Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/qjZiuaPNgFhIX_QPNXX6nHtNzDw.roa
File: qjZiuaPNgFhIX_QPNXX6nHtNzDw.roa (raw, json)
Hash identifier: jC1cjkvJVHhWVKzUVpWxB9hEtS4XZVb3HnTxPA54fCY=
Subject key identifier: AA:36:62:B9:A3:CD:80:58:48:5F:F4:0F:35:75:FA:9C:7B:4D:CC:3C
Certificate issuer: /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial: 01856FC2852B1D88029020BD0E10BD2533E4
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/qjZiuaPNgFhIX_QPNXX6nHtNzDw.roa
Signing time: Sun 01 Jan 2023 23:54:57 +0000
ROA not before: Sun 01 Jan 2023 23:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211669
IP address blocks: 185.251.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:85:2b:1d:88:02:90:20:bd:0e:10:bd:25:33:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Validity
Not Before: Jan 1 23:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa3662b9a3cd8058485ff40f3575fa9c7b4dcc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:56:66:e4:97:c7:1a:47:88:75:d0:32:4f:
bb:5a:a9:34:46:0f:c6:30:3f:78:d3:91:55:f8:12:
a6:37:19:29:07:0f:4b:c4:2b:79:b5:24:7b:c1:18:
6e:41:6e:34:de:0f:34:a5:71:2d:82:91:95:49:4b:
36:74:37:99:42:1c:b7:38:e9:5d:69:ff:60:50:15:
b1:60:e9:68:37:5e:8e:4a:f8:b8:b8:05:76:4b:ce:
67:a0:7c:08:72:d2:53:4a:39:a5:38:94:79:26:7c:
2a:bd:96:1e:b4:28:88:d7:04:63:11:fe:31:44:89:
fc:4c:9a:56:81:b7:da:21:b3:f6:4b:dd:b3:a5:25:
e5:c9:b1:aa:b7:aa:ec:fe:3b:56:50:07:8a:b7:62:
0f:42:0b:84:90:5d:3f:70:1e:fe:38:5f:72:fe:ab:
95:76:7a:a4:f3:8e:23:2c:a5:fe:5f:36:35:7d:93:
13:fb:70:87:b7:91:e4:4f:74:07:39:20:3b:f4:07:
a9:0b:28:b5:65:53:4f:06:7d:08:6f:65:c1:05:92:
00:d4:f6:30:96:ac:2b:cc:9a:b4:9f:47:28:d5:c7:
bf:4d:92:f3:74:6d:d5:e2:d4:26:f2:ec:42:db:9a:
e9:c5:44:c2:42:47:44:c9:b8:99:ab:67:00:e7:ee:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:36:62:B9:A3:CD:80:58:48:5F:F4:0F:35:75:FA:9C:7B:4D:CC:3C
X509v3 Authority Key Identifier:
keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/qjZiuaPNgFhIX_QPNXX6nHtNzDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.15.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7f:dc:b2:c8:b2:7b:b5:a8:1a:66:5d:d2:aa:66:f7:6b:54:
5c:88:84:68:81:2e:10:35:04:1f:e0:ad:7b:6e:5f:cc:cf:1a:
25:b7:3e:23:9e:bc:8b:b1:8d:41:dd:ee:b7:3e:2d:84:df:58:
66:d3:9d:af:32:a5:30:57:1d:e6:92:11:a8:fb:98:33:62:fb:
00:6f:92:36:95:63:b5:ae:99:f8:f4:a0:f2:58:bb:66:84:ab:
e1:42:26:7c:97:25:f0:65:e3:b5:e6:d8:3c:a5:3f:66:84:01:
99:a0:75:6a:f8:3c:44:77:55:7e:3a:06:c1:1b:8e:1f:1c:eb:
a4:c1:4f:dc:67:1a:a5:4e:7c:97:4b:c0:8d:5c:b5:90:87:00:
1e:e0:4a:3f:b0:61:94:f2:a2:ca:90:cb:d1:a7:32:51:02:75:
4a:e7:c9:a0:26:39:ec:7e:76:39:00:14:c6:38:aa:a8:cd:43:
31:09:93:7b:91:a7:4c:f8:89:56:8e:67:93:17:5c:c7:9d:60:
eb:b8:94:64:57:e9:6a:83:7f:4c:25:fe:8f:2c:b5:1d:fb:0f:
b1:8f:af:8f:b6:15:9c:8a:f1:3b:d7:cb:6c:5f:04:a7:01:78:
bb:cb:d9:02:55:bd:0e:aa:b6:bc:ed:39:b6:73:b9:74:a5:33:
56:1f:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:08 2024 by rpki-client on console.sobornost.net