Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/QI1Mwm0PfEcrtRKKLgcPsygSZeQ.roa
File: QI1Mwm0PfEcrtRKKLgcPsygSZeQ.roa (raw, json)
Hash identifier: ScJ4+seIp2yA2a1EEAoXpWqPta/x4yPr1frhpSIup7k=
Subject key identifier: 40:8D:4C:C2:6D:0F:7C:47:2B:B5:12:8A:2E:07:0F:B3:28:12:65:E4
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01877D40F39A36F27012329301AB46F7BA2D
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/QI1Mwm0PfEcrtRKKLgcPsygSZeQ.roa
Signing time: Fri 14 Apr 2023 00:53:41 +0000
ROA not before: Fri 14 Apr 2023 00:53:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.153.132.0/24 maxlen: 24
46.102.174.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7d:40:f3:9a:36:f2:70:12:32:93:01:ab:46:f7:ba:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 14 00:53:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=408d4cc26d0f7c472bb5128a2e070fb3281265e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:55:3b:c0:60:0b:f4:c6:a5:84:5b:cb:7c:
7a:20:8b:8d:58:3e:90:14:f5:59:78:01:c1:5b:e4:
fc:94:31:56:a7:21:5d:21:ca:35:f7:ac:45:a6:e8:
1b:36:18:65:52:2e:d4:aa:65:29:d7:08:cf:3f:5f:
36:98:61:20:23:3b:7b:9f:48:fc:9e:aa:3b:4b:bd:
2a:bd:38:57:03:1b:6e:78:0b:5d:de:5f:c5:b4:e9:
c4:f7:4f:2a:bc:7d:cd:06:84:ad:2a:4b:0a:98:2b:
e7:b1:93:3f:68:57:98:2d:3e:d2:33:0c:0b:8a:49:
f2:d8:3e:b9:fb:84:dd:1b:b2:bd:12:b6:09:44:35:
21:a1:e0:c8:28:8b:13:84:8e:44:1f:30:42:98:5d:
67:05:1b:ac:cd:6e:d8:d9:1c:6a:17:2c:76:6b:79:
13:cf:f6:2d:92:c3:4b:07:9a:a4:b7:3c:7c:cb:7e:
d2:8c:1a:bb:97:5a:16:87:b7:de:0e:fb:dd:08:32:
f8:1c:2a:b8:d2:60:d9:8f:17:cd:5e:dc:19:9d:b5:
ad:7a:16:d3:f9:0d:3f:b3:e5:b3:7b:a7:62:c0:8c:
d6:ac:74:1a:52:d1:5f:1b:dd:ab:24:fd:1e:23:f5:
a1:83:d3:fc:a8:88:4e:05:6f:e3:28:1e:ae:e3:b4:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:4C:C2:6D:0F:7C:47:2B:B5:12:8A:2E:07:0F:B3:28:12:65:E4
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/QI1Mwm0PfEcrtRKKLgcPsygSZeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.132.0/24
46.102.174.0/24
94.177.118.0/24
Signature Algorithm: sha256WithRSAEncryption
44:86:84:12:3f:7b:56:3c:ee:63:3c:33:60:52:2a:77:ea:1b:
fe:8d:f0:26:39:fc:c6:5a:c6:bc:49:1e:ad:c9:15:51:c8:d1:
5e:98:41:35:ad:f9:0a:1e:a4:07:16:5d:1c:89:3b:26:02:ab:
6b:76:14:69:e6:1d:cb:92:55:89:74:d4:fb:8e:aa:8b:c4:f0:
d9:d6:ef:b7:cc:ad:ee:4c:a6:54:e0:55:fc:44:24:1c:9a:37:
64:8f:c3:3a:01:f4:67:35:0c:9d:c8:6e:79:8d:71:76:4a:78:
04:81:ad:3e:e3:8d:5b:83:e6:61:a6:a2:86:53:a1:58:1b:e1:
af:15:40:6b:28:eb:bc:82:9d:84:c6:ef:78:d1:1d:be:86:45:
48:5d:37:8f:1d:91:08:ae:00:60:7f:90:dc:1b:89:2b:95:33:
cb:2e:b2:a8:96:d9:fd:92:cd:7e:c6:27:4f:b7:00:07:80:92:
11:1d:e6:ed:93:81:2f:6d:27:f9:3d:8d:8e:af:d0:1f:c6:40:
16:b6:7d:f0:17:16:52:87:60:1c:00:07:a3:d7:f7:bf:63:c8:
bf:5d:bb:d0:1e:85:09:f3:18:75:c9:72:28:9e:13:cc:7a:a8:
23:0c:25:49:80:66:90:46:af:b7:c7:a9:14:fa:62:74:14:8f:
41:0a:e5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org