Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/qrCL2LKdBbZCpUz2Uox4foPjBm8.roa
File: qrCL2LKdBbZCpUz2Uox4foPjBm8.roa (raw, json)
Hash identifier: LgKa+ZDNxYffiXLYKrmTIbe314YYJWahsQMSDCNNuH0=
Subject key identifier: AA:B0:8B:D8:B2:9D:05:B6:42:A5:4C:F6:52:8C:78:7E:83:E3:06:6F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01885DB7763FD137EA26FDBE6E2A9C821F3B
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/qrCL2LKdBbZCpUz2Uox4foPjBm8.roa
Signing time: Sat 27 May 2023 14:58:04 +0000
ROA not before: Sat 27 May 2023 14:58:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:b7:76:3f:d1:37:ea:26:fd:be:6e:2a:9c:82:1f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 27 14:58:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aab08bd8b29d05b642a54cf6528c787e83e3066f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:62:09:f3:96:e5:ee:4e:44:f6:0c:e4:91:
ca:4b:4b:59:62:2f:7b:59:1e:92:2a:11:c9:7e:19:
1b:a9:9f:aa:40:67:ee:03:20:8e:84:48:e3:6c:f7:
a3:50:49:f5:78:6b:87:80:9e:0a:60:d8:d3:7d:b2:
34:db:8a:ba:35:32:27:b6:22:4e:54:e7:2a:2d:7d:
56:4b:a7:72:e0:ae:5c:42:26:05:8f:47:c7:5f:0c:
f6:03:a6:9e:0a:c5:da:fe:64:af:1f:cc:a7:62:f9:
6a:8f:54:e3:f8:35:b8:52:bb:b3:e0:e5:7a:b6:da:
94:dc:e9:5f:ab:5c:0a:ae:c8:1b:75:c4:44:f4:dd:
da:fb:16:e6:f2:00:4b:0c:6c:e0:40:c5:82:13:ee:
24:2b:d3:3b:af:fd:61:e9:29:99:85:e7:22:89:39:
09:6b:f8:a7:68:05:b7:e2:68:5d:c5:be:47:36:09:
8a:46:12:14:dd:2e:91:d6:78:58:e7:ff:57:2d:c1:
f2:cf:4b:7b:45:eb:da:c6:ad:7c:b0:65:20:b9:ff:
9e:35:94:ab:d1:d9:d2:4e:a5:b1:46:31:15:7e:9b:
94:f6:bb:d9:9c:71:d9:19:19:8d:67:db:3d:71:bf:
e5:2c:07:22:eb:3a:dd:1d:6b:9d:04:12:0b:cf:31:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B0:8B:D8:B2:9D:05:B6:42:A5:4C:F6:52:8C:78:7E:83:E3:06:6F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/qrCL2LKdBbZCpUz2Uox4foPjBm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:16:66:a1:69:c9:6f:bb:f6:eb:08:96:d5:fb:6a:33:03:b2:
06:e7:85:c2:30:54:2a:9c:74:8c:c4:a9:dc:62:84:47:e8:8f:
62:74:ca:15:49:8c:7f:2b:58:87:a9:c0:f1:e5:54:a6:45:fa:
a1:62:de:ea:50:49:ac:b1:74:87:2e:3f:28:30:46:9a:96:c7:
ff:41:92:bd:50:70:85:58:8d:d3:7b:19:a9:df:8b:07:bc:51:
2a:55:46:0d:c0:e6:c5:c0:16:fa:50:63:2a:14:8b:7d:a9:17:
93:c3:32:7e:ba:d5:98:4e:1e:88:4b:fe:54:98:c7:df:5a:da:
da:f1:32:62:18:02:bf:60:5e:cc:fb:84:74:92:3b:fd:43:30:
6e:03:7d:81:25:0d:79:3f:e7:22:4a:c3:59:9a:9b:0b:a2:e7:
4f:3a:68:f8:89:85:4d:b3:7c:c8:ed:86:27:09:01:a8:b6:98:
9d:4c:72:af:9b:b0:43:39:cd:59:37:86:65:90:49:d5:d8:59:
1a:9e:0f:78:a8:80:6f:17:52:25:22:77:d6:76:77:b2:36:3c:
66:5b:0e:ff:ec:83:29:d8:f5:4d:12:82:85:19:ab:5e:3e:b0:
2b:fa:b4:91:bc:ec:f9:28:56:c0:28:9e:d6:8c:f5:e2:99:ef:
4d:65:a3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-fra.rpki-client.org