Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Qh_Q-bpgWpvimz2YFvJGYwOtQtM.roa
File: Qh_Q-bpgWpvimz2YFvJGYwOtQtM.roa (raw, json)
Hash identifier: yN3nb9pSiMViV2/0nGgP9EX9Um1K1ZpIwu5X3C42I9Y=
Subject key identifier: 42:1F:D0:F9:BA:60:5A:9B:E2:9B:3D:98:16:F2:46:63:03:AD:42:D3
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 018BB98B0454EAE5E3ACC1A90CBE10192965
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Qh_Q-bpgWpvimz2YFvJGYwOtQtM.roa
Signing time: Fri 10 Nov 2023 14:02:57 +0000
ROA not before: Fri 10 Nov 2023 14:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60064
IP address blocks: 185.102.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:8b:04:54:ea:e5:e3:ac:c1:a9:0c:be:10:19:29:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Nov 10 14:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=421fd0f9ba605a9be29b3d9816f2466303ad42d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:a3:2b:9d:43:88:d2:36:b5:17:37:d9:95:
cb:f4:d4:9f:02:d8:15:09:c0:35:3f:7c:07:be:e3:
c1:7a:e4:51:07:91:36:ab:d9:28:a7:60:02:64:bd:
0e:81:96:74:96:4f:9e:93:39:3d:6e:e7:d6:5c:01:
34:10:94:ab:bb:99:26:7e:72:aa:2b:89:c0:1d:a6:
6e:79:c0:fa:c2:e5:1a:d9:17:65:a5:e2:d2:83:a9:
72:56:57:a1:06:08:5c:76:e9:a3:84:c3:dc:3d:11:
4b:b4:cb:b8:57:4c:ae:a7:bc:23:8e:b5:f1:e4:a1:
45:0e:23:f4:04:23:51:c5:58:54:b2:07:40:2b:08:
ca:67:92:a5:4b:61:94:53:7e:c6:07:63:6d:fe:a0:
e7:13:53:07:03:00:f5:3b:2a:a0:72:36:3d:f3:3a:
46:b8:03:fe:2e:1e:72:46:76:6f:0c:79:37:ce:e7:
83:34:d8:8a:8f:c1:11:2d:23:f1:c5:f3:5a:5a:f8:
c1:75:01:ab:a1:46:e2:74:1b:ed:f8:31:ad:3b:33:
82:d9:29:33:bf:b2:0f:d3:cf:94:69:ac:cb:fe:2f:
3a:30:04:d6:d0:78:76:34:7d:09:14:99:86:dd:75:
03:d6:74:7e:8c:c2:c4:28:01:2e:8d:4c:61:ce:94:
98:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:D0:F9:BA:60:5A:9B:E2:9B:3D:98:16:F2:46:63:03:AD:42:D3
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Qh_Q-bpgWpvimz2YFvJGYwOtQtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.170.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d7:06:a2:bb:d6:a9:be:ec:13:c9:d4:67:10:c3:f7:38:f0:
ba:18:14:ff:75:87:83:a0:e4:f3:94:f2:a3:0d:5f:cd:74:fa:
73:ba:be:3e:37:7e:c1:36:01:4c:74:de:00:50:b0:86:e7:0a:
38:d8:95:71:6d:c3:ea:c9:a7:6a:a6:e7:5b:d9:9d:75:ae:fb:
e7:be:aa:ed:03:80:37:9a:e6:14:4c:b4:81:42:88:56:df:06:
5a:1e:33:ed:49:99:3c:0b:5d:44:9e:a7:1e:30:8b:f4:7c:55:
79:ea:a8:64:af:d9:52:cb:31:e1:2e:1a:f1:49:9b:b1:7d:48:
c9:aa:c8:97:98:54:53:05:7f:15:29:ba:65:26:f1:5f:76:08:
98:ae:44:cd:1a:94:4b:85:f6:fa:17:ea:15:f2:3c:d4:5b:40:
3e:ec:85:03:ce:6b:76:91:53:3f:c5:c0:35:de:d4:31:e7:55:
f0:8f:0d:72:23:f6:ce:dc:77:9c:30:f3:fb:5e:14:44:fb:35:
26:67:e2:05:27:41:ab:05:6c:35:82:3f:58:a4:f7:fa:31:a0:
98:91:49:37:51:27:96:05:9e:58:99:d6:20:a5:f9:7d:b2:05:
ae:db:33:c6:13:e3:7f:ac:b2:8f:7c:f6:6f:a9:69:b0:85:ac:
76:f0:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:08 2024 by rpki-client on console-ams.rpki-client.org