Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/Qzf2P-ED24fFygfJrpXAksqUAWw.roa
File: Qzf2P-ED24fFygfJrpXAksqUAWw.roa (raw, json)
Hash identifier: ZoUx7bWKY0Wglh9BU2vk7ZYYWvsQ1bC60IyuOQQzgBU=
Subject key identifier: 43:37:F6:3F:E1:03:DB:87:C5:CA:07:C9:AE:95:C0:92:CA:94:01:6C
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 018CCA2B62600E7DDED6576DBD5477B14363
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/Qzf2P-ED24fFygfJrpXAksqUAWw.roa
Signing time: Tue 02 Jan 2024 12:34:50 +0000
ROA not before: Tue 02 Jan 2024 12:34:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212193
IP address blocks: 194.29.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 12:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:62:60:0e:7d:de:d6:57:6d:bd:54:77:b1:43:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jan 2 12:34:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4337f63fe103db87c5ca07c9ae95c092ca94016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1d:fe:be:ef:7f:bb:27:0f:05:73:a1:b4:11:
2a:58:fc:91:a2:de:85:46:b9:af:f7:d2:5a:52:3a:
24:8f:27:40:9b:dc:97:1a:11:1b:32:db:fd:15:c0:
cb:a2:df:88:fe:6f:62:ef:1f:3a:4d:32:d3:72:0c:
2b:d2:c4:d0:02:06:1f:d7:cd:77:7c:34:5a:a1:bd:
0c:f0:c1:50:51:b9:e2:e8:ba:dd:36:a6:3a:98:d0:
3b:15:65:b8:3e:5c:2a:e7:09:1e:00:6a:c6:52:67:
5a:63:da:9f:49:6d:30:62:98:d3:43:d2:d2:b3:0c:
bd:c5:43:0b:c9:4a:35:58:e6:7b:d1:29:ce:b6:69:
0e:67:ed:82:60:d3:34:84:da:4a:53:eb:68:7f:38:
24:42:66:cc:88:fd:b8:6f:61:bd:49:ec:18:e4:97:
67:39:c4:e0:05:96:65:ee:2f:b4:fd:db:dd:ee:55:
de:cd:2a:d2:a4:06:ce:e1:58:b7:17:7f:e8:3e:ac:
9e:ee:53:77:2e:a2:7e:ed:e0:eb:c0:92:b6:30:0b:
9b:6a:19:b7:b8:70:78:e6:e2:8c:a6:f9:94:da:4c:
c1:85:11:7f:b7:88:07:c8:ea:fc:6e:a1:77:12:24:
94:be:4a:02:78:5d:f2:64:be:e9:d8:b8:87:21:9c:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:F6:3F:E1:03:DB:87:C5:CA:07:C9:AE:95:C0:92:CA:94:01:6C
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/Qzf2P-ED24fFygfJrpXAksqUAWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:bb:84:dd:42:af:32:e3:f6:fb:27:b0:7e:0a:27:6c:46:60:
d3:24:da:ff:69:1e:89:b1:a1:dc:46:c5:fa:36:b4:ed:36:7d:
2d:25:1a:af:fb:d2:b6:bb:ac:dc:a8:ab:6a:b1:e1:c2:f4:b9:
1c:54:07:4a:e7:55:02:89:6a:94:94:f5:5d:96:10:ea:96:0d:
89:5b:5b:80:85:cc:78:f6:46:28:2a:05:a6:93:c1:0d:e9:d7:
08:05:d1:a7:d4:f3:09:1f:da:b7:5b:ad:9f:4e:89:a8:f6:63:
7a:ed:ff:97:14:fe:5b:2a:5a:73:55:ca:39:4a:b8:cd:49:79:
80:4e:77:4e:82:4b:9c:cd:32:08:ad:b8:e7:5d:0f:e2:a0:63:
b1:12:3d:33:bb:3f:00:91:ae:a2:06:ce:34:95:04:09:a8:e6:
ff:cd:9b:9e:41:34:ee:32:93:02:8b:61:66:1b:51:20:e1:2e:
e2:d7:7d:60:1e:4c:25:c5:66:e6:2e:06:84:34:55:7a:de:6c:
7d:43:19:a5:12:7a:65:bc:82:2b:0e:a3:09:ef:6b:af:53:c9:
d9:70:3e:dd:a8:5d:ec:93:7a:1f:04:36:d5:64:56:e8:7a:e8:
dc:41:cd:25:ef:a5:d2:00:12:95:1b:ff:8e:29:8f:36:7d:0e:
f0:17:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:36 2024 by rpki-client on console-ams.rpki-client.org