Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/qmD-wLOwKGgTPmMBnD_8Yo3uOac.roa
File: qmD-wLOwKGgTPmMBnD_8Yo3uOac.roa (raw, json)
Hash identifier: LYcKfecDglEAoWyQ6OhnUu1lg+chmGRhHbts4tyl9YA=
Subject key identifier: AA:60:FE:C0:B3:B0:28:68:13:3E:63:01:9C:3F:FC:62:8D:EE:39:A7
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01857230E0CAF4BB11BE687428D8770B3B87
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/qmD-wLOwKGgTPmMBnD_8Yo3uOac.roa
Signing time: Mon 02 Jan 2023 11:14:43 +0000
ROA not before: Mon 02 Jan 2023 11:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 194.37.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Dec 2023 14:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:e0:ca:f4:bb:11:be:68:74:28:d8:77:0b:3b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jan 2 11:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa60fec0b3b02868133e63019c3ffc628dee39a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:d0:19:97:dc:e6:2a:75:01:e4:7a:17:53:
9e:4f:bf:76:cd:90:83:db:57:c4:b1:3d:e8:08:f4:
7e:ee:25:6e:01:7d:36:8a:86:7f:12:5b:90:25:45:
68:26:9c:ab:05:4f:9d:a9:97:47:0b:c0:4b:8c:de:
a3:46:a5:80:df:c1:3d:5b:0a:72:31:fd:29:86:03:
bd:a4:91:7b:e3:fb:2f:67:a4:55:59:0d:3f:96:f0:
72:cd:65:71:20:49:47:b2:71:f9:cc:83:0a:fa:43:
4a:ac:75:2a:a7:5e:f9:37:f2:8c:3e:ac:05:aa:1d:
ce:f1:b6:e3:65:50:61:35:3f:2b:fe:c5:84:e4:56:
4a:88:86:43:dc:32:b0:8a:4b:53:1b:1a:bc:82:f9:
9b:9c:54:e5:2a:d3:4e:96:98:21:9d:e8:50:c8:cc:
94:bb:d8:d6:74:50:a8:67:d1:fc:fa:96:e1:45:53:
7a:1f:b7:aa:6a:a8:f9:2c:9f:ef:29:f4:99:f9:9a:
4b:20:f0:dc:17:da:dd:21:b9:92:eb:02:53:e6:50:
53:42:8b:0c:a4:84:f0:de:5d:8a:07:d1:b2:0e:75:
95:37:b6:5d:4b:bc:e8:b2:32:00:d6:84:55:bc:29:
ac:5e:bd:76:d9:2d:96:22:cc:25:2b:5e:93:93:03:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:60:FE:C0:B3:B0:28:68:13:3E:63:01:9C:3F:FC:62:8D:EE:39:A7
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/qmD-wLOwKGgTPmMBnD_8Yo3uOac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.92.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:55:62:03:07:ba:25:01:10:55:df:a5:31:e7:e5:b2:00:08:
56:c1:77:8f:db:2f:5e:0d:3e:fc:c7:ec:f0:d1:08:1a:7f:d6:
0a:b7:bf:0e:76:a9:2f:b9:73:a6:9d:01:27:b6:21:af:3f:1b:
f4:8b:19:ec:0d:c9:db:06:e9:52:cb:86:34:5f:64:5d:8c:4e:
bd:0a:d5:73:72:b5:63:49:0f:3a:7e:b0:aa:7b:78:14:b9:2d:
8f:39:b5:eb:0c:2e:a2:7d:b2:f5:a6:99:c6:c5:b7:b8:ba:ac:
47:dc:d2:55:23:a7:77:01:3c:77:59:a6:d0:21:3b:55:f4:31:
68:eb:1b:37:22:b9:bd:75:be:90:be:23:eb:c4:c7:12:64:dc:
0b:ec:39:53:94:79:eb:61:4c:0f:94:3e:41:e3:c7:06:ee:42:
30:05:c1:13:11:4a:2a:bf:9e:a3:99:21:b1:0f:e7:13:c9:ce:
ba:db:3f:1d:24:5f:73:80:5f:7b:8a:12:c0:fc:11:09:52:9d:
09:4a:1e:11:67:1f:58:75:99:a5:d1:36:b0:ba:e3:0d:bf:38:
08:4a:df:06:3a:6c:25:93:c3:24:59:b2:69:d8:94:e3:aa:49:
36:fa:c8:f4:5d:b1:94:12:c0:04:31:23:16:1e:16:ac:ca:d9:
00:5a:6b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:13 2024 by rpki-client on console-fra.rpki-client.org