Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qmoV2qQYGFfh2V9kJmLGKvZBkME.roa
File: qmoV2qQYGFfh2V9kJmLGKvZBkME.roa (raw, json)
Hash identifier: pEqXD+NuBlBZtZjbKWbYWTFSAYevcMee8VL1IT7EPrY=
Subject key identifier: AA:6A:15:DA:A4:18:18:57:E1:D9:5F:64:26:62:C6:2A:F6:41:90:C1
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEB806991CCE0EAF6CFE7FFE553E4F
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qmoV2qQYGFfh2V9kJmLGKvZBkME.roa
Signing time: Sun 01 Jan 2023 06:04:44 +0000
ROA not before: Sun 01 Jan 2023 06:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34656
IP address blocks: 178.16.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b8:06:99:1c:ce:0e:af:6c:fe:7f:fe:55:3e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa6a15daa4181857e1d95f642662c62af64190c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:bf:84:5a:9f:74:33:aa:5c:26:f3:02:ef:
bf:7b:a8:da:02:4b:d2:81:b3:ca:ef:14:5d:10:05:
a3:e2:03:45:45:35:f9:61:02:8c:04:c5:be:73:dd:
c2:85:e4:c7:71:ee:6f:42:38:1d:fd:89:35:27:be:
bb:82:8b:f5:a1:0b:88:bf:1c:6d:3e:52:a5:0f:f8:
ba:2d:d5:24:f6:f5:95:a8:74:8c:40:3b:e1:9f:08:
35:ac:5e:4f:e0:8c:1c:0a:62:7d:de:d4:99:e9:a2:
5e:12:a9:48:f4:50:28:0c:95:a3:46:6d:48:8e:02:
3c:15:42:f0:3b:c1:4e:b2:b6:6d:49:ee:7f:15:90:
52:d9:90:b3:c3:ab:0f:a6:70:c2:3c:94:34:01:14:
58:60:2d:4a:98:c3:03:f0:78:fb:0c:8f:c2:47:9e:
47:2e:70:44:e5:6e:b9:05:d2:c2:f5:78:cb:6f:23:
8a:df:bd:59:92:3c:ff:1a:76:c4:4c:87:cd:3a:74:
d8:01:91:19:25:7f:9f:62:ad:20:35:a0:6e:57:a7:
f4:7f:62:de:a6:36:00:b1:a2:0a:01:66:4f:74:9a:
4c:d6:8c:11:89:e4:30:2a:0f:02:f2:97:56:e8:4c:
3d:43:aa:0f:c6:c2:a6:46:6c:7f:7a:ed:ef:2b:60:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6A:15:DA:A4:18:18:57:E1:D9:5F:64:26:62:C6:2A:F6:41:90:C1
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qmoV2qQYGFfh2V9kJmLGKvZBkME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:30:24:cb:5d:32:1a:c6:69:1c:76:ff:6a:5d:1e:cb:e4:19:
73:29:40:7d:85:9f:79:3c:9f:ab:00:fe:dc:a5:e2:41:67:42:
5b:3a:c7:29:ec:0d:19:89:7a:39:32:0a:18:b0:af:48:b1:53:
29:5b:8a:1f:61:52:80:b8:21:eb:d6:da:5a:8c:55:38:a5:a2:
75:09:eb:df:74:0f:57:56:f2:db:6a:54:89:cd:48:00:bc:04:
88:0f:4c:64:66:4e:41:01:c2:3e:89:cb:f4:48:80:56:c2:ed:
0a:34:9e:cc:a8:20:81:4b:21:6b:67:c4:78:33:6c:87:cd:90:
70:f2:f8:84:2f:b1:7e:11:5f:f9:8c:97:34:6b:60:94:7c:42:
ea:c6:b6:0c:77:1e:9d:75:05:c2:5b:13:67:e9:fe:49:e9:27:
28:08:4d:3c:25:7b:76:96:00:18:74:1d:09:cb:0d:04:78:30:
65:7d:65:5f:e9:81:a6:2b:f5:0f:44:0b:07:d5:66:6b:49:aa:
71:28:4f:70:cc:a6:32:44:66:1d:8a:14:12:1e:a3:03:e8:c3:
82:f7:fa:9d:8e:a7:99:1c:0f:8b:75:c9:3b:ab:3f:53:f9:f1:
ad:04:8f:cb:c2:f3:74:8b:26:6a:6a:47:12:6d:bc:81:86:a9:
f5:3b:ec:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org