Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/qNNlHmZFMz0SClM8vXuC5Vl7big.roa
File: qNNlHmZFMz0SClM8vXuC5Vl7big.roa (raw, json)
Hash identifier: gky+ilGCPjbWXdn4X8xi9D6wE1TrQPJ0CT7YNNemIa4=
Subject key identifier: A8:D3:65:1E:66:45:33:3D:12:0A:53:3C:BD:7B:82:E5:59:7B:6E:28
Certificate issuer: /CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
Certificate serial: 018A7F7CFDFACA507F196786B8CAB15A9C0B
Authority key identifier: 0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/qNNlHmZFMz0SClM8vXuC5Vl7big.roa
Signing time: Sun 10 Sep 2023 14:26:52 +0000
ROA not before: Sun 10 Sep 2023 14:26:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.31.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7f:7c:fd:fa:ca:50:7f:19:67:86:b8:ca:b1:5a:9c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
Validity
Not Before: Sep 10 14:26:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8d3651e6645333d120a533cbd7b82e5597b6e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:e5:05:56:13:84:a0:38:18:71:06:0e:13:
81:ae:df:1e:41:e1:28:fc:29:a8:33:eb:b2:09:95:
ee:48:f9:92:de:d9:3a:5c:63:bc:1c:8a:f9:d9:3c:
fa:2d:c1:8a:cf:bb:80:92:be:25:d5:30:fc:88:76:
a4:0e:83:01:38:22:66:e5:aa:b9:25:24:cd:99:fb:
cf:a4:de:17:4e:c3:f2:4c:7f:d5:66:f7:a7:73:25:
9e:d5:11:e1:c7:3d:4d:ff:5c:54:34:e4:84:75:91:
cb:0a:91:3a:44:02:c6:db:1b:55:b9:f1:7c:05:f8:
5a:46:69:c5:f8:06:3d:55:06:9f:1e:08:24:c5:71:
3b:7b:fc:aa:cb:70:ef:e5:e6:6e:e9:09:85:0b:e8:
dd:a9:64:51:cf:51:8a:03:e3:91:f6:65:24:a5:bc:
98:5f:b2:bd:cc:6f:e8:0f:52:41:65:3c:a6:81:d8:
aa:f1:2c:7a:6d:a4:00:47:2c:2a:d7:1b:5e:d0:49:
ce:e3:a5:2f:02:be:99:92:62:7e:01:59:5e:d8:b8:
b9:e8:7d:21:bf:9f:e4:13:e8:91:5c:64:e1:04:c5:
61:f0:af:12:5a:45:28:43:e4:72:68:55:ea:7c:46:
6d:a4:f0:62:16:8d:a5:42:5a:7d:a8:d7:73:d1:91:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:65:1E:66:45:33:3D:12:0A:53:3C:BD:7B:82:E5:59:7B:6E:28
X509v3 Authority Key Identifier:
keyid:0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/qNNlHmZFMz0SClM8vXuC5Vl7big.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c7:9d:8d:e4:07:79:2c:e1:e8:1c:81:59:1d:18:f8:86:01:
da:13:71:35:e1:46:50:6e:46:12:00:32:88:a2:09:3e:f1:1b:
8f:37:63:b7:a6:dd:b1:2e:4c:e6:95:f4:d0:9f:d4:15:f8:de:
43:0c:5a:ca:8c:ab:0a:db:f1:70:aa:0c:54:b2:d8:ea:43:6a:
40:2d:ba:4f:47:b5:b8:0f:68:34:cc:a1:62:50:ef:71:4f:8d:
81:19:76:48:8f:9c:8e:46:f9:4f:ee:c4:20:75:a2:8f:87:d1:
59:2c:87:3a:c4:0c:d0:97:80:82:4e:4e:9e:d1:21:f4:c6:01:
88:cd:eb:6a:03:76:2b:35:c8:05:10:0c:8e:f9:c7:7f:75:1e:
d6:1c:e3:3e:ef:9e:0d:d7:74:5f:7f:07:88:86:19:66:8e:dc:
db:54:31:f0:f2:05:67:f5:2a:96:4f:0b:cd:c8:5d:bb:a9:ce:
c5:5c:ff:82:32:01:13:5a:48:ed:45:81:48:3f:bc:04:fd:69:
b7:03:3a:c9:f4:a3:05:b8:e3:f3:60:13:a8:c2:bb:ec:82:0b:
b5:4a:54:89:c2:54:63:99:9f:32:a0:a2:c6:8f:b7:f1:07:05:
09:e4:d2:79:f5:91:13:44:cd:2d:fb:a2:81:06:cd:74:aa:33:
1e:1b:b3:36
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 20 16:43:56 2023 by rpki-client on console-fra.rpki-client.org