Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/qqbeRNqzHfSoSMdv-263qcNDwZ8.roa
File: qqbeRNqzHfSoSMdv-263qcNDwZ8.roa (raw, json)
Hash identifier: ZUHTzicV2EDJeprwQVQkd4jOM3isVs2QWbJYjqM014o=
Subject key identifier: AA:A6:DE:44:DA:B3:1D:F4:A8:48:C7:6F:FB:6E:B7:A9:C3:43:C1:9F
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0188DCB22DE4C1D8CFB5CB1471517E6900E2
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/qqbeRNqzHfSoSMdv-263qcNDwZ8.roa
Signing time: Wed 21 Jun 2023 06:44:04 +0000
ROA not before: Wed 21 Jun 2023 06:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 93.152.206.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:b2:2d:e4:c1:d8:cf:b5:cb:14:71:51:7e:69:00:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 21 06:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaa6de44dab31df4a848c76ffb6eb7a9c343c19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:f9:d9:d7:3d:53:25:3c:a8:9e:34:b9:15:
50:fd:e1:a3:2a:41:15:dd:64:c3:d2:6c:d5:4a:bf:
79:2a:08:9f:82:e1:48:4b:cc:ed:04:ea:4d:13:6c:
99:f0:0f:16:08:3d:dd:3c:7f:30:4c:0f:db:4f:19:
86:62:35:3f:9d:82:ec:7e:bc:36:a0:ae:b2:6b:95:
01:ef:2e:ed:75:f9:ea:8e:58:32:c7:10:15:33:88:
a2:f2:c3:3b:5d:7b:9e:ed:21:ea:f4:88:13:76:f8:
f6:05:32:b9:4b:4d:74:09:a2:51:b4:44:29:78:a5:
f4:9a:ce:7e:6b:80:85:6f:15:90:32:b7:bd:6f:81:
21:73:ae:62:1d:d0:70:39:43:54:0b:f6:55:11:e5:
07:46:c5:59:69:8a:50:bb:03:7e:79:ef:9b:c7:60:
da:38:83:80:cb:ba:68:aa:31:ae:71:4c:56:bc:a7:
88:75:2c:1f:8e:92:88:75:52:90:37:be:49:20:2b:
f7:c2:e6:9f:66:d5:2b:1e:b6:17:09:5e:9a:82:d8:
76:e1:31:58:37:2a:65:ac:29:1d:1a:96:7f:b8:bb:
bd:a7:12:4d:ca:e4:41:44:76:38:d4:00:bc:a1:95:
34:ae:47:76:43:c2:23:26:67:23:a1:1c:44:3e:fa:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A6:DE:44:DA:B3:1D:F4:A8:48:C7:6F:FB:6E:B7:A9:C3:43:C1:9F
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/qqbeRNqzHfSoSMdv-263qcNDwZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/24
93.152.206.0/24
94.190.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1f:4b:8c:ce:db:ad:22:3d:f4:a1:a2:bb:a2:ff:20:04:9c:
ac:96:79:20:8c:97:50:cf:91:6c:9b:ca:ad:80:3e:4b:71:1e:
08:56:ae:74:17:08:97:6c:90:6c:ff:2a:e5:fd:1b:c4:80:f1:
08:85:27:ae:68:8d:6c:2e:11:54:21:bb:ba:a9:b0:b0:2f:2d:
25:66:3e:48:36:12:0a:76:26:ca:88:33:18:ca:08:9a:ff:29:
1d:9c:ca:8f:86:96:c3:e4:88:53:11:d8:99:c0:d1:72:72:a0:
0b:33:e7:3c:05:60:35:12:6d:88:a2:aa:fb:4f:c8:89:d7:ee:
f9:e9:cc:23:ad:bc:d0:dc:81:2f:cf:5b:56:2c:bd:02:2c:26:
22:55:1f:ca:92:a2:c6:5d:ba:af:69:d4:ff:5e:34:84:24:cb:
b8:00:ae:b6:ec:82:47:ca:54:8d:34:38:a1:0f:45:81:03:10:
ef:26:71:f8:75:40:24:e3:4f:36:01:a6:05:33:ce:a0:e7:f4:
00:fc:73:0c:6b:50:ee:18:15:8a:9a:7f:ad:c1:b5:58:84:0a:
26:ae:a3:d6:26:30:fa:a2:6f:f5:1c:f7:d9:03:41:79:0e:b3:
75:c4:e1:0e:eb:f1:3d:34:fd:a4:8d:8e:17:10:70:28:44:ac:
84:21:07:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org