:04:f8:2d:52:a1:0a:a0:90:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:24:39:5B:F1:57:3E:6D:23:53:D1:A1:D4:39:A7:A3:9F:D4:26:BD
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/qiQ5W_FXPm0jU9Gh1Dmno5_UJr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.185.0/24
194.32.123.0/24
217.74.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:45:61:56:bc:41:9e:19:fa:cd:6b:48:57:a6:08:de:ae:e3:
d1:a6:4f:b6:d9:31:ed:90:68:91:2b:47:7a:42:8b:dd:c8:14:
6b:15:f9:57:e1:89:0b:7f:9b:a9:34:f5:36:dc:11:c8:77:55:
5d:dd:02:af:7a:a7:9a:7b:60:43:04:03:41:da:20:e4:01:2e:
e3:ba:f5:d5:9f:10:7c:60:97:97:1d:19:23:9f:c8:24:97:fb:
7e:53:2d:36:15:3e:72:01:85:d9:a6:42:d9:f1:0e:b5:d3:7a:
4c:5d:a1:37:0c:84:45:0e:90:32:f7:0f:3a:74:a9:09:6b:79:
b2:fa:65:a8:fc:a8:ac:11:dd:9d:e8:ee:49:56:c7:6d:36:d9:
42:ef:de:2a:9b:3e:5b:4c:d6:14:53:6f:a8:2d:7c:cb:ec:9a:
87:ae:a7:0b:ee:dc:03:da:3c:b4:b2:ad:21:2d:8f:dd:e3:e0:
4f:90:fe:14:dd:5a:33:ef:8d:c3:36:e4:c1:4e:fe:89:78:bd:
d3:3a:c9:29:db:fb:99:25:e8:36:b4:1d:3d:fd:a6:55:32:1f:
93:18:0d:2d:c8:1b:06:f8:1e:d2:7b:fa:e5:ed:57:90:b0:79:
49:16:57:2a:4e:3e:7a:da:f5:dd:52:0a:70:92:9c:3b:55:4b:
dc:b5:bb:e9
-----BEGIN CERTIFICATE-----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 at Tue Aug 29 18:05:02 2023 by rpki-client on console-ams.rpki-client.org