Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/qqHjA-09lFnE0i956K6HWr7T2XM.roa
File: qqHjA-09lFnE0i956K6HWr7T2XM.roa (raw, json)
Hash identifier: JkPerRjXSX2lUfjILdw3Hsk5N8pUFHrWhhIaq1CIMSw=
Subject key identifier: AA:A1:E3:03:ED:3D:94:59:C4:D2:2F:79:E8:AE:87:5A:BE:D3:D9:73
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 0187BD3AD61393C94489E685F02E536D0D92
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/qqHjA-09lFnE0i956K6HWr7T2XM.roa
Signing time: Wed 26 Apr 2023 11:02:42 +0000
ROA not before: Wed 26 Apr 2023 11:02:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12541
IP address blocks: 212.80.160.0/19 maxlen: 24
213.170.32.0/19 maxlen: 24
185.123.120.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:3a:d6:13:93:c9:44:89:e6:85:f0:2e:53:6d:0d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Apr 26 11:02:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaa1e303ed3d9459c4d22f79e8ae875abed3d973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:ae:66:22:fd:9d:95:12:95:7c:fa:30:55:
ac:52:4d:36:fc:68:6e:4a:56:71:d5:d9:2b:53:0d:
5b:84:15:67:70:02:e8:69:3a:1f:32:3e:7c:f3:01:
5a:e8:8d:be:33:7f:58:e9:c6:90:dc:66:d5:82:c7:
bc:75:49:d7:15:cb:cf:e4:87:94:50:6d:53:4f:b0:
27:19:72:73:7b:b3:7c:6a:34:7c:8e:8c:b6:2e:d1:
49:3b:07:bb:57:be:59:a8:b2:9f:2f:51:18:79:f8:
53:cc:b7:31:5f:59:c8:cb:e7:93:06:09:91:6f:a2:
44:e0:18:d3:0c:5b:6f:9f:e1:56:83:8d:e8:c4:5f:
df:11:eb:ed:14:b6:66:0b:5b:1c:f5:f9:1f:a6:24:
b9:4c:c5:5c:fe:f6:34:d8:9c:71:73:01:f7:16:19:
51:05:f1:17:94:6d:b0:80:65:eb:59:54:ca:d8:27:
57:c1:4b:94:03:cb:36:47:2f:20:84:20:e8:90:69:
7e:79:45:d2:cf:06:bb:2b:1b:df:f0:89:19:70:8b:
1c:64:07:21:9b:b8:b8:12:0a:e4:7f:e8:9c:f7:13:
7f:a3:63:a2:7c:d8:c1:53:7c:07:3f:ef:9e:56:a3:
71:c9:00:da:10:e5:34:c8:1b:7c:f1:50:11:9c:3c:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A1:E3:03:ED:3D:94:59:C4:D2:2F:79:E8:AE:87:5A:BE:D3:D9:73
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/qqHjA-09lFnE0i956K6HWr7T2XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/22
212.80.160.0/19
213.170.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:3f:52:93:f8:72:6d:f0:51:26:b8:13:f6:95:23:7a:7f:78:
bb:fe:f8:2d:4a:5d:ef:fa:8f:5e:03:47:a1:5a:8c:0d:c7:ad:
b4:2c:55:03:d9:4f:f3:b9:2a:fb:90:fd:3b:9c:b2:36:f2:3d:
cf:3a:44:de:3f:a4:39:67:8a:30:6e:d5:a5:46:1b:75:a2:4a:
ab:49:b0:43:77:dc:b9:ca:17:b5:fd:1f:56:83:70:d0:63:3d:
40:13:7d:9a:73:fa:df:02:fa:57:fb:95:de:c9:b5:7a:7e:c3:
ac:e2:18:09:4e:bc:04:1e:ef:2c:71:c3:09:39:72:92:48:67:
c0:c2:10:d0:ec:0e:a2:a3:0a:1f:97:79:ea:45:91:25:41:80:
1d:53:d5:ca:d1:b2:2a:a3:57:1d:ea:b2:51:83:7e:20:fb:76:
e6:8b:f2:91:58:6d:08:dc:d6:58:fa:25:14:80:5b:df:72:44:
2c:44:ef:0d:21:57:ee:db:f2:fd:aa:82:b9:6a:d9:82:ac:88:
bc:fb:31:ea:84:ef:99:a4:0b:7c:40:c0:e3:89:13:e2:6b:12:
fc:5f:d1:f1:e3:48:46:1b:ff:04:a1:ec:f9:a5:b9:ff:e9:68:
64:2a:90:2f:78:8a:b9:f7:24:28:66:92:26:fc:fc:9f:e4:de:
20:a6:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:43 2023 by rpki-client on console-fra.rpki-client.org