Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/qXel1soGGWTHko9MTZOIf2gNdbw.roa
File: qXel1soGGWTHko9MTZOIf2gNdbw.roa (raw, json)
Hash identifier: Y2+Mhaivh2WpS1fsOaL4kKJq5AkhYUod58rvFXRaBEU=
Subject key identifier: A9:77:A5:D6:CA:06:19:64:C7:92:8F:4C:4D:93:88:7F:68:0D:75:BC
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 01856E0B12A5D2B547C6DADB69D374CEAB46
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/qXel1soGGWTHko9MTZOIf2gNdbw.roa
Signing time: Sun 01 Jan 2023 15:54:57 +0000
ROA not before: Sun 01 Jan 2023 15:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33517
IP address blocks: 80.231.219.0/24 maxlen: 24
80.231.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:12:a5:d2:b5:47:c6:da:db:69:d3:74:ce:ab:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 1 15:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a977a5d6ca061964c7928f4c4d93887f680d75bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:10:dc:25:dc:79:94:13:9d:94:6e:e4:f0:
05:38:45:55:bf:63:6b:74:14:66:ee:4f:09:32:71:
45:1c:09:5b:1d:e3:8b:8c:bf:4a:d7:ef:89:0b:8f:
d0:8e:5a:af:18:a8:6e:59:06:f3:99:57:89:7a:6e:
03:91:85:71:df:e5:7f:e2:ac:91:ee:10:2a:dd:7e:
70:f4:96:3b:50:12:af:aa:bb:f8:81:89:54:a6:b7:
fd:85:a6:36:9e:d7:f2:1e:52:7d:fd:b8:bb:cf:30:
92:79:ea:7c:01:57:ab:0e:dd:d5:e6:52:db:f9:e7:
98:70:4f:76:e9:51:15:42:f1:0c:f4:87:9e:77:3e:
8e:bc:b2:a0:fe:dd:3e:96:82:0a:d8:9a:8c:49:52:
3d:d3:37:d2:b2:8d:80:d2:8b:d8:2d:64:62:c8:1c:
ea:68:92:e0:7c:9c:38:16:4e:ea:66:17:e9:9a:d6:
9c:da:5c:bc:2f:8b:db:8e:8a:cb:4b:e1:c7:af:33:
c4:92:69:aa:46:1e:40:cc:5a:1e:78:17:c2:33:1f:
c7:84:b5:e5:17:66:ab:e9:aa:5d:ba:bf:44:58:be:
55:60:b2:16:ff:9c:22:73:c5:1c:41:7f:d8:42:38:
ae:9c:38:86:25:37:fa:b7:36:b4:cc:1f:39:6d:e3:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:77:A5:D6:CA:06:19:64:C7:92:8F:4C:4D:93:88:7F:68:0D:75:BC
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/qXel1soGGWTHko9MTZOIf2gNdbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.231.25.0/24
80.231.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:da:e4:e9:56:53:fe:f7:a3:f4:14:37:80:9d:14:3d:f2:76:
bc:b4:ee:e2:b9:72:e7:56:8a:26:f7:c3:38:d1:81:66:58:29:
54:f0:ad:d0:48:b7:29:2a:88:28:98:42:80:25:b0:7e:08:f1:
b2:a1:fd:8c:51:b5:03:b2:2e:94:f7:43:4a:c6:42:f0:24:34:
d2:f8:04:5c:73:f0:07:7e:7b:ee:80:38:29:1d:9a:95:fc:c6:
5d:4d:21:5d:7f:0c:3a:e5:da:7b:2a:98:3c:43:8f:37:a7:e5:
98:09:c3:ca:2c:5a:a4:3c:72:2e:5f:98:02:48:1c:83:55:20:
7b:4d:55:5c:dd:59:cf:ca:fd:0e:df:a5:d9:1a:8c:dc:a8:1c:
b1:1d:e9:b6:a3:4e:b0:62:43:7f:0c:e6:30:94:59:b6:e6:a9:
d3:0a:d9:ac:50:83:0d:d1:f8:1c:39:1b:c1:b8:0a:67:a0:aa:
4d:c3:20:30:8c:86:26:d8:31:1c:11:8a:e3:70:0e:ed:9c:fd:
b7:0e:05:28:66:e7:57:55:2a:23:9a:e3:3f:a3:6f:93:45:2b:
71:48:74:01:72:e6:78:15:cb:41:41:cb:97:42:20:84:bb:ed:
9f:4a:9c:af:16:bf:d4:f6:24:1f:db:a7:a0:e1:86:dd:40:c5:
83:cb:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:19 2024 by rpki-client on console-ams.rpki-client.org