Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/qkBE-4Jc0bRBnuVuDCaWFryDZA4.roa
File: qkBE-4Jc0bRBnuVuDCaWFryDZA4.roa (raw, json)
Hash identifier: aP1EVh7kVkSsPT1o/8DYCwYZe08ZA2vsudgxMmejhPE=
Subject key identifier: AA:40:44:FB:82:5C:D1:B4:41:9E:E5:6E:0C:26:96:16:BC:83:64:0E
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 01856E2684DBDF9C6A613F43EEDF446A97DA
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/qkBE-4Jc0bRBnuVuDCaWFryDZA4.roa
Signing time: Sun 01 Jan 2023 16:24:56 +0000
ROA not before: Sun 01 Jan 2023 16:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41038
IP address blocks: 194.30.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:84:db:df:9c:6a:61:3f:43:ee:df:44:6a:97:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: Jan 1 16:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa4044fb825cd1b4419ee56e0c269616bc83640e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:82:ae:af:82:7f:97:29:46:6e:50:6a:38:
f9:ee:4a:47:f5:6c:81:bc:7a:60:6d:40:fa:2c:da:
d4:93:3b:51:2f:88:75:70:41:b0:c5:71:2e:15:08:
a3:38:7d:e3:5c:db:4c:42:cd:b6:aa:d4:ca:d9:3d:
5c:e3:54:ac:3e:6b:3e:1a:8f:85:4f:50:94:e0:eb:
02:ae:14:30:9c:f2:19:0b:e6:be:9b:7d:6f:02:e0:
69:29:49:fa:20:19:1b:11:3a:b0:cf:a2:d6:91:55:
9a:5d:10:53:3f:70:bc:8c:a5:41:a2:b5:e9:f7:98:
c6:8e:25:f2:b5:c2:ac:d8:4d:52:0b:54:1e:25:7f:
a8:e6:c9:47:50:ba:18:bb:47:dc:95:b4:7d:8a:d7:
43:f9:d1:c6:ab:26:97:3e:bc:66:a7:29:1a:1a:23:
f3:40:1e:99:ca:b7:54:88:29:61:fd:8a:e3:a5:0d:
d0:6a:af:6c:ef:07:aa:26:7c:3b:cc:cc:54:57:c7:
af:7f:e6:d1:62:19:f8:89:37:07:cb:13:bb:f4:4b:
6c:be:25:e1:10:5d:b5:8f:e2:82:64:03:68:a7:65:
cc:fb:76:57:db:0f:93:a6:a8:5e:0e:2f:15:f1:18:
e8:83:a5:41:93:a7:1b:bb:12:63:fe:fc:77:87:39:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:40:44:FB:82:5C:D1:B4:41:9E:E5:6E:0C:26:96:16:BC:83:64:0E
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/qkBE-4Jc0bRBnuVuDCaWFryDZA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.182.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e3:13:fa:dc:b6:30:c5:ca:07:d2:3e:c3:b9:bc:68:be:08:
c2:6d:39:c2:52:f3:a6:5b:8b:c9:30:52:30:bb:f0:c6:1c:86:
72:87:4e:1b:e5:22:73:fe:10:c5:7e:5f:5e:b2:4a:83:32:2c:
db:de:f9:db:79:5d:bd:2c:c9:93:7e:84:41:2a:69:34:c8:a2:
69:6b:c7:5f:19:da:82:83:64:67:82:86:5d:63:08:bf:25:82:
71:fc:49:b9:a5:94:a9:b3:87:c0:f5:bc:f0:e3:7e:5a:dd:d9:
03:1b:ec:84:90:eb:80:85:f5:f8:4f:f0:de:24:34:a8:8e:fa:
26:70:8e:7b:78:b9:c2:2f:d5:7e:77:ca:40:b6:2f:fa:44:a7:
b3:ee:41:da:19:99:fb:3f:b6:8a:29:82:0d:fc:3a:92:f1:f9:
84:06:98:4c:d4:8f:40:be:26:b4:d1:3d:63:27:bc:00:33:c3:
1c:e6:cb:3e:71:c1:3f:bf:2b:98:72:ce:07:ce:1f:3d:f0:b1:
2b:7a:02:5f:35:d7:74:7d:64:22:17:41:ef:5c:2b:03:53:b6:
d0:2c:da:20:89:4d:aa:79:72:2f:5d:8d:16:e3:8f:2f:18:85:
a4:02:86:0a:02:bc:2f:8d:b7:9e:1d:d9:a1:60:a4:2f:d8:d3:
1e:26:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:14:58 2024 by rpki-client on console.sobornost.net