Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qjzekbt9waDPebObGvUDhE_DK2I.roa
File: qjzekbt9waDPebObGvUDhE_DK2I.roa (raw, json)
Hash identifier: a70CE9sPQD+C7K4/AqFLvo4kVOtO7MlBDVkKwsA3i6I=
Subject key identifier: AA:3C:DE:91:BB:7D:C1:A0:CF:79:B3:9B:1A:F5:03:84:4F:C3:2B:62
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE666167B7AAD9CF79AE6D5B01EB17F
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qjzekbt9waDPebObGvUDhE_DK2I.roa
Signing time: Sun 01 Jan 2023 10:35:16 +0000
ROA not before: Sun 01 Jan 2023 10:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198202
IP address blocks: 46.249.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:66:16:7b:7a:ad:9c:f7:9a:e6:d5:b0:1e:b1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa3cde91bb7dc1a0cf79b39b1af503844fc32b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:ef:9a:db:dc:28:07:a7:22:8d:9d:07:ef:
34:84:f3:ff:27:e5:0a:f5:7a:18:60:93:71:24:61:
10:be:10:4a:ed:6d:f1:13:24:57:69:ce:6f:71:b5:
26:9c:ab:54:1c:5f:88:03:23:4d:f0:10:73:7e:b2:
d2:21:03:11:da:8c:3c:d9:f0:d7:61:9b:88:9b:49:
21:d2:86:cd:ef:f4:60:f2:62:fd:19:79:e3:f8:fe:
f1:e9:8b:e3:2b:7c:a8:74:46:eb:80:cf:c9:d6:4f:
70:75:34:ab:04:f5:97:20:29:d0:c5:69:26:b9:ac:
7e:6c:4a:22:6f:14:e5:6e:d3:67:6a:86:d9:7f:86:
91:e4:02:15:c4:fc:8c:de:da:dc:c0:d2:ed:65:df:
19:34:a8:86:c0:25:77:d5:b5:a7:5b:f3:57:62:1b:
6a:1f:a5:e3:79:a4:ca:ae:b6:59:c4:94:28:46:bc:
4a:85:40:26:22:3d:72:c4:fc:43:41:b4:62:75:e5:
0c:80:88:eb:07:4d:29:95:6f:93:21:9a:4a:07:e2:
e7:cf:a2:c8:16:0f:fc:cc:c8:17:78:00:6f:0a:6d:
f0:76:91:0c:a9:2a:51:1e:39:e7:4b:02:67:fe:d3:
f3:98:c1:79:56:5a:da:80:3a:8a:23:05:4d:3f:9e:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3C:DE:91:BB:7D:C1:A0:CF:79:B3:9B:1A:F5:03:84:4F:C3:2B:62
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/qjzekbt9waDPebObGvUDhE_DK2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:03:3f:4a:41:72:b6:6d:f6:39:c4:84:e0:f1:27:88:23:50:
8c:2e:30:2e:eb:58:2a:76:79:73:f3:1d:c0:c7:75:a1:bb:9c:
e7:d3:8e:2f:22:b1:cf:60:dc:c1:12:2e:35:0e:5f:53:fa:54:
b6:ef:2e:c4:20:06:de:54:ad:a6:b5:f6:4a:11:13:d8:48:89:
26:d7:84:c4:0d:f1:e6:e4:a8:73:64:71:5c:a9:ce:a8:ef:e9:
80:c3:f1:1b:c8:41:3e:f5:a5:53:15:78:5f:18:c0:fa:24:12:
22:3a:79:b3:b3:f2:78:49:c0:53:1f:21:d3:80:4a:5e:3f:3a:
51:b3:9f:e1:fc:a7:d6:f9:f0:d2:3f:c5:e8:ac:70:4a:9b:4b:
d3:41:43:da:55:cb:be:76:4f:4b:60:64:1b:aa:bf:7a:06:cd:
5f:75:99:f3:49:5b:73:88:d3:a9:77:0e:de:1c:7f:45:b8:2d:
cf:14:09:ad:d4:47:c6:61:17:63:9c:d7:e6:4b:e8:95:32:62:
79:b6:93:15:0a:fa:9a:95:0d:55:4b:eb:50:4c:25:72:c6:fe:
df:b6:8c:32:b2:b0:18:db:e7:af:2e:a6:05:eb:d3:62:11:26:
01:9e:99:ac:90:d0:3e:b8:44:10:72:9f:f8:0a:0b:49:e5:79:
4d:7c:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org