Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/BQErBJjpuOqRTrtUqRJVu8CZiBY.roa
File: BQErBJjpuOqRTrtUqRJVu8CZiBY.roa (raw, json)
Hash identifier: 5cenmMXNOhhVzUIlP9oU+5jZLbEJrOlsGggiI5j/uNQ=
Subject key identifier: 05:01:2B:04:98:E9:B8:EA:91:4E:BB:54:A9:12:55:BB:C0:99:88:16
Certificate issuer: /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial: 018AD0F366EFA7DB2D1323A034DE61911E9F
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/BQErBJjpuOqRTrtUqRJVu8CZiBY.roa
Signing time: Tue 26 Sep 2023 10:05:27 +0000
ROA not before: Tue 26 Sep 2023 10:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206926
IP address blocks: 194.1.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:f3:66:ef:a7:db:2d:13:23:a0:34:de:61:91:1e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Validity
Not Before: Sep 26 10:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05012b0498e9b8ea914ebb54a91255bbc0998816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:03:d9:5d:12:e7:96:e7:88:ca:24:83:55:
49:f5:db:01:fb:56:a4:68:cd:95:18:4b:2c:ff:97:
ce:61:6c:ab:03:d8:07:de:b7:f5:19:41:c2:c2:2f:
34:7c:61:8d:c5:3e:61:9c:d1:60:b8:47:da:c3:b6:
e6:7c:6e:73:77:7d:a3:af:13:17:72:53:a9:73:ea:
26:4a:06:11:e6:57:25:ea:5d:45:4b:63:dc:06:2c:
f6:a8:2d:8a:b7:3b:a9:69:2c:bd:cf:1f:69:4e:0d:
a0:8e:6f:16:b8:cf:78:16:30:f9:e8:60:8d:19:d1:
d8:72:8e:2e:11:30:a5:03:09:93:63:a7:65:84:c0:
47:0f:53:bd:36:51:11:1a:e5:cf:6a:e2:7f:66:7c:
59:a2:55:84:45:ac:2e:f0:8b:b9:a0:31:4e:bf:70:
e7:94:ad:91:c2:35:ee:ec:c1:19:35:8f:29:a3:63:
b4:c6:a5:88:25:a3:97:04:80:4e:64:b5:d1:f9:1f:
34:6a:a9:9e:e6:f0:df:6d:77:c5:a7:72:e7:b4:0b:
24:e1:5f:f6:15:7f:43:d4:47:4f:c8:0b:af:3c:61:
b4:fe:ba:22:b8:95:1d:26:3e:7f:12:a2:65:50:36:
af:fc:22:2b:51:d1:ab:78:00:8a:2a:5b:b9:0c:90:
dc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:2B:04:98:E9:B8:EA:91:4E:BB:54:A9:12:55:BB:C0:99:88:16
X509v3 Authority Key Identifier:
keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/BQErBJjpuOqRTrtUqRJVu8CZiBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.145.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b1:a1:2a:95:03:ac:61:77:58:ad:a5:39:87:96:05:94:11:
52:e7:5e:25:b2:9a:96:77:b9:b7:bf:f4:93:71:a0:21:6a:e8:
09:7c:a8:ac:3f:91:20:cf:0c:32:65:a5:a5:90:09:61:70:f2:
e9:b2:d3:80:85:06:b2:4a:f8:79:7e:d8:21:a1:09:a2:f9:2c:
59:03:6e:d1:89:eb:fa:e0:ae:e2:17:88:d8:16:f1:f8:f2:47:
82:38:2d:f6:c3:16:0c:91:d8:9f:59:77:58:84:0b:f8:7f:5b:
23:b5:16:6c:00:ff:9f:25:d8:22:a8:ad:23:09:b2:8d:ff:4d:
aa:f1:14:eb:cb:1e:59:ed:50:22:95:b3:b3:2a:da:f6:02:84:
34:af:47:c6:2e:fd:30:18:b9:68:13:51:de:93:76:f8:30:f0:
2d:f4:16:08:9e:53:3d:da:10:37:24:87:ae:33:4a:66:37:e9:
9e:56:d9:bb:3f:bd:d7:a1:c6:62:dc:b1:6f:94:0e:e0:26:d6:
29:fa:20:6c:af:2b:7c:89:72:89:d4:f5:fc:12:57:47:2b:17:
d1:d6:90:2e:4c:c3:5f:da:d0:c6:55:04:de:68:30:9b:4f:80:
1c:6b:dc:6c:0b:5c:1a:2a:33:b7:74:1a:27:5c:c3:1d:75:0d:
68:02:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:45 2024 by rpki-client on console.sobornost.net