Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q1fdjmfCqdIWwYrhFWQOCAVXD9M.roa
File: Q1fdjmfCqdIWwYrhFWQOCAVXD9M.roa (raw, json)
Hash identifier: a1dMff80NBnXs26SVN1KfkBwADScPDrEn2leOmTIYf4=
Subject key identifier: 43:57:DD:8E:67:C2:A9:D2:16:C1:8A:E1:15:64:0E:08:05:57:0F:D3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CD858828EC02D0122BBF05409A234C1B8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q1fdjmfCqdIWwYrhFWQOCAVXD9M.roa
Signing time: Fri 05 Jan 2024 06:38:48 +0000
ROA not before: Fri 05 Jan 2024 06:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 94.156.253.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 15:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d8:58:82:8e:c0:2d:01:22:bb:f0:54:09:a2:34:c1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 5 06:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4357dd8e67c2a9d216c18ae115640e0805570fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:23:1e:43:9a:60:0f:cb:d9:7a:89:de:11:d7:
c9:00:13:cf:75:1b:4b:65:cf:6f:85:b3:64:9d:dd:
8e:be:73:aa:b1:89:e2:7f:e0:ae:69:08:c3:3c:8d:
61:7f:18:bf:05:a2:24:9e:4d:32:39:4b:d1:e7:59:
c5:4e:ac:04:3a:1b:ce:3f:37:78:c4:0f:31:ad:9b:
5e:82:6f:f1:9a:e8:51:61:55:2f:3a:5c:f6:56:5c:
43:48:23:62:af:2d:5d:4c:34:8e:24:8f:67:f1:67:
4a:33:93:a8:70:71:b6:0e:ea:1f:09:7e:fe:5a:33:
31:46:d4:ef:30:81:aa:d0:f1:1e:2f:0a:3a:4d:57:
97:bb:64:90:24:85:d3:c3:b2:c1:58:6e:a7:ac:22:
15:21:b8:36:60:b8:95:80:76:5f:87:33:ae:7a:e8:
ac:ee:73:d2:74:8f:68:87:48:ce:d6:f4:43:2b:e2:
f0:69:6f:1a:2e:10:25:52:35:37:a5:d7:5b:51:c7:
32:0e:1a:e2:82:c1:91:48:b4:81:4c:17:87:b9:89:
e0:2e:b3:1e:16:00:35:2f:d8:ea:40:4f:e2:52:1d:
03:f9:eb:c1:62:4c:f9:18:73:fa:cb:71:80:cd:a2:
13:c8:c3:5c:b3:e8:ca:ba:94:97:4c:40:94:59:6c:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:57:DD:8E:67:C2:A9:D2:16:C1:8A:E1:15:64:0E:08:05:57:0F:D3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q1fdjmfCqdIWwYrhFWQOCAVXD9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.220.0/24
94.156.253.0/24
Signature Algorithm: sha256WithRSAEncryption
30:fb:27:c9:45:64:fa:e0:0e:df:cc:d0:bf:8d:3f:8e:10:27:
e7:ee:c2:20:88:a8:d6:d3:73:4a:7f:af:07:90:06:3d:82:9c:
3f:32:b4:8d:5b:d4:9f:e4:14:d0:cc:dc:05:b6:af:b1:6f:51:
93:99:dc:7a:6a:77:4b:20:56:6d:e9:fc:bf:04:5b:c2:65:e9:
ac:19:a4:e7:44:9c:5a:2f:19:75:d2:73:6f:d2:08:c6:8c:36:
3b:5d:c3:0e:35:44:f7:6d:31:ef:b8:73:b9:d7:c5:5b:0f:86:
1b:cf:36:0e:ed:bb:44:57:a0:e5:69:0e:62:ed:9b:a2:ae:fa:
dc:31:ed:e1:31:46:31:f1:51:5c:01:74:41:44:2b:7f:3c:b8:
61:37:4f:a5:00:f8:c2:75:7e:ce:e4:5f:1b:4a:25:cb:1f:62:
ae:3d:78:c7:8f:ce:dd:53:f7:b7:ea:f1:3e:a2:2c:0a:4b:bb:
3c:b4:9b:66:7c:20:cf:c5:4c:84:75:34:ae:20:84:f8:aa:32:
30:3a:40:55:db:16:4f:2d:54:b7:6b:b1:c4:25:71:a9:ab:f1:
8b:71:da:e3:af:e7:7b:c5:bd:85:c8:47:39:ee:e6:7e:51:86:
cb:27:18:e2:2e:4e:50:94:20:f6:34:65:e1:fa:4e:bd:8c:78:
bb:8c:13:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:13:10 2024 by rpki-client on console-ams.rpki-client.org