Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/cqAdk6D7-NvT5XwJJFZ8NnrMHJo.roa
File: cqAdk6D7-NvT5XwJJFZ8NnrMHJo.roa (raw, json)
Hash identifier: mvE/CiJnmDvtfGF6oS6K8ZmNjV5up2xcIbPMA4QtbVs=
Subject key identifier: 72:A0:1D:93:A0:FB:F8:DB:D3:E5:7C:09:24:56:7C:36:7A:CC:1C:9A
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 0188E3DAF058099235E535453028E6D1B1C1
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/cqAdk6D7-NvT5XwJJFZ8NnrMHJo.roa
Signing time: Thu 22 Jun 2023 16:05:56 +0000
ROA not before: Thu 22 Jun 2023 16:05:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199698
IP address blocks: 185.86.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:da:f0:58:09:92:35:e5:35:45:30:28:e6:d1:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jun 22 16:05:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72a01d93a0fbf8dbd3e57c0924567c367acc1c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:7a:f9:8f:98:e8:ba:d3:14:67:74:5b:7f:
c8:75:02:6c:17:0f:e5:a1:16:97:79:b0:7a:e6:33:
27:ce:8c:2d:a3:23:19:3a:50:08:1a:e3:07:9c:86:
8c:c3:5f:ac:2b:12:ac:2a:78:2e:89:05:e7:63:e2:
52:bb:25:39:0e:22:89:28:f7:92:04:40:fd:77:7c:
60:f9:e9:17:18:67:b1:20:90:84:56:ed:94:a3:ab:
f5:4a:20:f4:61:8e:e4:00:95:59:74:4b:02:33:bc:
9e:28:5b:f9:6c:0d:8d:88:50:a5:0b:2e:6d:62:bd:
4a:0e:ee:e3:1e:52:5a:95:6a:58:30:dd:98:25:0e:
92:58:1f:f1:ac:6a:26:52:16:ef:d4:02:62:e1:2a:
9b:59:4c:a6:3d:1f:53:52:b2:4d:72:5d:a4:16:e8:
5c:dc:4e:13:31:5d:37:f8:3c:e8:08:b0:76:a1:b9:
6d:ba:f3:47:49:50:92:bf:53:0f:14:a6:c9:ce:79:
6f:72:8d:8e:08:f5:25:3f:39:a9:e9:3e:98:ed:53:
c0:a0:e6:79:b0:6e:c0:86:87:23:db:cd:78:c4:55:
72:1e:cb:b0:76:6c:91:b3:aa:98:9a:c0:d4:ab:16:
bb:95:65:b3:1e:e1:73:27:fb:16:5c:62:a9:af:6c:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A0:1D:93:A0:FB:F8:DB:D3:E5:7C:09:24:56:7C:36:7A:CC:1C:9A
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/cqAdk6D7-NvT5XwJJFZ8NnrMHJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.193.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8d:6d:f6:a7:73:8a:6f:c1:72:f0:23:78:ee:e8:9f:ba:81:
4c:e9:f4:9e:4b:cc:42:f7:98:6d:6b:b8:9b:ea:ae:8c:cf:e3:
f7:5a:3b:4b:1b:2a:d1:3a:23:05:52:0b:f8:c3:32:c5:03:17:
43:52:8c:69:24:1a:36:24:17:c3:23:ca:db:a0:74:e0:60:eb:
61:da:1d:4a:9a:4f:79:d7:d7:5e:4d:77:6c:77:25:d5:c4:e8:
67:20:8b:0b:eb:97:0f:be:43:06:e4:9d:12:cf:98:75:4f:17:
a8:45:5a:41:f8:7b:88:09:25:91:b5:58:96:8d:a7:ff:b4:55:
08:d1:99:98:5d:a5:5b:f6:ad:4a:c7:f4:65:16:17:8f:5c:d4:
2e:9c:9c:a7:de:0c:f7:5f:5d:93:09:2a:9a:d8:a2:9a:cb:16:
6f:ab:ed:0a:4c:90:78:cc:99:6e:2b:62:84:6a:d9:f3:c9:f4:
ce:01:0f:07:16:9d:b0:83:b1:a4:b3:2a:dd:7f:4d:70:5f:48:
e6:cc:0e:1c:25:a4:fa:61:a9:ac:35:c8:a0:9a:00:90:0d:e4:
53:39:40:41:74:1a:ef:6b:b2:05:9f:53:6c:29:7e:cd:21:49:
1a:2a:ed:c9:40:01:35:d9:26:60:ce:21:2e:70:b6:26:8e:b1:
5c:e2:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-fra.rpki-client.org