Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_qb1WPLo-wRJC9rcOuwDzsARBEE.roa
File: _qb1WPLo-wRJC9rcOuwDzsARBEE.roa (raw, json)
Hash identifier: 7GE2WGWUT4wrRkicezPfqSMilHVogCzPYbSMea0kwt8=
Subject key identifier: FE:A6:F5:58:F2:E8:FB:04:49:0B:DA:DC:3A:EC:03:CE:C0:11:04:41
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAD6B40820D0F9F1BFB6F0FDF5AFEA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_qb1WPLo-wRJC9rcOuwDzsARBEE.roa
Signing time: Sun 01 Jan 2023 10:05:10 +0000
ROA not before: Sun 01 Jan 2023 10:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12381
IP address blocks: 192.121.121.0/24 maxlen: 24
192.121.86.0/24 maxlen: 24
192.71.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d6:b4:08:20:d0:f9:f1:bf:b6:f0:fd:f5:af:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fea6f558f2e8fb04490bdadc3aec03cec0110441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:f6:2a:a1:1c:f2:cb:cf:db:01:27:15:e4:
54:b6:86:8e:d4:27:46:63:e6:26:f2:dd:c9:f2:cc:
6a:19:7a:95:fa:82:21:a1:cf:0e:ce:36:6a:68:61:
56:84:a2:2f:f4:79:3b:8a:c9:75:7d:c2:1e:44:5c:
2f:04:c7:f4:ab:fd:3c:2f:f9:b1:9d:b6:ae:f0:1a:
28:90:12:3d:ea:46:6c:8a:83:2e:86:9a:7b:66:d4:
84:d3:84:91:87:d3:24:65:4c:9a:88:21:f8:a9:1d:
6e:b0:f4:96:13:05:73:c6:b1:95:c7:c5:9e:3c:fb:
a2:98:51:0f:d2:17:0f:ec:c9:f3:0b:f7:52:29:bf:
b3:42:1c:5f:0d:39:36:f0:30:4c:65:fc:9d:e0:9b:
e8:2c:3f:34:e0:95:d6:cb:78:cc:bf:16:88:6e:16:
5e:a0:4b:da:ee:58:9f:c2:bd:f6:96:54:40:d6:6b:
c1:ce:6f:95:94:a5:f3:f4:a2:f2:ef:0b:9c:71:2a:
86:c7:fd:b1:83:db:7d:90:f7:16:71:8d:9a:a1:39:
69:04:a6:e8:7f:63:9c:db:9b:07:89:38:9c:21:b4:
99:b9:81:dd:dd:99:8b:27:96:f9:e1:83:38:09:b7:
9e:80:6d:76:f2:9d:e9:e4:c0:0e:91:84:be:28:ba:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A6:F5:58:F2:E8:FB:04:49:0B:DA:DC:3A:EC:03:CE:C0:11:04:41
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_qb1WPLo-wRJC9rcOuwDzsARBEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.84.0/24
192.121.86.0/24
192.121.121.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b1:fc:f3:57:c4:a9:98:46:8e:c4:3f:d4:4d:f8:65:3c:d9:
f9:1e:56:26:da:ff:2e:73:f9:13:5b:64:6e:57:77:9d:5e:f1:
61:9a:30:f8:5d:d4:2e:5f:2e:cf:b3:33:ed:01:82:1b:1d:a8:
d5:c4:7e:61:68:ec:4c:3c:36:90:de:43:69:a1:4c:38:27:85:
66:1f:c3:5c:41:b0:73:8c:20:67:21:6c:86:64:da:d6:47:4f:
63:bf:2c:7d:2d:98:85:bb:b7:d6:d1:f5:69:7f:22:15:87:ca:
a8:93:36:27:5d:d4:9b:74:18:cc:d5:9e:c4:b2:b0:74:2e:e9:
19:e3:56:74:3f:f5:eb:16:03:dd:af:34:03:0c:58:16:c6:24:
fb:7e:07:31:0e:0a:42:2d:e4:75:fd:d3:9c:84:c6:0a:37:a2:
c6:32:f5:bd:fc:d5:47:5b:bd:32:18:d5:6e:0a:ad:44:30:07:
73:91:40:f1:13:9a:30:cc:41:ad:50:79:63:e2:0b:02:2f:32:
c3:ee:c2:d8:8b:f3:33:43:ea:89:01:8e:3d:31:a5:8c:25:9b:
bf:c8:ad:2b:ef:4d:3d:50:6b:e0:f0:80:2f:01:77:3b:d7:14:
a4:88:0f:1f:6e:24:69:4d:06:c0:09:b9:84:2f:54:4d:7a:c8:
3a:de:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org