Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/qm9U5eZHXFWKN0Zt_KynUhBh8Ow.roa
File: qm9U5eZHXFWKN0Zt_KynUhBh8Ow.roa (raw, json)
Hash identifier: ptFFO/QEsd7k5vxIVLCFUUu+ZMacPoGQg2M4n6v7dcE=
Subject key identifier: AA:6F:54:E5:E6:47:5C:55:8A:37:46:6D:FC:AC:A7:52:10:61:F0:EC
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018DD4BDDA22F060F207757FFECDE2A208C4
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/qm9U5eZHXFWKN0Zt_KynUhBh8Ow.roa
Signing time: Fri 23 Feb 2024 06:53:48 +0000
ROA not before: Fri 23 Feb 2024 06:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136878
IP address blocks: 193.201.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:bd:da:22:f0:60:f2:07:75:7f:fe:cd:e2:a2:08:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Feb 23 06:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa6f54e5e6475c558a37466dfcaca7521061f0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e0:93:bf:de:63:f7:ed:d5:8d:2e:7f:8d:42:
99:4b:0b:6b:d6:eb:c5:a4:c5:df:6f:5f:68:f4:e2:
4e:cc:38:1b:8b:1c:c4:4d:aa:7d:66:80:ef:fa:6a:
73:a2:f9:b6:06:68:65:69:14:bc:8e:75:28:59:50:
cf:32:98:b9:2f:ee:25:0f:e0:cc:66:e2:12:40:ba:
96:cb:9f:c9:94:bd:eb:27:4b:09:ea:b1:6d:98:bd:
a8:ef:8e:db:01:7c:b3:59:a6:a1:ea:9a:f3:e9:41:
0d:34:88:5b:a0:1b:ea:96:28:e4:2a:95:f7:49:86:
57:bf:01:38:15:c6:a7:f9:1d:b2:48:f8:e4:ef:45:
a7:e8:43:6d:37:c5:b6:83:bd:95:fa:a5:57:ae:9b:
7a:8e:a4:15:0b:bd:1d:1b:fd:01:df:d4:83:34:ff:
ce:f6:28:6f:97:98:c9:82:65:3e:52:a5:23:c8:45:
73:9c:ed:d6:94:67:05:03:c9:2b:22:83:15:49:bf:
81:bc:5c:0c:78:fc:fb:58:18:20:ec:bf:a6:5a:73:
c7:1a:e2:10:46:5e:90:62:af:b2:da:6a:09:2a:64:
1a:cd:a9:77:c7:b4:40:1c:ad:2d:85:c8:00:53:a2:
cf:72:1d:ef:e0:c5:ca:eb:82:8b:3f:7c:8c:94:04:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6F:54:E5:E6:47:5C:55:8A:37:46:6D:FC:AC:A7:52:10:61:F0:EC
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/qm9U5eZHXFWKN0Zt_KynUhBh8Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.249.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e9:0f:9b:8f:36:79:a4:71:e1:69:09:63:6d:5a:3f:a0:bb:
be:8b:dc:03:05:6a:5f:69:37:68:ae:5f:32:f1:b0:c1:04:ea:
da:3c:be:fc:31:65:81:80:fb:44:31:2b:bf:6f:45:3b:dd:f2:
a8:01:91:1e:c5:89:86:24:0f:76:a6:e4:c4:d9:3e:23:fc:ad:
c0:a7:44:ea:23:55:cf:09:f1:9d:01:69:f8:a0:54:3b:82:58:
31:eb:59:9c:e2:7c:dc:eb:02:b6:13:a5:e9:85:a5:20:73:63:
15:06:62:79:86:82:86:7a:e5:97:63:34:a6:09:e4:1c:37:d2:
ad:96:b0:d1:6c:8d:b5:b8:88:4d:f9:74:f1:90:25:0c:92:8d:
14:3f:56:b8:56:d7:5c:1d:08:26:aa:27:0d:87:6d:b5:62:f0:
14:2d:90:68:4f:d4:31:86:b9:f6:c5:dc:38:7e:61:d9:66:47:
2a:a2:16:3b:a5:a2:11:b5:d6:8d:02:40:2a:4f:1f:a7:03:b1:
65:a5:3d:6e:20:3d:e4:73:0c:45:9b:4e:a8:b8:60:e6:f4:99:
af:57:f7:7c:e1:a8:df:15:79:1f:d0:2d:55:53:bb:75:5c:8c:
65:1f:96:30:f7:14:8e:4b:9c:6f:94:72:fc:4c:d3:fd:73:0f:
32:c5:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:46 2024 by rpki-client on console-fra.rpki-client.org