Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qvjl4leqnMJp2UJ2m6Q7cpLy3A4.roa
File: qvjl4leqnMJp2UJ2m6Q7cpLy3A4.roa (raw, json)
Hash identifier: HQ9+u/rSuqxOaNAKZkFqWnARBhpiFEwyx1rV4l0jE38=
Subject key identifier: AA:F8:E5:E2:57:AA:9C:C2:69:D9:42:76:9B:A4:3B:72:92:F2:DC:0E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A4C6D47B31892767EC48F04BD0EF7F79B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qvjl4leqnMJp2UJ2m6Q7cpLy3A4.roa
Signing time: Thu 31 Aug 2023 16:29:04 +0000
ROA not before: Thu 31 Aug 2023 16:29:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50281
IP address blocks: 45.81.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Sep 2023 17:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:6d:47:b3:18:92:76:7e:c4:8f:04:bd:0e:f7:f7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 31 16:29:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaf8e5e257aa9cc269d942769ba43b7292f2dc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:f2:a7:85:7e:5e:ec:57:fb:8e:9b:e7:95:
16:a5:af:3e:58:56:22:bc:d4:ee:90:94:f0:e1:bd:
83:55:76:c1:90:e8:b7:00:be:36:b8:98:9f:8e:68:
3b:10:4e:59:ad:5f:75:ff:8c:33:cc:e9:51:e5:17:
8a:43:f5:50:ce:4a:08:c6:42:6f:bb:10:ae:38:bc:
7a:1e:92:16:1e:7e:f4:6b:48:af:a2:38:17:40:63:
48:8f:5b:b5:2a:2c:6e:b8:97:20:8e:21:36:ca:61:
1c:79:38:29:48:bb:33:8f:b5:c0:b3:0b:7e:94:86:
61:6b:b2:dc:4c:04:b5:6d:99:38:2b:0d:9b:05:b6:
ac:02:ee:f7:44:a0:8b:ad:44:24:06:95:21:5a:6c:
7a:cd:e8:66:d7:7e:99:26:07:7d:4d:82:26:fc:0f:
9b:12:e8:04:b6:4b:71:0c:46:c8:22:b6:9a:5a:35:
97:c9:06:bc:dc:a6:a3:95:91:68:d0:95:30:df:91:
14:e3:31:a4:d4:c9:4e:3b:10:de:0e:a9:f2:f2:bb:
a9:6c:0e:d5:7e:a7:d5:a8:8f:05:4d:16:dd:a7:c9:
ca:f8:f9:52:7c:0f:ed:e4:c1:95:82:11:33:07:fd:
6c:9b:c3:1c:23:1b:2c:39:81:c1:da:74:4c:7f:ca:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F8:E5:E2:57:AA:9C:C2:69:D9:42:76:9B:A4:3B:72:92:F2:DC:0E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qvjl4leqnMJp2UJ2m6Q7cpLy3A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.114.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f7:0a:50:2e:28:12:1b:0a:70:a2:c5:85:66:9a:90:a9:48:
bd:75:e0:a7:76:13:b1:46:54:86:20:f1:17:a1:a1:b6:84:3f:
e7:e6:ec:d3:05:64:af:17:9d:63:b1:91:71:6a:5d:9f:97:cb:
30:45:62:1a:e0:fa:c4:4f:f0:d5:d4:cc:2d:f7:a4:ee:69:8f:
30:01:dd:eb:f0:98:51:2e:5d:ea:f5:24:d9:9f:94:64:76:47:
0d:97:e8:a9:cd:9c:e5:88:08:54:91:79:e3:47:db:8c:20:5c:
03:60:b3:98:6c:17:5d:0e:c4:0c:9a:00:6b:a8:db:04:63:7a:
ef:da:06:6c:07:3a:d6:42:d4:e7:37:5a:01:81:3e:62:14:9e:
ec:21:48:f9:24:2c:2e:f2:6b:8b:0f:86:64:63:1f:4a:41:69:
da:08:4e:8c:2c:27:63:05:37:48:27:3c:1a:e2:6b:d4:22:0e:
ee:05:6c:e4:1b:47:8b:fb:af:5a:bc:4b:07:59:48:5a:21:12:
09:ae:9c:8a:0d:20:ab:a2:2a:29:f4:4c:a4:23:ec:b1:e9:eb:
f3:43:ef:6a:c6:bb:77:d0:bf:8b:4c:94:18:3e:17:2e:a0:f8:
5f:c7:3d:0e:d1:5d:2a:bd:bf:2c:36:80:99:6d:66:38:61:3c:
fe:5e:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org