Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/QyuMVfeOrbhGUzUkDiN5l53v-1o.roa
File: QyuMVfeOrbhGUzUkDiN5l53v-1o.roa (raw, json)
Hash identifier: TLYbP1mlk4s+UViYE9vCMkCmwXMrO7RGSKeTLTwemA8=
Subject key identifier: 43:2B:8C:55:F7:8E:AD:B8:46:53:35:24:0E:23:79:97:9D:EF:FB:5A
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186594709235EAB50185DB5523AB604BACB
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/QyuMVfeOrbhGUzUkDiN5l53v-1o.roa
Signing time: Thu 16 Feb 2023 08:11:12 +0000
ROA not before: Thu 16 Feb 2023 08:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 164.215.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:47:09:23:5e:ab:50:18:5d:b5:52:3a:b6:04:ba:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 16 08:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=432b8c55f78eadb8465335240e2379979deffb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:7c:25:1a:3f:05:b4:b9:c8:31:28:66:7e:
5a:d7:b4:83:51:dd:d9:40:47:6e:a7:45:91:3a:c9:
c5:b3:53:24:eb:c0:0e:9d:90:29:af:94:78:9e:c7:
73:44:f1:fd:59:16:26:57:ae:16:89:de:71:fd:af:
7d:9e:e5:3f:dd:30:84:5a:a8:37:75:e3:ff:d5:56:
21:f1:17:de:eb:11:2c:c8:d4:b7:06:33:2e:41:e4:
50:b2:ff:c6:a1:1a:f7:55:7a:ba:6a:6e:9a:4a:a3:
b3:63:a1:6f:d8:3e:b0:fb:d0:a7:ba:88:7c:47:de:
23:a8:5d:7a:f2:02:7e:e3:84:99:ac:28:f3:26:66:
df:b9:d4:13:1f:7d:04:63:3c:6f:ae:d6:21:bb:aa:
e7:1d:e1:32:ff:5b:08:61:82:c8:80:25:d3:e1:33:
cd:7d:e6:ab:75:ba:31:25:10:04:a2:65:5b:bd:3b:
f5:60:55:e5:49:30:0b:53:4d:1d:6f:27:21:0d:88:
67:78:5f:ae:09:7d:4f:99:db:a1:2f:6f:bd:3f:0d:
ec:1d:01:1e:85:e5:58:a8:97:1b:49:1b:26:6d:fa:
c9:f2:38:4c:76:29:bb:9a:fe:c4:4e:c6:d9:c6:fb:
c4:a9:61:79:8b:45:71:19:33:bc:a4:16:bd:6b:ea:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2B:8C:55:F7:8E:AD:B8:46:53:35:24:0E:23:79:97:9D:EF:FB:5A
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/QyuMVfeOrbhGUzUkDiN5l53v-1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.102.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2d:3b:c9:3c:7c:d1:23:0c:a9:d2:45:cd:33:c7:bd:dc:94:
95:be:66:70:50:38:39:fd:a6:24:d8:9f:7a:78:75:60:af:1b:
35:12:d7:ce:85:fc:87:cf:f9:f5:1c:9f:49:8f:00:55:ed:21:
34:d3:66:00:d7:ff:81:2e:6e:05:7a:62:79:35:61:50:08:fb:
b0:42:87:3e:d0:c5:22:03:10:0d:cd:f9:f2:33:5d:6f:af:04:
ae:8f:31:fd:15:aa:e5:52:4d:6e:5f:42:a5:52:59:9d:f4:b1:
b6:a6:a7:fe:98:10:9c:a4:43:80:63:e9:da:81:b3:a9:ad:c9:
eb:41:45:a5:9b:fe:80:f0:7f:25:31:fa:eb:17:7d:04:e7:ce:
82:92:80:37:a5:d0:ff:ee:39:7a:47:34:e6:a8:8a:d1:ed:65:
7e:21:ce:97:e9:ae:ff:58:00:8e:12:5c:a5:bd:f0:7b:15:9c:
7e:7d:f1:7e:ba:bb:59:62:99:56:39:ea:0b:94:86:67:d7:83:
b9:64:b2:72:4d:c1:4e:54:d9:95:84:78:fe:de:8f:e5:04:3c:
3c:ea:2d:fb:a1:d1:b5:38:b3:65:9f:04:fb:f3:ab:7f:aa:fd:
3c:92:70:2d:cb:66:8c:84:a1:90:e9:d2:77:69:38:2d:20:9d:
a4:f7:b0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org