Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/qzntShJ9lxefFjaLQUeCUrFyvLQ.roa
File: qzntShJ9lxefFjaLQUeCUrFyvLQ.roa (raw, json)
Hash identifier: ssSguhaC8eq94gH1c/2OAXMImXofz3sfWbxI4PywIlE=
Subject key identifier: AB:39:ED:4A:12:7D:97:17:9F:16:36:8B:41:47:82:52:B1:72:BC:B4
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 0188B5ABED8B549BE760FABBAE73C93DA9D1
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/qzntShJ9lxefFjaLQUeCUrFyvLQ.roa
Signing time: Tue 13 Jun 2023 16:52:03 +0000
ROA not before: Tue 13 Jun 2023 16:52:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45035
IP address blocks: 195.60.178.0/24 maxlen: 24
195.60.179.0/24 maxlen: 24
195.158.234.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:ab:ed:8b:54:9b:e7:60:fa:bb:ae:73:c9:3d:a9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Jun 13 16:52:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab39ed4a127d97179f16368b41478252b172bcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:76:77:10:0d:c8:86:8e:ca:b8:cc:33:e5:
a0:fc:98:df:17:97:90:48:cd:c6:5c:fe:2f:fb:33:
b5:a3:9e:20:c1:0b:e6:3e:75:b2:7e:24:0c:7e:f5:
00:7b:4d:b3:fe:63:9d:1d:cd:83:72:a9:ea:b5:12:
5d:66:32:ff:6d:b1:4e:ab:ea:a9:cb:53:2f:9b:9b:
ab:13:cb:3e:0e:d6:f0:ad:26:fe:76:40:91:ee:9b:
69:3c:4e:31:88:da:3a:04:0b:a6:94:28:a9:f4:82:
b3:4f:4f:20:3c:90:bf:c6:d7:4e:0c:51:08:bb:40:
48:4e:1e:56:bf:8a:f8:ea:0b:cf:a7:f5:e3:17:06:
9e:6b:20:e5:f2:ef:3f:c3:39:7f:0f:53:17:8d:87:
46:84:dc:39:bb:84:77:d7:66:40:7f:20:6b:e3:7c:
c9:f1:08:4d:37:78:62:e8:87:18:91:17:27:52:17:
2d:f9:a7:a1:03:e4:da:2d:85:7c:cc:52:93:df:17:
4f:8e:72:f2:54:8c:ef:1a:08:3e:f4:58:2b:92:71:
c3:4b:11:3b:12:30:c9:97:aa:da:23:5a:1b:d2:73:
1c:35:27:43:08:c4:d8:36:a6:b7:55:3c:a1:15:bb:
97:69:1e:19:d3:67:f9:1c:b6:94:5e:06:50:e5:e5:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:39:ED:4A:12:7D:97:17:9F:16:36:8B:41:47:82:52:B1:72:BC:B4
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/qzntShJ9lxefFjaLQUeCUrFyvLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.178.0/23
195.158.234.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:08:e4:42:fc:2b:c4:ef:97:89:ce:00:ad:64:c4:74:2b:3d:
59:97:94:7f:02:08:47:bd:94:e6:9f:b1:da:43:e4:c1:ac:8c:
dd:bd:aa:5d:2a:3c:44:0f:d4:8f:17:1f:ca:9a:63:42:ba:6e:
f6:20:68:c8:ce:53:c1:6e:49:ec:9c:6d:ae:e0:06:c9:11:d2:
4e:8b:99:d7:6b:b3:da:9a:73:f1:af:7d:0b:47:82:02:0a:f0:
2e:aa:76:d7:ec:e3:6a:2b:2b:21:da:41:ab:17:63:28:98:ed:
84:a5:eb:e9:0d:0f:70:7b:fb:34:52:26:4c:f0:f3:67:97:06:
bf:0f:95:3e:22:47:02:13:29:f0:5a:39:d2:1a:7d:ed:88:35:
a3:c0:53:9b:b0:19:15:ba:9d:71:71:bf:ca:85:9c:98:57:9c:
1b:35:03:09:f6:fc:1c:21:d2:5d:32:66:d9:5c:57:57:e6:b6:
76:04:ea:40:00:4e:6c:7e:19:2f:2b:15:a4:d7:52:b9:ba:bb:
d6:f8:93:85:b8:16:26:ff:67:e3:7e:b7:6a:70:9c:a5:93:0e:
18:ba:67:fe:92:90:db:29:7e:ff:70:7b:54:8e:42:bb:0c:75:
ba:60:4d:b9:4e:12:bf:95:f5:c5:59:17:8b:f3:4f:4e:55:81:
a9:f3:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:33 2024 by rpki-client on console.sobornost.net