Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/qPCXZxgUrIbNzWYaRqIWU_43GiM.roa
File: qPCXZxgUrIbNzWYaRqIWU_43GiM.roa (raw, json)
Hash identifier: LizUqiHgZct1qEXz347IVJ8xaSr82aXo0TmJqwtUUn4=
Subject key identifier: A8:F0:97:67:18:14:AC:86:CD:CD:66:1A:46:A2:16:53:FE:37:1A:23
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018ADFF0E0CDF002C47FA6226B82CEC0DBC0
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/qPCXZxgUrIbNzWYaRqIWU_43GiM.roa
Signing time: Fri 29 Sep 2023 07:56:59 +0000
ROA not before: Fri 29 Sep 2023 07:56:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 91.92.33.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:f0:e0:cd:f0:02:c4:7f:a6:22:6b:82:ce:c0:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 29 07:56:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8f097671814ac86cdcd661a46a21653fe371a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:20:a9:cd:c8:16:68:03:17:d6:2f:cd:e9:
8a:75:d1:37:98:78:bf:5b:d9:fb:4a:00:9e:2b:e4:
26:d6:bb:ac:25:c5:d5:0f:db:60:aa:ff:c2:dc:07:
06:a1:6a:ef:64:49:4a:27:23:ea:d6:30:53:04:84:
07:8d:be:cc:67:0c:63:52:31:5a:70:44:89:55:ef:
35:ac:47:9d:91:05:1c:41:e0:14:6f:b1:2f:c4:e1:
10:fa:c1:ce:1f:52:c7:70:2b:6a:61:17:65:2c:82:
32:9a:b1:1a:57:7a:5a:5b:1a:ec:0b:e3:5a:a6:e5:
06:e8:6f:a7:53:c5:3c:16:a1:3e:e3:1d:30:0a:97:
1f:33:4f:29:c3:e8:3f:94:64:aa:97:ed:c3:41:f9:
bf:5c:53:ac:bd:e4:b8:9e:93:39:28:8b:d9:ae:d4:
60:20:75:b7:c5:cb:b7:2f:9b:d8:4a:dd:88:d6:f3:
1b:0d:1a:2b:76:d3:0d:03:bc:3f:aa:36:a5:69:01:
3e:6a:10:dd:f2:11:c7:dc:cd:0e:08:92:2f:2b:f0:
40:e0:ff:e1:5b:30:7e:0b:c2:b7:f8:a7:0f:07:60:
a3:fb:85:6f:16:e2:0b:b9:25:2f:8c:2f:33:f4:c9:
95:bd:68:71:91:8c:a3:34:6c:f4:e1:c7:00:82:96:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F0:97:67:18:14:AC:86:CD:CD:66:1A:46:A2:16:53:FE:37:1A:23
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/qPCXZxgUrIbNzWYaRqIWU_43GiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.235.0/24
91.92.33.0/24
91.92.49.0/24
93.152.206.0/24
93.152.208.0/23
93.152.211.0/24
93.152.216.0/23
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:be:5b:b1:b5:a6:50:ee:1e:ec:3d:1c:e3:af:72:4f:9c:18:
a1:e0:97:8b:f3:23:09:92:b7:20:59:b1:52:b6:a1:14:ab:ff:
00:d4:7d:37:4d:bf:04:be:a7:ca:bd:4c:52:9b:aa:15:8b:58:
99:47:94:70:62:20:4e:13:34:88:5f:6d:be:6d:8d:31:70:61:
05:19:8a:19:6f:f3:f6:ce:f0:3d:11:d3:19:62:58:4a:50:e1:
7f:c6:ec:fb:8f:84:e1:b4:8b:95:c8:4d:0f:7c:15:35:29:7f:
d8:12:84:cb:63:72:33:1c:d5:a6:54:89:f4:91:32:8b:48:00:
e6:2e:d5:34:e8:af:40:22:b5:c1:9b:f5:d2:e3:4e:07:83:f9:
1a:9b:be:c5:2d:b8:e7:4b:14:1a:54:2f:38:96:14:27:2c:78:
03:02:2c:47:1f:a5:15:b4:06:ad:0f:d6:33:15:87:e3:60:8c:
14:c1:50:9f:41:a2:2a:52:7d:14:be:b6:6a:b8:e3:94:35:9c:
5e:80:f0:ee:1c:c1:ac:bd:2f:94:fd:78:35:b4:73:6d:1e:59:
0b:2e:ea:6f:6c:c4:69:39:07:ea:55:95:09:23:ca:10:ec:15:
1c:58:96:29:e2:60:95:33:64:4c:27:a2:10:f2:d1:5c:78:27:
b8:41:f1:60
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 31 14:41:28 2023 by rpki-client on console-ams.rpki-client.org