Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/qKuG2-X_bCQD5xCn36QDFmLkaJ0.roa
File: qKuG2-X_bCQD5xCn36QDFmLkaJ0.roa (raw, json)
Hash identifier: ddQzW8vx0oRnLdiFEoW1nJavJCfWBqCavo3tSMErs1s=
Subject key identifier: A8:AB:86:DB:E5:FF:6C:24:03:E7:10:A7:DF:A4:03:16:62:E4:68:9D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 0185704BC3BC6CCD1F11C3B60D8A8885E0A5
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/qKuG2-X_bCQD5xCn36QDFmLkaJ0.roa
Signing time: Mon 02 Jan 2023 02:24:51 +0000
ROA not before: Mon 02 Jan 2023 02:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31428
IP address blocks: 193.16.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:c3:bc:6c:cd:1f:11:c3:b6:0d:8a:88:85:e0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Jan 2 02:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8ab86dbe5ff6c2403e710a7dfa4031662e4689d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5e:8d:f5:18:db:48:5f:d7:21:fa:be:1d:f5:
f3:f3:0e:ad:05:bb:a4:9b:28:f5:13:64:d7:43:99:
b2:8b:2f:cd:78:a2:e3:25:b7:96:7f:a4:47:49:1f:
a8:bd:b0:f0:74:15:7e:a2:c3:24:5a:d3:4a:b0:03:
9a:89:7d:2b:23:ca:bc:01:bd:04:ce:05:5b:ad:32:
a9:88:46:6d:00:47:a1:50:0b:94:af:ae:a6:29:88:
66:d0:9f:30:3b:65:62:49:9a:c9:91:33:23:5c:ed:
6c:1a:7c:ea:b9:3d:bc:68:de:04:80:8a:25:7a:6f:
4a:1a:f8:1f:e8:35:dd:83:68:50:eb:7f:3d:dc:61:
a1:66:49:47:8f:de:7f:a6:31:09:0a:50:05:7a:20:
f6:fe:c0:47:ae:76:8e:1c:f9:c0:4d:6f:30:14:fa:
15:06:35:38:36:8e:a4:8e:23:e8:02:00:51:97:ae:
8d:bd:6c:1b:f8:5b:77:8b:5f:8b:17:5d:a4:40:60:
b2:0e:75:67:6f:01:ed:09:ef:de:f6:b7:6b:83:3c:
12:53:72:b8:12:33:35:b0:f9:67:19:97:30:cb:ef:
95:d3:52:f0:9e:44:25:bf:90:07:ef:0c:2d:17:60:
ce:f6:12:74:5b:06:11:a3:36:2f:48:8e:cb:61:32:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AB:86:DB:E5:FF:6C:24:03:E7:10:A7:DF:A4:03:16:62:E4:68:9D
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/qKuG2-X_bCQD5xCn36QDFmLkaJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.153.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e3:71:0d:be:a9:07:52:a4:8b:ae:08:2d:cc:39:d7:ab:69:
d8:b7:a2:ff:63:91:53:63:6f:24:3b:6b:39:72:ee:9c:35:33:
87:4a:87:8b:9f:73:73:14:c7:ab:41:27:2c:c9:82:8a:13:3d:
36:69:8c:d3:ac:da:96:85:d2:e0:ae:3e:76:78:97:3f:d7:e2:
aa:5c:14:f0:49:24:e6:3c:43:0c:09:a7:00:9d:5e:04:c2:3c:
e3:2f:9d:83:eb:ed:fb:53:da:a8:80:81:5e:68:ff:b8:0a:51:
47:d9:0b:d7:26:b0:86:7b:4b:f8:e4:b4:61:72:de:e5:b2:52:
62:64:56:ff:0c:5b:a2:5e:0d:c9:f1:72:64:fd:1c:f5:4f:59:
de:7d:46:cd:61:df:cb:4b:36:ef:ef:e0:b1:21:69:53:73:12:
dd:66:75:a0:8f:0e:11:17:96:d7:c6:fe:67:4d:90:c6:26:5d:
42:10:2d:42:66:a3:be:6b:b9:14:23:c9:7f:6e:81:60:6c:bc:
cd:3e:e2:46:06:23:be:fd:53:66:5f:d6:34:e2:71:31:f6:0d:
5a:8d:e6:15:46:34:dc:6f:42:4e:9d:12:e4:09:70:52:b2:e1:
42:51:7e:d5:33:c0:e7:00:ed:7c:7a:c3:1c:5d:56:84:51:71:
55:42:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:50 2024 by rpki-client on console.sobornost.net