Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/qG4CmW28KyPzMJlMrgjSPOh9_XA.roa
File: qG4CmW28KyPzMJlMrgjSPOh9_XA.roa (raw, json)
Hash identifier: 3bV5z1/mKMy/19P5G8D/A+8LwMXEYY4Lyeg7DALV3Xs=
Subject key identifier: A8:6E:02:99:6D:BC:2B:23:F3:30:99:4C:AE:08:D2:3C:E8:7D:FD:70
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 018964895A0C2A3EC5901DD9DAE8651ED390
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/qG4CmW28KyPzMJlMrgjSPOh9_XA.roa
Signing time: Mon 17 Jul 2023 15:47:50 +0000
ROA not before: Mon 17 Jul 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.132.51.0/24 maxlen: 24
193.53.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:89:5a:0c:2a:3e:c5:90:1d:d9:da:e8:65:1e:d3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Jul 17 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a86e02996dbc2b23f330994cae08d23ce87dfd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:9c:98:29:f3:99:88:6e:dc:d8:da:30:b2:
8b:df:da:80:e9:1f:54:98:ac:95:62:4a:40:6e:d2:
29:f6:49:b1:21:5f:47:40:a6:fc:53:e8:4b:70:5c:
b9:3d:d2:c8:58:21:7b:8e:fa:19:f5:9e:c5:14:bf:
42:50:bf:dd:5e:ea:59:0c:3d:35:3f:99:b9:8a:a5:
99:b2:8c:9b:05:6a:bd:f6:c1:62:aa:99:76:b2:07:
2f:4b:cc:d6:ce:06:cc:77:19:b2:c9:f8:3f:fc:22:
81:ca:3d:4e:19:47:d8:6c:10:36:6e:3a:ca:9b:60:
93:2c:76:fc:d6:2a:88:46:65:d1:93:8e:e0:c7:dc:
25:42:60:83:22:ba:99:d1:f0:5b:92:15:38:8a:5d:
6f:bd:8e:ef:2b:41:d0:2e:5c:d0:04:be:70:17:4a:
f6:b8:bd:63:3e:61:d8:75:b6:5f:ba:24:86:9c:ab:
68:93:0f:68:92:0a:9f:71:bd:f8:ad:70:f6:7d:a0:
c4:64:e3:3a:22:4a:0b:1e:80:26:65:a5:be:b9:ab:
b0:f1:6e:c0:8f:d6:5a:f8:8c:f3:74:aa:44:7e:2b:
23:3b:8c:52:c1:32:ee:f6:36:c5:d3:77:6e:6a:7e:
00:d2:4e:bf:04:99:4d:19:ca:4e:6c:1f:d0:cb:cc:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6E:02:99:6D:BC:2B:23:F3:30:99:4C:AE:08:D2:3C:E8:7D:FD:70
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/qG4CmW28KyPzMJlMrgjSPOh9_XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.51.0/24
193.53.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:43:92:45:e9:75:db:2b:a0:e0:20:38:8d:e7:ae:a7:84:91:
2b:a1:fa:7f:a4:a6:f8:b4:f0:a4:93:65:bb:23:3c:16:d3:8a:
33:f0:29:38:0c:23:ff:ed:5c:26:ce:28:ba:9b:ac:68:d2:88:
79:68:2b:18:f5:b1:f1:2c:1d:d6:93:de:f5:05:be:72:44:67:
5b:27:af:0c:e1:29:c3:42:81:bd:5f:09:a1:3e:93:2f:3a:5b:
4c:e5:60:95:93:61:3e:80:07:c8:1a:c3:67:67:6b:ab:bf:54:
b0:f6:de:52:f6:1c:ed:b3:57:7b:18:b7:ea:2e:79:fe:2c:ee:
b0:d2:06:ba:77:a2:83:16:ee:06:aa:5e:cc:ca:b7:3b:5a:d9:
f6:0d:d2:7a:5b:6b:85:25:a8:8e:7d:0c:14:32:53:7e:df:58:
5c:08:6d:88:a9:5b:b6:2c:88:d0:e2:ab:f1:07:fe:3f:e7:66:
43:75:d9:2d:03:dc:9a:83:61:5d:00:e8:d0:a2:46:e0:0d:a1:
51:e7:d4:4a:83:b3:9d:9a:90:48:05:c4:2c:15:c2:45:d0:8d:
2f:18:9b:ff:9c:d4:0a:cb:72:e8:0a:2d:9f:ea:4b:ce:e4:c4:
98:94:a5:04:f4:3f:4a:e2:fa:d9:32:59:e5:2d:a6:65:b0:6f:
2c:77:6b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-fra.rpki-client.org