Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/QAV8SFqn7vor0pq_zDJ5QgPqftw.roa
File: QAV8SFqn7vor0pq_zDJ5QgPqftw.roa (raw, json)
Hash identifier: u3ZzxIIAzaM/dtK4z2QkR+t78SruYRSCagKQwpbBrGc=
Subject key identifier: 40:05:7C:48:5A:A7:EE:FA:2B:D2:9A:BF:CC:32:79:42:03:EA:7E:DC
Certificate issuer: /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial: 018A669B98D0B80F485B9FF4F8A01BD10F0D
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/QAV8SFqn7vor0pq_zDJ5QgPqftw.roa
Signing time: Tue 05 Sep 2023 18:29:47 +0000
ROA not before: Tue 05 Sep 2023 18:29:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57236
IP address blocks: 193.42.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:66:9b:98:d0:b8:0f:48:5b:9f:f4:f8:a0:1b:d1:0f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Validity
Not Before: Sep 5 18:29:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40057c485aa7eefa2bd29abfcc32794203ea7edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:97:26:49:eb:9d:30:2a:c2:19:1e:1f:0c:23:
a6:bc:6d:2b:34:d0:66:00:ef:d2:69:c2:44:65:12:
c8:79:8f:1f:3a:a0:86:c8:33:2d:5c:ef:47:cf:16:
91:e9:49:7b:d5:32:aa:60:97:77:1d:1c:c3:89:d6:
c4:8a:4f:d1:4a:4a:19:21:28:7b:4f:f9:22:17:70:
6c:30:1b:ce:c8:d4:f4:1c:26:05:8d:14:8a:58:c3:
de:eb:1c:2c:d6:7f:63:d5:c2:be:25:39:4b:7b:01:
bc:0a:57:24:7a:26:69:16:63:d1:e8:bf:70:42:02:
e0:9e:08:38:49:03:13:0a:7b:fc:fd:f3:29:d0:b0:
80:86:d8:68:9a:8a:ac:ad:b0:0e:34:04:a3:08:01:
02:ae:b6:13:0d:3a:38:0d:e4:38:9d:c8:b3:d6:c6:
25:33:d4:1d:bc:5a:cd:70:82:e4:e9:1c:0d:b6:f7:
69:19:8e:83:5c:e0:e7:30:b8:27:e4:36:98:b8:5a:
91:7f:04:0b:43:9d:9f:25:20:74:90:1f:a8:c8:02:
f1:31:e2:63:a2:03:a8:d5:13:9b:69:ae:27:ca:b0:
1c:69:2a:c5:ed:0b:de:fb:9a:66:40:7e:8e:d0:55:
5d:1f:1f:48:a1:8d:1d:2a:bb:8b:eb:95:3a:74:98:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:05:7C:48:5A:A7:EE:FA:2B:D2:9A:BF:CC:32:79:42:03:EA:7E:DC
X509v3 Authority Key Identifier:
keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/QAV8SFqn7vor0pq_zDJ5QgPqftw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.4.0/22
Signature Algorithm: sha256WithRSAEncryption
65:aa:59:12:bd:97:2a:b3:84:cf:c3:87:2c:ed:41:89:91:0a:
26:f2:c4:3c:e9:a4:c5:92:e5:c3:3d:55:65:9b:ef:b5:33:d8:
ca:5f:7c:00:eb:6b:7f:b0:26:bb:d7:5a:35:c3:47:d7:25:f5:
c1:d1:6b:3f:0b:d0:84:03:80:c0:55:de:52:c1:2d:c6:ec:d8:
da:67:02:0d:9b:2f:46:88:1d:1e:00:3d:67:cc:02:dd:0b:f1:
a7:c2:8a:36:50:b6:2c:85:5d:b3:35:c7:c8:39:e4:b3:35:2e:
5c:0e:f2:b2:9d:d6:4d:ed:92:ae:e5:f4:bb:f1:a1:39:06:19:
67:0b:fc:df:38:22:aa:2d:dc:dd:ab:bf:8b:ec:36:1f:b2:03:
11:6d:0d:fe:a5:c7:29:08:b3:e1:10:07:4c:09:c1:4c:ed:74:
a7:b7:c6:5a:77:96:45:e4:9d:8c:43:01:69:1f:c9:71:f7:ff:
5c:c8:07:5a:be:98:db:3e:9b:29:bc:c1:71:c7:97:f9:1e:56:
3f:94:cb:2d:24:3c:30:c2:a4:71:bb:84:a9:0d:4e:29:e3:c2:
b1:9f:c6:50:3d:09:50:57:da:37:b4:7d:69:b2:ab:69:60:65:
20:e0:5c:df:a2:0a:f2:f2:33:da:35:8b:85:47:5b:27:c9:58:
86:51:2d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:25 2024 by rpki-client on console-fra.rpki-client.org