Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/QQHj2fR5zQUKgCZZHxAEB_uxtgk.roa
File: QQHj2fR5zQUKgCZZHxAEB_uxtgk.roa (raw, json)
Hash identifier: qJobQdI3yspgNoL/NCWwTOIdbSmj/ehZYHMoPopBz50=
Subject key identifier: 41:01:E3:D9:F4:79:CD:05:0A:80:26:59:1F:10:04:07:FB:B1:B6:09
Certificate issuer: /CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Certificate serial: 01880F5C335BFA45985CD09C5317F6E60C3D
Authority key identifier: FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/QQHj2fR5zQUKgCZZHxAEB_uxtgk.roa
Signing time: Fri 12 May 2023 09:48:00 +0000
ROA not before: Fri 12 May 2023 09:48:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8560
IP address blocks: 194.156.85.0/24 maxlen: 24
194.156.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:5c:33:5b:fa:45:98:5c:d0:9c:53:17:f6:e6:0c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Validity
Not Before: May 12 09:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4101e3d9f479cd050a8026591f100407fbb1b609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:9c:da:81:15:f3:0a:af:6b:cd:19:99:d9:
c3:f4:6d:8f:3c:7e:ee:f8:68:29:ae:b5:8c:8b:7f:
de:d5:02:96:9e:a7:dc:f9:a0:7b:22:89:f7:f6:6b:
a3:02:c4:dd:57:40:cb:87:a2:9f:b9:d0:62:c7:ef:
85:5e:eb:73:26:fa:8b:13:9c:4d:e9:f3:39:44:17:
28:25:6a:15:ad:c3:79:f9:e4:9f:f4:64:af:fa:73:
af:fd:c0:4f:4b:85:e7:49:1f:18:27:f8:14:18:74:
96:e0:f1:db:b5:45:5d:52:b2:1d:d7:9e:94:75:f9:
3e:3a:56:6b:bd:5d:c8:43:04:04:e0:99:6b:4e:66:
28:8c:ea:33:c4:ca:93:ca:5e:41:f1:11:fe:d4:40:
e3:e6:86:b5:b0:ce:60:28:0e:3a:14:e9:c7:d2:e3:
aa:90:59:e5:01:84:02:99:54:e5:2e:45:c6:41:9a:
09:d9:de:a1:1a:d8:11:1c:79:74:96:c4:e2:93:14:
69:24:00:a5:47:b1:9f:fd:1e:da:74:bd:a5:2c:d8:
2e:55:83:c4:46:b3:dc:c8:a3:4c:12:30:a6:e2:a3:
b4:87:e9:c1:c8:e1:22:c2:80:9b:e3:68:11:29:6e:
1d:39:0b:1d:1d:7b:0b:73:de:1f:44:ab:59:48:d2:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:E3:D9:F4:79:CD:05:0A:80:26:59:1F:10:04:07:FB:B1:B6:09
X509v3 Authority Key Identifier:
keyid:FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/QQHj2fR5zQUKgCZZHxAEB_uxtgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.84.0/23
Signature Algorithm: sha256WithRSAEncryption
35:2e:cc:a1:06:29:10:fd:70:ed:e5:21:87:84:b2:54:80:2a:
69:fa:e0:f3:0a:0e:5b:3e:aa:cd:9f:e6:bd:e9:67:b6:b1:d1:
86:57:c5:82:ee:43:9f:fd:25:a6:63:da:7a:08:8d:df:82:34:
15:db:40:0a:a0:3d:5b:f4:d8:5b:e1:ef:e3:6a:55:dd:61:ec:
60:d4:1e:a7:29:e0:15:ea:04:27:b8:89:20:45:9a:7b:a9:2b:
3a:e4:b9:d8:50:c3:ba:be:90:0e:f6:16:a2:9a:dc:db:9a:fa:
0b:64:d9:6c:af:b0:c7:b0:ec:30:41:71:70:ea:97:cd:8c:e4:
03:52:2d:7c:94:df:09:45:f5:8a:29:4b:4c:cc:81:39:ec:b2:
d0:27:aa:41:fe:9f:d9:d5:13:3e:1f:5b:e0:9a:42:f6:d4:b2:
98:8a:db:3c:87:73:b2:b5:b8:bc:9b:82:95:d2:f5:bb:40:49:
5b:3d:a8:32:9e:3b:2e:28:77:43:ce:68:d3:c0:ee:29:ad:4a:
39:09:70:b8:44:61:ef:65:24:7f:1d:54:6a:49:f1:6a:05:8b:
78:bc:66:ea:06:81:d5:97:7a:03:91:f2:1c:af:07:09:bc:f0:
4f:44:29:d9:9d:32:94:c5:75:7e:8e:98:bb:80:45:e0:23:dd:
97:37:92:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:12 2024 by rpki-client on console-ams.rpki-client.org