Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/QRlgsh1ADOyZYlV6MYi_qaNbLYI.roa
File: QRlgsh1ADOyZYlV6MYi_qaNbLYI.roa (raw, json)
Hash identifier: wxTsQiHVcGIcaQ6O5lK95xd2FMgBvATIpLVh/j9ZikI=
Subject key identifier: 41:19:60:B2:1D:40:0C:EC:99:62:55:7A:31:88:BF:A9:A3:5B:2D:82
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 01857283427D540BFE7A64C57329C0DCC84B
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/QRlgsh1ADOyZYlV6MYi_qaNbLYI.roa
Signing time: Mon 02 Jan 2023 12:44:42 +0000
ROA not before: Mon 02 Jan 2023 12:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15495
IP address blocks: 91.213.221.0/24 maxlen: 24
141.6.0.0/16 maxlen: 24
128.246.0.0/16 maxlen: 24
195.234.178.0/24 maxlen: 24
2a03:5680::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:42:7d:54:0b:fe:7a:64:c5:73:29:c0:dc:c8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Jan 2 12:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=411960b21d400cec9962557a3188bfa9a35b2d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:30:a8:c7:f9:f4:a9:1e:82:0a:21:eb:2e:
04:42:ca:98:6e:98:b5:99:a2:8e:f9:d8:7f:de:6f:
2c:0d:9d:da:6f:80:5a:eb:00:d7:73:15:50:a9:84:
c0:d4:c4:30:ce:fb:3b:82:8b:2c:72:ab:1c:a6:4f:
a5:27:56:4d:9a:c3:27:74:7c:2c:37:f3:f8:57:8b:
be:30:07:be:ba:eb:74:67:9d:bf:a9:65:e7:3f:0b:
03:ee:2e:6a:98:8b:98:5d:24:45:6d:e5:ca:01:15:
ef:04:98:f8:99:c8:60:b4:a9:80:22:12:72:c0:cc:
95:97:34:d5:c9:7a:5f:44:a8:48:6e:20:4b:4c:30:
a8:1b:9c:8f:5f:31:0b:d5:a5:cf:f6:31:f0:9b:8e:
3d:7c:4d:ce:34:aa:73:83:55:98:ee:b0:b8:1d:51:
2b:58:8d:38:5e:8b:b3:66:ed:4a:40:0d:48:e7:30:
72:96:ac:dd:68:a2:bf:a1:da:cc:9a:56:b8:53:48:
fe:f1:c2:f8:a0:d7:ec:f7:b4:3d:27:18:2c:ed:1d:
cc:6c:3d:de:54:9e:22:84:b1:04:a5:93:0c:9c:57:
03:9a:19:0e:ce:dc:3c:6f:63:5a:87:be:7d:5d:75:
e3:cb:55:12:08:82:b9:50:f5:9f:48:a0:e9:74:49:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:19:60:B2:1D:40:0C:EC:99:62:55:7A:31:88:BF:A9:A3:5B:2D:82
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/QRlgsh1ADOyZYlV6MYi_qaNbLYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.221.0/24
128.246.0.0/16
141.6.0.0/16
195.234.178.0/24
IPv6:
2a03:5680::/32
Signature Algorithm: sha256WithRSAEncryption
1c:c9:01:8d:93:a8:98:e8:76:38:93:91:81:9f:ea:e5:1e:2c:
eb:5f:ea:d3:10:08:86:24:64:7c:fa:50:81:a2:d6:52:64:78:
ac:fd:51:74:07:f4:75:17:e9:14:d3:e0:e0:ff:fc:e3:9e:9c:
63:9f:6f:d0:f8:14:5f:90:52:0f:62:08:f9:6c:03:9e:b3:61:
48:0a:3f:76:46:53:6e:17:44:aa:5d:bf:bd:b4:8b:74:2e:47:
46:ef:f2:53:08:c8:ea:30:c7:d6:29:de:a6:8b:74:5c:a3:f7:
31:15:41:52:de:88:00:5d:49:ae:58:5e:0d:a8:5a:2d:90:8b:
9a:a9:e1:91:e3:92:fa:25:87:cf:3f:60:56:f5:bd:78:c6:63:
92:8a:04:ac:9c:33:24:63:f2:87:4f:03:75:bb:b1:37:ee:ac:
67:9f:14:4d:4c:c3:ab:ed:03:98:b5:9c:83:7f:34:01:8c:2d:
ab:5b:42:44:d1:31:46:1f:d8:06:65:7e:3a:64:2e:dc:a0:1c:
04:de:26:ca:97:5d:5f:95:3e:cb:42:ba:68:b4:7c:4d:63:eb:
5d:cc:18:a9:66:38:1c:b1:10:b6:49:ee:d7:b3:7d:28:5f:dd:
60:6b:f4:84:7a:df:41:4e:44:a3:20:3a:ed:25:1d:a3:2d:1c:
50:74:f8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:40 2024 by rpki-client on console-fra.rpki-client.org