Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QzMHigdlZfViisFaqzoytHbdPFI.roa
File: QzMHigdlZfViisFaqzoytHbdPFI.roa (raw, json)
Hash identifier: j60uGkIvaXjDmA+6cFS5GgJV2HCxXUf75TCi2oFeXsI=
Subject key identifier: 43:33:07:8A:07:65:65:F5:62:8A:C1:5A:AB:3A:32:B4:76:DD:3C:52
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 018AFEE2E8244B080BC569E21F9ED443BDF1
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QzMHigdlZfViisFaqzoytHbdPFI.roa
Signing time: Thu 05 Oct 2023 08:09:57 +0000
ROA not before: Thu 05 Oct 2023 08:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216394
IP address blocks: 92.60.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:e2:e8:24:4b:08:0b:c5:69:e2:1f:9e:d4:43:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Oct 5 08:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4333078a076565f5628ac15aab3a32b476dd3c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:3e:53:70:fd:17:04:fd:52:99:6d:1a:82:
1d:2f:2f:d5:4e:85:fc:b6:0c:4e:bf:ab:25:b4:43:
93:fc:3e:14:b4:e5:b7:88:0e:a3:2c:35:04:78:a2:
55:6b:49:72:84:97:dd:9b:4c:1c:d2:81:88:ed:12:
c4:53:6e:d4:5e:a4:07:f9:24:1e:a0:04:9d:4b:20:
22:7e:24:87:b3:54:7e:4e:12:a3:ff:50:fc:eb:01:
75:d8:d2:11:08:c6:32:42:d0:10:03:7d:ae:ab:cd:
b6:8a:cd:16:81:ac:1b:d7:f0:32:2d:95:c0:3e:b7:
4e:ff:23:d0:64:07:47:43:53:60:34:45:9c:56:1d:
f4:c3:a8:48:fd:a8:43:ee:89:33:c3:60:27:63:11:
9b:85:7d:e5:86:a8:d1:35:45:46:16:67:9e:0b:60:
4a:14:17:c7:c9:2d:71:e9:b6:cd:7a:d5:c0:04:c1:
15:89:64:34:a8:df:ed:a2:f8:c2:91:4d:56:2b:51:
a7:0a:b6:6b:35:76:a8:f1:3e:0b:42:7d:d6:c1:21:
2b:5e:45:33:5c:56:1e:fa:b7:ac:89:3e:18:dd:1c:
54:38:74:05:91:4e:bb:87:4f:64:b5:26:f9:49:c4:
5f:6b:16:b9:bd:bf:c2:f8:e1:15:a6:bf:34:8d:fc:
7a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:33:07:8A:07:65:65:F5:62:8A:C1:5A:AB:3A:32:B4:76:DD:3C:52
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QzMHigdlZfViisFaqzoytHbdPFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.70.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a4:fe:a7:ad:21:a7:b5:74:74:11:57:49:35:30:78:b0:4a:
0d:86:27:9a:97:29:fa:09:7f:66:d6:5d:ca:69:ea:46:a0:d3:
8e:b8:17:38:41:f7:0e:af:66:51:2e:81:8c:19:74:8b:ec:b3:
72:70:23:b1:03:9a:5b:21:7f:14:ee:95:63:b3:c6:cd:9a:90:
24:cc:86:ab:15:37:cc:ad:53:ec:cc:cb:05:0c:2f:25:d8:79:
6b:4f:88:61:74:41:03:00:46:ba:c8:3f:13:d6:43:30:9a:d5:
0b:96:ba:2b:79:be:5a:15:31:c3:b4:e4:84:66:8f:9c:b4:32:
53:ca:bd:96:88:0c:52:71:84:3d:5b:cb:b3:fc:dc:c8:f8:b5:
42:a3:96:80:d4:cb:43:57:9f:fe:48:36:18:07:78:2d:c0:7b:
b8:ff:0a:54:68:32:4e:70:09:6c:80:7c:8f:83:c7:fd:ca:93:
1d:6a:94:94:23:9a:ac:1c:b5:d0:ec:2f:8f:81:96:fb:8d:7c:
4d:e7:4c:47:e5:da:c8:3c:53:26:6b:8a:43:f8:89:51:b6:eb:
40:16:59:6e:d6:ff:64:40:0a:21:3a:d6:0f:a3:26:5f:05:b6:
e0:66:7a:d4:3b:41:a4:c1:02:ab:f7:80:76:6f:34:f3:24:df:
84:68:29:53
-----BEGIN CERTIFICATE-----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Generated at Sat Oct 14 10:45:00 2023 by rpki-client on console-fra.rpki-client.org