Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/QVe2YYXtClYiJTkApkF5-1-uYqM.roa
File: QVe2YYXtClYiJTkApkF5-1-uYqM.roa (raw, json)
Hash identifier: N4xrOeO713ByQqNtB3zY/qlv+3TAjdmIWLdM4AcRHmk=
Subject key identifier: 41:57:B6:61:85:ED:0A:56:22:25:39:00:A6:41:79:FB:5F:AE:62:A3
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 018AF4A02A4EB552E46D84B826FC071311DB
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/QVe2YYXtClYiJTkApkF5-1-uYqM.roa
Signing time: Tue 03 Oct 2023 08:20:51 +0000
ROA not before: Tue 03 Oct 2023 08:20:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216273
IP address blocks: 92.61.172.0/22 maxlen: 22
92.61.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 24 Oct 2023 11:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:a0:2a:4e:b5:52:e4:6d:84:b8:26:fc:07:13:11:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: Oct 3 08:20:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4157b66185ed0a5622253900a64179fb5fae62a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6f:a1:0e:83:31:ba:1b:77:5d:04:89:dc:18:
a1:0f:0e:ca:c8:ba:e5:80:92:ff:5e:8c:6f:df:be:
ea:af:1b:72:b3:f3:91:04:be:3d:98:cc:da:db:31:
74:f4:d7:25:33:22:b1:c4:62:17:21:d4:91:1f:54:
a1:f8:05:38:ee:9c:9c:69:77:d5:04:5a:1c:53:16:
7f:4e:12:3e:2a:bc:e7:16:9a:b6:44:09:04:d1:0c:
fa:15:da:e6:11:f4:0d:65:e4:f5:28:e1:ba:60:2a:
22:74:7a:59:79:cc:0a:7a:d2:ea:65:3f:68:6f:3b:
44:90:4b:6c:ca:27:38:71:a0:c4:8a:3d:7d:1e:33:
10:5d:2f:35:ed:f0:1a:de:ab:1b:e3:e2:8e:4c:14:
54:b9:4a:f0:72:1d:9e:95:38:4c:3d:80:b3:15:d2:
7b:a6:52:02:cd:60:c9:fe:0a:18:cd:c0:15:04:18:
c3:64:7a:ed:28:59:61:f0:4d:3a:e6:77:a4:5e:8c:
9b:77:4a:04:87:d1:fc:58:13:73:31:d2:b8:1f:f9:
80:ff:7c:a6:09:46:c6:ac:f0:23:c7:07:89:1d:7b:
6b:b2:d5:a6:31:42:eb:95:52:b3:11:7c:c7:3c:cc:
84:ad:16:95:8a:f3:66:ce:c4:ac:be:d5:5d:c5:68:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:B6:61:85:ED:0A:56:22:25:39:00:A6:41:79:FB:5F:AE:62:A3
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/QVe2YYXtClYiJTkApkF5-1-uYqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.168.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:e1:5b:8b:cc:f3:f4:f8:76:9f:04:a2:64:8f:3d:2e:77:29:
55:3a:18:4f:a4:da:d4:d9:8c:ad:bb:37:7b:24:11:73:ea:10:
67:75:6f:d1:3d:73:17:25:22:e2:bc:ab:73:49:a0:c3:55:b5:
78:bc:3a:fb:24:d0:a1:08:1d:a7:b6:fb:05:4e:8d:12:fd:e0:
98:0c:27:62:d9:3d:a9:f0:4e:00:ec:55:91:81:18:ad:e3:1b:
94:67:b5:c2:f2:2f:6b:2d:f2:47:86:13:65:bc:54:b0:94:9f:
e3:ca:b9:90:b9:a1:2b:f2:22:83:99:d5:e6:e3:f4:42:cc:49:
e3:c0:65:88:33:10:59:6f:c8:ce:36:d2:81:72:e1:4e:8d:c0:
82:27:78:82:84:6d:68:3a:c3:17:b6:e1:73:fe:c5:39:9f:3d:
08:ec:da:d8:d2:33:16:db:d1:b1:71:25:6d:81:34:c4:e6:5b:
48:09:15:73:a9:a0:3a:99:3a:b1:9d:5b:a5:bc:bc:65:ea:fd:
97:94:a3:30:24:cf:a9:13:af:19:e3:70:4e:3f:ea:2f:c4:90:
90:40:4f:3e:4e:9d:fc:ef:36:56:80:2c:06:0a:7e:8a:39:c4:
5d:3e:14:59:5e:27:01:f5:37:71:81:0a:19:87:0d:6e:82:98:
7f:41:c0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:37 2024 by rpki-client on console-ams.rpki-client.org