Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/Qbex6oOkGjuVnvb8-XDqDXJfG2s.roa
File: Qbex6oOkGjuVnvb8-XDqDXJfG2s.roa (raw, json)
Hash identifier: gtTdVhb2V0ESYSZc9vMVnW8PeYk8zEhYzl+Yk92vaKg=
Subject key identifier: 41:B7:B1:EA:83:A4:1A:3B:95:9E:F6:FC:F9:70:EA:0D:72:5F:1B:6B
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 018A3B0A3AC94A40CE420CC516FB6F572A2B
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/Qbex6oOkGjuVnvb8-XDqDXJfG2s.roa
Signing time: Mon 28 Aug 2023 07:27:20 +0000
ROA not before: Mon 28 Aug 2023 07:27:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203
IP address blocks: 212.138.64.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:0a:3a:c9:4a:40:ce:42:0c:c5:16:fb:6f:57:2a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Aug 28 07:27:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41b7b1ea83a41a3b959ef6fcf970ea0d725f1b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:5d:56:f7:54:c5:de:93:a7:1f:f7:6a:4d:
33:e8:8b:ad:52:54:52:9d:ef:80:d6:27:a3:01:ff:
2e:aa:59:06:72:f5:df:73:cb:cd:db:d2:fa:dd:3e:
5c:4b:c5:95:34:25:11:21:81:f2:b0:99:9b:87:52:
93:55:14:9d:68:db:16:d5:74:74:25:de:13:d9:9b:
ce:32:8d:dc:15:42:06:e4:42:b1:62:e0:15:11:0b:
16:31:56:ba:2e:c1:b4:eb:a4:81:09:12:33:cb:28:
99:c3:80:b5:db:3c:34:d6:4b:ab:01:11:25:79:00:
f5:c8:b5:1e:ef:c4:f6:7f:d4:46:c9:02:e7:b3:60:
9d:3e:43:f6:4e:66:19:c3:f0:82:19:cf:a6:15:87:
7c:38:57:95:bc:30:d9:5b:2d:f4:1c:d0:65:41:7a:
a9:0d:74:12:4e:4a:3d:c3:9a:4d:87:18:fe:dd:c3:
85:8c:c7:e7:86:29:74:75:33:6f:e1:86:de:6f:47:
cd:e7:a5:81:f1:d1:69:a6:d6:2d:0f:04:ef:dc:6d:
a7:b3:d8:9a:fd:91:40:63:3f:7a:1f:b6:fb:13:d6:
f1:1c:a4:d3:15:45:0d:ff:5f:03:13:fb:a4:4b:86:
83:26:f6:c0:de:4e:a2:95:a3:00:70:0e:76:be:f6:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:B1:EA:83:A4:1A:3B:95:9E:F6:FC:F9:70:EA:0D:72:5F:1B:6B
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/Qbex6oOkGjuVnvb8-XDqDXJfG2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.138.64.0/22
Signature Algorithm: sha256WithRSAEncryption
22:90:9f:af:70:a5:3d:a5:ea:97:be:04:e0:23:e4:0f:1c:80:
dc:c1:53:d8:94:31:70:78:93:98:25:5f:3a:f0:d9:99:f6:01:
d4:34:2c:6e:da:10:6c:c2:08:4e:81:04:93:8a:55:a6:72:42:
79:6b:59:bc:83:32:e5:93:85:ca:58:2c:e2:c2:25:26:85:4f:
db:aa:32:ca:e4:c4:b9:08:c5:5b:05:4c:c6:ab:6d:21:d8:56:
ff:af:9f:4d:e1:c5:9f:82:fa:20:a7:e3:38:15:ec:f9:c8:04:
03:f4:76:27:52:ed:f3:ac:77:03:b4:a6:df:8c:2e:49:d7:f1:
62:fd:c9:c2:a3:f7:0b:f9:60:06:c8:35:90:ea:25:98:56:b1:
b5:3d:d8:65:6e:d7:62:c8:ae:f8:6a:7f:17:ec:0c:ed:49:ed:
08:f8:74:bd:3b:b1:be:ae:7d:92:d6:ca:69:56:76:92:01:1c:
2e:9d:22:57:46:cb:42:0b:4e:e1:91:ea:ea:6c:c2:bf:3f:84:
c5:77:c3:65:2c:4d:b9:d1:cd:5d:a1:51:b1:8b:ba:72:a4:72:
b5:da:1b:13:d7:ec:12:10:ce:a5:d7:04:d7:75:fc:35:b3:f5:
4a:9e:33:09:c0:1e:5f:c4:0c:ea:25:f3:7b:a1:e2:88:3a:32:
57:50:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 09:13:06 2023 by rpki-client on console-ams.rpki-client.org