Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/_qiefWsbMGApRIWd0xzQ2jSIyGE.roa
File: _qiefWsbMGApRIWd0xzQ2jSIyGE.roa (raw, json)
Hash identifier: esFkczipHZU3O3sVgPCqm6RtlW9s+yd//62/xdqDg0U=
Subject key identifier: FE:A8:9E:7D:6B:1B:30:60:29:44:85:9D:D3:1C:D0:DA:34:88:C8:61
Certificate issuer: /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Certificate serial: 01856C1383E97934494764062105399B4222
Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/_qiefWsbMGApRIWd0xzQ2jSIyGE.roa
Signing time: Sun 01 Jan 2023 06:44:56 +0000
ROA not before: Sun 01 Jan 2023 06:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35524
IP address blocks: 195.200.90.0/23 maxlen: 23
193.84.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:83:e9:79:34:49:47:64:06:21:05:39:9b:42:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Validity
Not Before: Jan 1 06:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fea89e7d6b1b30602944859dd31cd0da3488c861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:50:5b:ae:25:48:f5:16:06:8a:2e:28:dc:
39:1a:8c:c2:27:43:26:b4:2a:b5:0e:85:87:78:87:
3f:b9:99:c7:95:20:61:a5:db:be:52:75:1d:f6:98:
ef:85:dc:83:4d:84:88:76:b7:af:ed:85:0b:ed:95:
bd:07:da:8b:b4:84:66:ff:0e:2e:bd:6a:50:00:2c:
87:86:f5:4e:e8:07:62:0b:55:0d:fe:7f:86:ac:5e:
6f:57:48:cf:d4:29:04:07:75:87:fe:e6:14:1e:80:
d7:a7:8d:36:60:6f:c2:d9:17:48:3d:29:b4:dd:ec:
35:f6:ef:9f:a7:5f:2c:cf:73:80:2a:e0:29:7c:c1:
f4:6f:db:78:64:74:cb:64:cd:51:04:48:70:aa:b2:
8d:e2:5d:71:bc:34:a8:a4:76:69:e1:1e:3b:35:15:
25:75:a9:48:9a:83:70:99:a5:25:0d:54:07:26:24:
fd:6b:01:d3:12:10:55:bc:25:4d:76:f0:fd:06:80:
ca:95:cc:75:d8:0e:82:06:ef:c4:c6:e2:fb:20:03:
8a:fa:8f:51:52:90:1c:93:5b:57:aa:b8:f0:bf:64:
36:2d:17:f3:30:d9:74:aa:30:8c:68:75:25:b0:73:
aa:6d:3e:64:43:93:a6:a4:d0:38:fb:ba:a6:81:a3:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:9E:7D:6B:1B:30:60:29:44:85:9D:D3:1C:D0:DA:34:88:C8:61
X509v3 Authority Key Identifier:
keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/_qiefWsbMGApRIWd0xzQ2jSIyGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.77.0/24
195.200.90.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:aa:6e:45:0b:42:df:0e:c1:21:74:ea:2a:f3:28:63:72:b5:
e9:57:de:b3:c0:20:23:0a:0b:02:06:3e:70:81:68:5b:d4:03:
60:7f:bb:6e:a7:f2:98:3b:7e:b7:2c:b8:2a:bc:6b:0a:cc:78:
6d:b6:ed:56:f8:95:49:4f:27:46:cd:e1:a1:91:4e:fd:10:da:
82:5a:66:7e:02:16:65:90:97:eb:b5:fd:8b:e9:10:aa:af:62:
f3:62:96:6d:ca:78:10:55:a9:e3:5c:3c:28:19:88:f7:99:31:
53:8f:90:95:d4:25:a6:8e:31:79:a2:9e:89:d1:ad:d3:2c:03:
fd:19:0b:8d:98:3c:c5:34:32:3d:1d:3a:33:96:dd:0a:0d:27:
49:d2:97:ec:6f:00:9d:21:62:c1:66:63:09:a4:0e:d5:4b:bd:
4c:8e:23:54:f6:05:33:c0:34:ba:bd:60:4e:cb:ce:23:06:e3:
6a:64:3e:7a:b0:4c:fd:ba:4c:a9:45:a5:99:3d:bf:9e:67:9b:
b0:33:31:79:48:44:8e:ea:02:c2:99:dd:22:01:ea:2e:fe:75:
c7:ea:3d:82:83:d7:18:13:6c:56:4b:c2:fa:d4:cf:03:10:77:
b5:ef:33:0a:86:c4:2e:f2:e6:f4:49:9d:ed:00:97:02:74:0d:
0a:81:64:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:14:59 2024 by rpki-client on console.sobornost.net