Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/hqrcDNfhkeN_M2ZqeHn1u6DY9rA.roa
File: hqrcDNfhkeN_M2ZqeHn1u6DY9rA.roa (raw, json)
Hash identifier: UmVSOjcmy4+rEnzBIbG2nRP7j//w4Gas12FE9eROy0w=
Subject key identifier: 86:AA:DC:0C:D7:E1:91:E3:7F:33:66:6A:78:79:F5:BB:A0:D8:F6:B0
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 018BED4CE5A2093C011BEBE3DEFFDB8FC741
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/hqrcDNfhkeN_M2ZqeHn1u6DY9rA.roa
Signing time: Mon 20 Nov 2023 15:15:21 +0000
ROA not before: Mon 20 Nov 2023 15:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210539
IP address blocks: 185.162.90.0/24 maxlen: 24
185.170.130.0/24 maxlen: 24
185.170.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:4c:e5:a2:09:3c:01:1b:eb:e3:de:ff:db:8f:c7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Nov 20 15:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86aadc0cd7e191e37f33666a7879f5bba0d8f6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:31:ae:1a:07:0f:c8:8a:df:3a:09:6f:aa:
55:26:3a:d9:f4:2f:ab:60:ff:68:89:c1:52:88:a6:
9f:c3:1d:f1:d3:f0:ec:67:94:43:3a:c8:d2:5d:f3:
75:c2:3b:ad:44:31:73:0f:65:d0:55:59:af:56:cc:
c7:06:5c:fb:b6:70:96:1b:a2:0e:b9:75:14:7f:91:
73:e1:bb:f9:11:5f:a2:2a:d9:fe:40:c1:92:34:d1:
6a:5b:9f:3d:c0:08:84:3e:60:52:0a:a2:0f:8d:3c:
82:11:4a:fd:61:a7:02:46:09:9f:07:aa:a2:f0:b2:
28:1e:82:df:4e:7c:72:3b:54:85:94:57:f7:54:05:
e3:32:94:69:8d:52:51:67:ff:05:1c:eb:a5:6f:7b:
a0:f1:41:21:b3:dd:ac:fa:06:2a:97:39:50:54:79:
e6:7d:3c:1d:f5:7f:77:9f:f1:f8:7a:57:82:33:39:
ec:23:8c:9e:ef:d2:ec:e0:1f:b1:c9:b1:97:fc:58:
d5:e2:1b:79:a5:5a:10:46:3a:83:72:d5:83:56:7b:
bb:cd:c3:a8:6e:12:d4:b4:58:8a:5e:41:ef:3f:a1:
38:66:e8:89:0f:84:78:8b:07:74:8b:80:b0:be:36:
21:76:44:14:4e:e0:20:6f:d7:55:36:28:52:98:18:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AA:DC:0C:D7:E1:91:E3:7F:33:66:6A:78:79:F5:BB:A0:D8:F6:B0
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/hqrcDNfhkeN_M2ZqeHn1u6DY9rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.90.0/24
185.170.128.0/24
185.170.130.0/24
Signature Algorithm: sha256WithRSAEncryption
65:cf:8b:f2:f0:30:96:c4:e8:f9:90:96:6a:42:97:87:e0:ae:
fc:d6:64:b6:b4:2b:be:36:92:7d:78:da:e3:73:39:79:9a:a1:
da:7f:c6:96:c1:d7:6e:f2:47:18:96:4c:01:d1:10:d4:ef:cd:
3e:1f:76:e7:d3:b3:16:ec:bf:e5:66:74:98:5a:05:f8:da:84:
89:68:33:d2:b9:ff:a7:ae:eb:ef:1f:9a:df:36:0e:f9:27:c2:
21:87:c5:76:ed:dd:ee:20:77:13:23:64:95:50:78:71:56:b1:
10:51:75:95:99:1d:51:24:21:d7:06:46:60:c0:ae:53:42:2a:
4b:83:9b:69:81:33:ba:3d:a6:9f:47:e3:c3:2b:4a:7d:81:9c:
6c:8f:81:20:44:82:6e:00:14:25:16:90:0e:6f:b7:1f:7d:ad:
d1:2f:b2:e6:5a:b0:7d:2b:c3:2f:1d:02:96:1e:9e:ef:1b:64:
83:f8:d1:af:b5:58:51:9d:cc:1f:3f:35:24:06:ac:d6:8b:1b:
26:28:c8:c4:ea:51:1b:69:72:fb:4e:ca:a7:7a:d8:e2:a9:8d:
51:56:13:93:30:61:73:3e:34:f5:8c:c5:f2:16:8c:69:42:29:
3e:b4:6e:a8:87:2c:4b:e5:07:29:32:05:d0:3e:65:40:14:ff:
0d:f0:c0:87
-----BEGIN CERTIFICATE-----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 at Mon Dec 25 23:41:59 2023 by rpki-client on console-ams.rpki-client.org