Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/qPSRjluLIg8iC9iZ7AzljdH78fI.roa
File: qPSRjluLIg8iC9iZ7AzljdH78fI.roa (raw, json)
Hash identifier: BteR4gugF6NXQq/G3l5ejPpPJ6HXrF4tptZfaDaM0wE=
Subject key identifier: A8:F4:91:8E:5B:8B:22:0F:22:0B:D8:99:EC:0C:E5:8D:D1:FB:F1:F2
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018D6791F9474318C5D997A778E64D71666E
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/qPSRjluLIg8iC9iZ7AzljdH78fI.roa
Signing time: Fri 02 Feb 2024 02:07:16 +0000
ROA not before: Fri 02 Feb 2024 02:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206150
IP address blocks: 193.32.184.0/23 maxlen: 23
193.32.186.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 05 Apr 2024 11:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:67:91:f9:47:43:18:c5:d9:97:a7:78:e6:4d:71:66:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Feb 2 02:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8f4918e5b8b220f220bd899ec0ce58dd1fbf1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:87:b2:35:a7:0a:50:ac:f1:71:af:46:bf:
99:5c:3f:b3:25:f0:e7:4c:58:c8:6d:d3:c3:84:ba:
0b:0a:19:07:3b:84:1a:96:a5:b5:ea:05:d9:4e:01:
b4:0b:74:ea:e8:9a:91:d1:a5:1c:3e:16:75:17:7d:
a7:f0:34:d8:c0:63:50:21:0f:0d:63:58:40:38:77:
eb:9e:c7:b6:6a:c0:b0:a8:c5:96:55:0f:25:26:f0:
f2:26:6b:0f:a5:79:53:41:20:9d:70:13:de:a0:13:
30:3c:fe:b7:d9:dc:01:7d:13:2e:7a:1c:53:fd:6d:
54:5f:54:53:98:c8:a9:c7:8c:30:f0:8c:95:f8:43:
3a:6b:34:0e:f5:42:41:f3:e8:d2:c6:7b:39:db:6a:
9d:8f:93:f0:78:f7:8f:f6:02:0e:3c:41:61:1c:9a:
5a:43:7f:4a:28:ad:01:c4:ce:fb:c1:c5:3d:7f:c2:
16:f0:95:f7:b9:27:d0:43:f0:20:74:b8:13:e6:90:
bc:89:7f:b1:42:d8:bd:5c:17:10:54:b0:49:67:f3:
9d:af:a6:9e:5d:97:d9:da:36:84:ce:e2:f2:1f:b4:
cc:54:e7:b1:e7:07:9c:81:c5:31:09:1a:ae:0c:6d:
32:0f:f9:76:74:bb:13:19:dc:2c:7e:6e:84:89:b7:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:91:8E:5B:8B:22:0F:22:0B:D8:99:EC:0C:E5:8D:D1:FB:F1:F2
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/qPSRjluLIg8iC9iZ7AzljdH78fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.184.0/22
Signature Algorithm: sha256WithRSAEncryption
99:fc:c5:93:d1:2a:2d:70:c1:3d:e8:02:1f:0e:53:89:75:0f:
c0:2f:ad:d7:85:fc:80:8a:7a:da:32:ff:90:68:66:62:05:ac:
f1:42:38:5a:1b:5b:7c:64:68:83:39:99:8b:9b:47:b5:bd:65:
82:cc:5f:da:90:22:7a:b9:64:21:05:5a:19:80:d1:38:3a:90:
9c:f3:f8:30:61:00:90:e9:ea:ba:68:30:db:35:3e:b5:b2:df:
5a:fd:91:51:13:ec:65:49:ff:f3:5c:b7:19:94:e2:4e:d6:fc:
b3:b2:3e:8f:7d:c1:e6:4a:08:56:b1:6b:30:d9:a0:55:e0:4d:
45:89:8d:20:98:ec:d0:52:4d:45:a3:42:f4:5f:ca:8f:78:f8:
c8:4c:7e:19:6d:61:d6:0b:15:39:68:24:60:61:a5:17:12:15:
5b:c4:de:86:c8:7c:cb:07:a6:e3:a3:7b:d6:d7:49:5c:f1:d5:
ad:e9:02:12:76:56:ef:23:2b:ac:15:7a:5c:70:04:b5:52:a8:
7a:77:24:1d:c1:03:7e:78:98:64:17:59:9d:05:aa:d6:b9:7a:
93:34:91:40:1d:f0:5f:ac:b2:3b:a5:af:24:58:47:4b:0e:a4:
56:4a:01:e5:68:49:64:52:5e:3d:df:7d:63:8d:89:ca:30:18:
25:9a:91:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org