Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Q3T161SAaPE1kKarmDVgkQAlEpI.roa
File: Q3T161SAaPE1kKarmDVgkQAlEpI.roa (raw, json)
Hash identifier: sas1lN/1B6TsvlXQbqRnFNht/8lMmIMckjOw3GDnii0=
Subject key identifier: 43:74:F5:EB:54:80:68:F1:35:90:A6:AB:98:35:60:91:00:25:12:92
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 01876D2918C16E7198312BD84D60F50CB74A
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Q3T161SAaPE1kKarmDVgkQAlEpI.roa
Signing time: Mon 10 Apr 2023 21:53:42 +0000
ROA not before: Mon 10 Apr 2023 21:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 188.214.234.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 00:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6d:29:18:c1:6e:71:98:31:2b:d8:4d:60:f5:0c:b7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Apr 10 21:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4374f5eb548068f13590a6ab9835609100251292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:b2:b3:4d:8e:bd:ff:58:c1:7a:82:b5:6e:
b7:23:f2:63:8f:62:17:00:5c:d4:bf:71:9c:44:b9:
be:a7:d8:9c:2a:46:34:0f:b0:83:0e:0c:8d:26:ef:
d5:38:f4:86:77:ed:1d:76:b1:54:4e:f1:bd:e9:64:
56:f8:7c:ee:3f:f7:56:20:03:db:4c:6b:16:9a:7f:
6f:3c:5a:e3:82:5d:e5:64:89:25:d3:3a:85:2b:9c:
6c:5e:90:50:c3:51:45:29:fe:e4:91:f5:68:b6:57:
4c:07:20:ed:ef:14:1d:ec:b9:77:8f:87:c8:fc:cd:
c1:b6:ca:09:4f:22:42:23:34:ca:14:61:76:21:a5:
63:a7:2f:13:8b:5a:ff:21:fe:b9:82:83:90:1e:a1:
1d:60:df:2e:19:c2:08:d2:e4:f3:d7:7b:e6:d6:29:
08:86:5a:4a:b0:30:b2:0c:60:ec:ea:47:fc:2f:8f:
82:9b:ef:34:f6:69:65:60:83:4e:e7:a2:a5:43:9a:
db:83:32:3f:5c:c4:37:cf:eb:ff:e2:98:a3:68:45:
07:4d:b8:85:27:9f:21:cb:12:ee:49:43:d4:8b:53:
f7:dc:d3:95:da:73:9f:41:4e:bc:e6:14:ab:a7:d5:
ae:1d:85:92:fb:38:8b:99:6a:48:15:e5:f9:18:fe:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:74:F5:EB:54:80:68:F1:35:90:A6:AB:98:35:60:91:00:25:12:92
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Q3T161SAaPE1kKarmDVgkQAlEpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.234.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:11:c0:f0:5d:f4:ec:77:59:f3:e4:d4:4c:8d:a0:52:44:99:
b4:50:bc:6e:32:28:9a:2a:0b:e3:32:c5:9f:2d:69:56:1b:e3:
4f:9b:fe:c5:11:af:2e:a2:2e:a6:ea:3c:64:d0:97:19:68:ee:
be:82:91:20:3f:d9:1a:c6:b7:f6:db:08:50:ff:6f:36:ad:2d:
f8:56:88:74:9e:e0:25:17:f4:95:de:2b:63:e7:8f:2b:91:49:
18:da:e1:d8:db:ee:c6:1e:cd:c6:01:19:22:39:28:d6:f1:06:
8a:55:b4:fa:0b:d0:18:bb:8d:72:31:ab:f7:d0:34:4b:9d:3b:
19:d3:b1:5a:73:ec:6e:b4:dd:39:ff:52:15:33:66:0d:1b:4b:
e4:3b:fb:0d:7b:e4:a0:93:92:cd:d0:00:5e:67:94:88:14:77:
0b:9c:aa:88:fa:e2:fe:41:65:41:97:90:4b:77:76:cb:c8:b3:
40:a3:b9:14:af:fc:5b:86:cb:31:92:6c:49:13:93:de:cc:6f:
93:5e:5b:5c:6a:86:b0:e7:bc:63:00:84:ce:6b:d1:d8:ce:8d:
1b:ed:9e:de:b2:7c:00:11:81:a6:5f:80:45:e7:0b:75:dc:5d:
02:60:92:9b:13:25:54:a3:5a:e1:7c:da:a6:05:1c:86:c4:f3:
e7:0d:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org