Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qeIUSqn84L6PTPVV66xq4XYf6z4.roa
File: qeIUSqn84L6PTPVV66xq4XYf6z4.roa (raw, json)
Hash identifier: bDR/xCyZb3/04bmSJPvKB/QPmvoQc3b2UaF3OuyKp5k=
Subject key identifier: A9:E2:14:4A:A9:FC:E0:BE:8F:4C:F5:55:EB:AC:6A:E1:76:1F:EB:3E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AE122AB051F45BCE1C04EE5C9FA20C4E3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qeIUSqn84L6PTPVV66xq4XYf6z4.roa
Signing time: Fri 29 Sep 2023 13:31:00 +0000
ROA not before: Fri 29 Sep 2023 13:31:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 193.148.48.0/22 maxlen: 24
194.11.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 11:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e1:22:ab:05:1f:45:bc:e1:c0:4e:e5:c9:fa:20:c4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 29 13:31:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9e2144aa9fce0be8f4cf555ebac6ae1761feb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:9f:d4:79:f0:23:98:af:73:a3:75:b8:0b:
e8:82:a9:82:5a:8e:42:29:7e:19:5b:cc:57:86:57:
4e:49:8b:3d:ed:ff:97:21:7b:f2:79:e7:8e:e1:8d:
77:a6:54:11:49:a4:c4:12:a5:76:9c:0c:1d:33:77:
3a:32:ca:fa:f2:5d:68:84:73:04:57:92:70:de:ef:
22:15:3c:4e:35:b0:05:18:f9:f1:8c:81:33:4d:e5:
ca:31:12:d8:f0:36:0e:02:a1:f0:63:08:c3:b2:6a:
b4:6b:12:a0:3f:ea:94:c6:a9:ef:28:5c:03:a7:02:
4b:a8:6b:48:96:bb:75:6c:fd:5c:78:ee:a8:2a:72:
89:92:7b:9c:1b:17:67:1f:8c:a2:9d:e9:3a:46:ac:
70:3e:f3:c6:3b:ea:a4:27:1c:9b:4d:de:cb:d9:a8:
45:cd:c1:c3:f4:32:fa:fe:1f:28:31:57:ae:90:a5:
f2:59:1c:1a:62:44:fb:59:d7:d8:d8:c4:42:32:db:
c7:7d:b2:ae:eb:58:5e:3f:ba:08:53:3e:e2:53:a6:
ba:25:89:0b:48:ff:46:c4:a4:cc:2d:73:6f:1f:e8:
71:b9:e9:2c:ab:b9:9c:14:b7:9c:d2:91:bc:d7:bb:
b7:e7:48:93:cb:74:12:f1:47:5d:05:25:d2:76:98:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E2:14:4A:A9:FC:E0:BE:8F:4C:F5:55:EB:AC:6A:E1:76:1F:EB:3E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qeIUSqn84L6PTPVV66xq4XYf6z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.48.0/22
194.11.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:e2:4b:15:8a:4b:a9:1e:67:7d:2a:3d:80:45:ae:e6:5e:e4:
b4:75:b0:d8:e3:f4:e0:3f:a3:fe:2d:0a:40:ec:dc:95:24:6c:
3e:66:02:38:83:5b:8b:20:5b:4f:a6:6f:a2:ce:c1:e7:c5:dd:
43:48:0a:28:8a:b4:93:9e:b2:2b:bf:32:3a:a8:dd:4f:ae:e8:
cd:81:30:8b:71:2e:c5:36:f5:11:5f:9d:99:14:00:8e:d7:22:
92:19:bf:ca:b6:7e:c6:14:8b:93:f3:a1:cc:d3:b8:27:1f:29:
0b:21:f3:52:cb:ca:e5:bf:ef:3e:47:05:12:5e:8b:8c:85:16:
e2:7f:a6:ff:b6:22:a0:43:98:c5:20:fc:eb:ed:8c:21:26:f4:
79:ca:2d:7c:bd:ff:d6:85:0d:47:43:a5:e4:42:6f:07:da:c6:
a7:dd:d3:32:d5:98:a1:ff:bb:5d:28:48:08:4f:40:40:41:c4:
e0:18:25:e8:15:f3:f0:c2:6f:32:cd:25:60:e3:00:a3:df:24:
07:03:6e:7c:bf:de:19:dd:ea:a2:75:cc:62:26:6f:75:d2:76:
32:7b:44:7b:58:5e:03:78:39:2d:96:96:f4:9e:66:eb:3a:ec:
b3:b8:41:c6:a9:fe:2f:91:f6:3d:c7:05:b0:e8:74:70:39:b1:
e2:05:9d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:19 2024 by rpki-client on console-fra.rpki-client.org