Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/qQNee2cwUUtNTRyvcQ9atKW2W50.roa
File: qQNee2cwUUtNTRyvcQ9atKW2W50.roa (raw, json)
Hash identifier: 9XLkpufUQFbWjzxbesHzxsvD7hQjn9R7X/3n9LRRi+k=
Subject key identifier: A9:03:5E:7B:67:30:51:4B:4D:4D:1C:AF:71:0F:5A:B4:A5:B6:5B:9D
Certificate issuer: /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
Certificate serial: 018570E76A9230731BEB17CC0096E36DFF71
Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/qQNee2cwUUtNTRyvcQ9atKW2W50.roa
Signing time: Mon 02 Jan 2023 05:14:52 +0000
ROA not before: Mon 02 Jan 2023 05:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197588
IP address blocks: 185.191.244.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:6a:92:30:73:1b:eb:17:cc:00:96:e3:6d:ff:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1
Validity
Not Before: Jan 2 05:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9035e7b6730514b4d4d1caf710f5ab4a5b65b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:a3:f7:91:b5:b3:51:22:50:88:a8:a6:6b:
9b:bc:62:6c:14:1a:05:f2:56:1b:71:2e:6c:95:44:
39:0b:ff:c2:e9:4f:b9:74:8c:33:dd:90:07:5c:d6:
94:15:ac:68:fe:7b:c6:f1:92:56:d8:97:6d:13:15:
71:30:c5:21:c2:16:86:98:22:b8:27:34:fe:03:2e:
5b:d3:56:b7:8f:43:cb:03:9d:71:fe:4a:e7:e4:50:
0e:74:93:0e:bc:dd:f0:af:80:11:16:d7:e6:56:33:
ec:e1:d9:f8:ae:2a:0b:de:0a:88:c3:76:43:a4:7b:
7f:62:21:0d:24:bc:e5:5b:a2:01:0d:cd:f1:51:bc:
51:38:3f:8f:72:6f:7f:1d:81:0d:7e:ac:fe:f9:36:
c7:10:97:62:08:b2:46:0d:5a:bd:5d:7b:e9:58:f7:
1f:d5:76:5c:8f:48:b7:85:0c:b2:d4:67:98:d8:66:
13:f4:8c:c5:d5:9c:bf:96:e8:5d:74:b0:db:49:b7:
af:04:7f:e5:1c:e1:9b:db:1d:db:2d:fc:61:b9:74:
e2:0e:a5:1c:94:56:21:ea:e9:c5:ba:bc:a8:fa:31:
5b:69:83:7f:af:5c:9a:46:44:f7:30:fc:12:ee:18:
47:02:56:f0:34:29:47:e4:d2:82:1a:2d:61:42:ff:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:5E:7B:67:30:51:4B:4D:4D:1C:AF:71:0F:5A:B4:A5:B6:5B:9D
X509v3 Authority Key Identifier:
keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/qQNee2cwUUtNTRyvcQ9atKW2W50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.244.0/23
Signature Algorithm: sha256WithRSAEncryption
19:c2:34:e8:8a:14:7e:75:47:43:56:78:4a:54:0b:b2:ca:fb:
cc:ec:93:85:cc:8f:6c:71:46:08:22:2c:b4:29:4a:ca:5d:f1:
bf:22:d3:92:d9:97:a9:63:ed:17:67:39:75:d4:82:76:db:a0:
c1:b3:4d:a7:db:47:da:69:dd:c8:c1:6b:c7:9f:92:49:c8:b8:
27:b4:24:ad:0f:a6:f6:84:2a:87:cf:5c:ca:7c:cf:61:56:ca:
aa:6c:c9:c8:89:c9:db:a5:ad:fc:9a:02:29:9f:e8:dd:7b:dd:
cc:55:6a:c3:fa:8b:69:9c:e9:a3:89:82:b2:18:54:ba:1c:cb:
4d:bd:62:9a:19:01:a2:da:a2:bb:11:e2:0b:23:43:25:43:62:
2b:9f:12:89:2e:04:1f:5d:1c:b8:e3:e2:b3:f8:cb:30:9e:66:
49:d7:b7:1d:49:73:b9:93:5f:d5:ab:0f:09:09:dc:d7:4c:50:
a3:52:ec:0c:00:bc:b0:b0:eb:18:ee:95:a4:d9:07:13:59:44:
ec:8e:ea:f7:44:1d:d2:f9:9b:7c:f5:3e:45:b9:43:37:32:8d:
24:c7:5a:a5:45:d7:ae:ad:4d:0f:33:d9:5a:43:0f:6a:17:bd:
f8:a8:05:d5:fd:65:98:c0:ae:11:d7:c8:73:d7:ef:18:83:fc:
06:7e:b5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:20 2024 by rpki-client on console.sobornost.net