Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/QcNV7VrR_oVPD1jEUWjlwZo7w4U.roa
File: QcNV7VrR_oVPD1jEUWjlwZo7w4U.roa (raw, json)
Hash identifier: ivIWDjodlw+LJ9pLbV5qG3pYORBEmU9Uf4P9gWnx8sI=
Subject key identifier: 41:C3:55:ED:5A:D1:FE:85:4F:0F:58:C4:51:68:E5:C1:9A:3B:C3:85
Certificate issuer: /CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Certificate serial: 018571CC28E2666FC7B260FD69ED528C0D54
Authority key identifier: 0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/QcNV7VrR_oVPD1jEUWjlwZo7w4U.roa
Signing time: Mon 02 Jan 2023 09:24:43 +0000
ROA not before: Mon 02 Jan 2023 09:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 193.163.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:28:e2:66:6f:c7:b2:60:fd:69:ed:52:8c:0d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac03b130a07e030b083c8a1aabbf5a15c1b0640
Validity
Not Before: Jan 2 09:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41c355ed5ad1fe854f0f58c45168e5c19a3bc385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c2:7d:08:a1:90:e0:8d:69:99:1f:b7:bc:9d:
94:48:cd:46:c1:77:cd:4a:4c:cf:ad:0f:e9:aa:d3:
50:ba:17:27:23:37:62:e8:48:23:f7:3e:a5:69:3c:
5e:7c:f2:dd:12:ff:a1:54:91:c5:5b:1b:6a:86:10:
89:ef:33:d4:d8:18:1a:bc:d6:bc:b8:60:f5:4c:6d:
47:ab:a6:7d:5e:2a:79:cd:0c:a0:c8:71:ac:1d:41:
cb:3c:0f:b8:64:9b:e0:bc:e3:87:aa:a6:4d:04:b0:
2d:90:dd:c0:59:1e:8d:c5:67:62:25:6f:61:2e:c7:
e4:2f:a1:ca:5c:34:29:3d:47:a3:6e:12:ec:cc:4a:
55:b1:c7:13:cb:79:1c:9a:b7:ec:45:30:22:ff:c0:
2f:58:1c:1f:ea:f0:a4:cb:09:22:54:cf:37:7f:b9:
52:d9:a4:dd:b3:00:18:d1:38:da:45:d3:d3:d0:45:
c0:36:d2:02:6e:b6:9a:d3:56:02:78:ba:91:4d:3b:
cb:73:07:df:9c:ff:dc:f3:45:84:44:af:74:c7:4a:
fc:18:4d:21:fc:55:8d:c7:d2:ab:34:95:56:6a:fd:
44:e9:bd:c3:35:93:81:4e:13:2b:20:a5:cc:7a:7d:
3e:00:26:58:aa:e9:af:26:78:68:18:d4:59:62:cc:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C3:55:ED:5A:D1:FE:85:4F:0F:58:C4:51:68:E5:C1:9A:3B:C3:85
X509v3 Authority Key Identifier:
keyid:0A:C0:3B:13:0A:07:E0:30:B0:83:C8:A1:AA:BB:F5:A1:5C:1B:06:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsA7EwoH4DCwg8ihqrv1oVwbBkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/QcNV7VrR_oVPD1jEUWjlwZo7w4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0ed97-3944-4690-8918-e04a9e705ca2/1/CsA7EwoH4DCwg8ihqrv1oVwbBkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.92.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a3:27:3f:86:c4:e0:82:c4:fd:d1:19:b7:cb:dc:6d:b1:29:
93:d4:82:7a:01:3f:09:b0:74:c1:22:f8:f3:1f:9e:68:ec:8b:
1f:ce:03:e5:dc:fa:2a:b2:26:81:89:85:7c:59:a8:33:19:40:
4d:07:64:25:e9:73:68:47:1d:8a:07:7d:97:8c:bc:bd:1b:53:
da:c5:f3:7c:46:37:52:59:15:e0:43:3f:1a:75:8e:72:ae:2c:
23:48:74:76:f1:08:b7:72:0d:b5:96:3a:ae:1a:0f:fb:7f:d2:
54:b2:c0:c4:d4:e1:f4:be:a1:40:df:eb:77:cc:ea:f9:f8:a0:
b1:c1:a3:54:57:6a:c1:bd:93:ab:ab:75:ab:6b:c9:ae:11:aa:
d3:3c:8d:38:70:a5:73:29:e4:0c:4c:5c:ae:b1:08:9e:4e:46:
c4:e3:69:92:d8:92:d2:f9:71:e2:b4:d0:31:d8:04:ff:48:21:
c4:7b:d4:dd:ac:ee:0b:c0:8a:6c:2e:5a:12:47:2c:6c:ba:25:
98:26:f1:17:a5:e1:9e:3c:4a:ee:76:78:3e:a9:37:1b:72:62:
43:25:fa:f7:ed:e3:0a:fa:ea:27:bf:ee:40:5b:0b:20:b8:00:
1d:07:15:f1:3a:c8:74:59:08:46:7f:10:68:87:7c:56:04:c2:
c0:6b:3b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:33 2023 by rpki-client on console-ams.rpki-client.org