Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/QeFogTASwd6r9vZn-23InAY4sg0.roa
File: QeFogTASwd6r9vZn-23InAY4sg0.roa (raw, json)
Hash identifier: lEKp6NWlD2s3oP8Lfa8gBLmLkz1TKpE9T7YG4RmCtPk=
Subject key identifier: 41:E1:68:81:30:12:C1:DE:AB:F6:F6:67:FB:6D:C8:9C:06:38:B2:0D
Certificate issuer: /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial: 0187E10263B59D7C2F35D1364A936546F9F8
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/QeFogTASwd6r9vZn-23InAY4sg0.roa
Signing time: Wed 03 May 2023 09:47:22 +0000
ROA not before: Wed 03 May 2023 09:47:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208597
IP address blocks: 45.93.208.0/22 maxlen: 23
2a0e:28c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:02:63:b5:9d:7c:2f:35:d1:36:4a:93:65:46:f9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Validity
Not Before: May 3 09:47:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41e168813012c1deabf6f667fb6dc89c0638b20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0c:47:89:a1:e4:e1:68:a9:75:f0:ea:0f:8a:
3c:3f:9f:6c:a9:90:78:c6:a3:7d:66:dc:04:31:79:
1d:f3:60:fe:61:7e:af:d9:65:83:ed:89:f7:19:16:
95:a2:25:00:6c:ef:ab:aa:cf:e0:5f:97:8d:d4:84:
d6:54:0d:cd:0b:2d:7b:6e:e0:6c:04:f4:c4:b9:bb:
97:42:f7:81:ae:50:06:21:23:59:14:56:4c:de:3f:
7c:78:83:1c:5c:3b:29:7b:ac:12:90:ea:a2:b2:68:
ac:fa:24:fd:12:ef:df:b8:50:d3:0a:19:b1:b6:85:
7e:b8:6c:5c:e8:d7:d9:40:da:a9:7e:67:b3:7a:e5:
6e:22:ea:63:0d:67:77:2f:fc:8d:80:28:49:14:f2:
31:5f:cf:2f:e3:77:b7:39:06:cd:fe:2a:56:d4:ba:
67:78:70:ed:b6:ef:ca:23:b3:6f:97:79:ce:7a:18:
e2:81:f1:51:e8:fe:32:80:e7:64:82:0d:7c:65:1f:
b3:2b:00:35:af:0b:bb:ad:f5:7d:e3:cd:00:7e:44:
fe:f0:9b:7f:2b:12:c0:15:79:34:0a:e5:35:88:83:
0e:ab:83:22:86:f0:27:9f:76:8c:bb:24:93:6a:25:
1c:39:b0:1c:a1:04:c6:e1:ed:6c:fe:0e:79:bd:c5:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:68:81:30:12:C1:DE:AB:F6:F6:67:FB:6D:C8:9C:06:38:B2:0D
X509v3 Authority Key Identifier:
keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/QeFogTASwd6r9vZn-23InAY4sg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.208.0/22
IPv6:
2a0e:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
41:75:dc:ef:19:fd:ef:46:59:85:e0:fc:7e:4d:fb:7c:29:2e:
bd:1e:3d:55:b0:66:7b:6b:dc:8f:2b:44:e5:62:49:c2:0e:8d:
e2:05:9f:07:0e:50:83:4d:90:56:d2:e6:5d:00:63:e5:9a:7c:
2e:26:3f:5c:95:0f:f0:d8:5f:19:7e:b8:86:df:73:9b:94:9b:
12:ba:39:d7:ff:0e:cc:51:fe:fa:da:1b:3c:75:81:84:1c:b0:
7d:c5:8b:59:28:7b:e6:36:01:6a:0f:66:78:ec:b9:fc:3b:46:
6f:61:d7:b0:ea:c4:c8:c4:c0:5d:bb:fa:a9:34:95:ac:7b:24:
e3:57:8e:61:00:e3:5f:49:bd:f8:e2:cf:91:e7:5d:43:58:e9:
c7:87:3b:b1:f8:c7:4c:4b:3b:92:ab:9f:fd:4e:29:a8:8e:ce:
12:ba:a6:f3:c9:90:2d:ff:d8:5f:11:3d:72:c2:0f:be:8a:09:
e4:2c:b6:6b:73:48:65:b1:5f:1b:28:b0:bf:55:54:ad:af:27:
65:19:8e:ea:2f:38:20:ae:c7:b7:93:0a:ae:69:08:d6:ef:7d:
9c:0a:e7:29:dd:58:d6:f6:06:e5:b0:e8:c1:8c:7c:fa:8f:5b:
9e:7f:31:78:cf:a3:6a:25:8b:e8:bc:ef:55:d5:f8:14:6f:30:
53:73:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:19 2024 by rpki-client on console-ams.rpki-client.org