Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/qj3utTC91hLn0Iplmj3lSKQAH8c.roa
File: qj3utTC91hLn0Iplmj3lSKQAH8c.roa (raw, json)
Hash identifier: 9ArvW6YQ7rvKxcpOlLE2PzpZS1tBpGoT8k7Sq8w6y8I=
Subject key identifier: AA:3D:EE:B5:30:BD:D6:12:E7:D0:8A:65:9A:3D:E5:48:A4:00:1F:C7
Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial: 01856BC0F8EB33E0650EAE275B6E7AF0B31A
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/qj3utTC91hLn0Iplmj3lSKQAH8c.roa
Signing time: Sun 01 Jan 2023 05:14:46 +0000
ROA not before: Sun 01 Jan 2023 05:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61094
IP address blocks: 178.23.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:f8:eb:33:e0:65:0e:ae:27:5b:6e:7a:f0:b3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
Validity
Not Before: Jan 1 05:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa3deeb530bdd612e7d08a659a3de548a4001fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:c5:99:9a:83:be:c9:0d:25:80:25:82:e7:
c9:30:9f:a7:dd:cd:bb:cd:2e:a3:25:49:be:75:3a:
55:ba:96:b6:81:f3:40:81:64:33:0e:57:22:84:4d:
3c:01:9f:4f:be:68:f7:18:4e:10:51:a4:c0:4e:e4:
ca:3c:0d:2c:e1:66:4e:54:07:99:0c:1c:fd:41:b5:
4a:50:10:0b:d3:99:f4:a4:3e:8e:70:74:83:27:24:
46:49:bb:08:c1:da:53:4b:36:9b:4d:51:b0:57:36:
cf:ef:f5:a4:41:52:89:f0:73:f4:7e:81:eb:1d:d3:
a1:6e:bd:e8:ab:2f:52:6e:5c:92:20:67:52:ee:08:
e8:8e:12:e8:cf:4a:8c:dd:c0:e9:2a:db:21:d3:c6:
a0:d2:0c:3e:28:cc:21:a1:a4:1f:11:78:2e:6f:97:
94:21:7b:3a:1c:aa:b1:95:9b:16:e9:4b:fc:d0:a9:
d1:c7:68:af:11:04:94:be:96:eb:ab:6d:d5:2a:7f:
f7:85:00:a5:ae:fd:36:14:b4:46:15:19:e4:0b:c4:
ea:a5:73:fb:95:31:78:4d:ba:38:cb:1e:93:4e:5e:
10:2d:0b:95:9e:48:70:a6:bd:d0:af:96:ed:0f:a2:
3d:51:81:2c:a2:8d:4e:4f:3d:ba:78:ac:58:43:90:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:EE:B5:30:BD:D6:12:E7:D0:8A:65:9A:3D:E5:48:A4:00:1F:C7
X509v3 Authority Key Identifier:
keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/qj3utTC91hLn0Iplmj3lSKQAH8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.184.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:55:5c:03:13:c2:83:39:5f:c9:ce:5a:f2:a4:30:4a:7a:53:
a7:21:2d:36:ce:c7:df:28:b4:e6:b5:76:3e:0b:fb:59:7c:ea:
40:39:8c:d7:f5:e8:c5:36:22:2c:13:23:75:86:0f:36:44:91:
7b:67:0a:a7:3a:6b:c2:1d:11:6c:27:c5:ac:3e:93:1b:06:50:
9d:bd:eb:e9:53:06:7e:5f:bb:f4:5f:ba:c1:28:3b:d8:0d:2c:
dd:3c:42:bd:9f:e3:c5:5d:29:5c:99:4c:79:05:5a:36:30:fb:
fc:20:e1:f9:5c:3b:f5:dc:23:da:17:cb:2d:f6:e4:31:3b:14:
7f:43:2e:f5:79:5a:5c:a6:98:bb:be:d7:63:0c:ba:7f:3f:e9:
91:dd:fa:89:b4:03:a9:4c:eb:be:17:12:00:61:06:1e:4f:14:
c3:9a:82:4f:d7:c1:00:bd:42:64:06:b1:5c:47:18:d6:30:43:
e5:d8:ee:06:8c:21:de:6d:66:aa:a1:2b:00:4e:99:fd:7e:57:
2c:ac:7e:77:7d:66:f8:93:e2:1e:13:a0:a9:a8:57:e4:66:aa:
50:cd:54:92:6c:e0:d9:67:43:32:d6:81:8a:8d:46:6c:33:ce:
28:93:50:24:a9:f9:6b:f3:dc:5d:1e:f0:00:64:06:fd:4e:f1:
87:64:e2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:46 2024 by rpki-client on console-fra.rpki-client.org