Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/q-nW2Riz0udYw9Z7SUPBG1VEK9E.roa
File: q-nW2Riz0udYw9Z7SUPBG1VEK9E.roa (raw, json)
Hash identifier: Oj3FSG3u6A97+p6JgpF3PURdpMNS4LWEZwtOdAlGfOw=
Subject key identifier: AB:E9:D6:D9:18:B3:D2:E7:58:C3:D6:7B:49:43:C1:1B:55:44:2B:D1
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 018FC91BB6B494F5212B07A20E6FBDEE88C7
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/q-nW2Riz0udYw9Z7SUPBG1VEK9E.roa
Signing time: Thu 30 May 2024 10:46:27 +0000
ROA not before: Thu 30 May 2024 10:46:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.10.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 06:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:1b:b6:b4:94:f5:21:2b:07:a2:0e:6f:bd:ee:88:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: May 30 10:46:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abe9d6d918b3d2e758c3d67b4943c11b55442bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:d2:f8:99:b8:54:bd:e0:b7:b1:12:6e:6a:
d5:fe:d3:e6:1e:0d:be:80:78:be:2e:57:db:a1:b9:
e7:01:7b:23:3f:fe:f8:65:ce:e4:ba:e5:74:94:14:
95:51:18:67:e3:b2:15:be:13:30:a6:bd:cf:84:0a:
a8:07:32:3e:0f:24:ad:41:a1:21:56:a4:23:69:af:
73:fb:96:c9:9e:76:27:18:00:e9:ce:6a:5e:55:c7:
a3:a0:ad:29:9e:4c:29:0d:68:fa:99:17:20:a6:82:
c0:cd:f1:35:d0:54:52:48:50:1e:de:08:12:89:8b:
18:68:2f:bf:a2:d9:73:8f:b1:c3:1b:b0:b9:9b:87:
4b:77:89:b0:e1:80:5b:7f:bb:e9:b7:91:81:3d:f0:
41:3e:55:cb:1a:0f:2c:70:e7:28:50:44:e4:ca:ca:
e7:ca:e1:c9:57:a8:f3:58:36:15:f3:4d:11:82:be:
2f:94:d7:0a:5d:e1:9b:3e:18:4e:82:9e:82:1e:c0:
60:eb:71:7d:5b:ee:c9:c9:f5:f0:88:08:ad:a9:87:
0c:7c:16:46:5a:e8:a9:d8:f1:43:c2:b1:b1:6d:5f:
73:59:40:bb:87:2f:3f:f3:e7:35:d4:cf:11:ef:9b:
31:5a:de:e8:40:4a:a5:df:43:71:72:8a:4e:27:48:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E9:D6:D9:18:B3:D2:E7:58:C3:D6:7B:49:43:C1:1B:55:44:2B:D1
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/q-nW2Riz0udYw9Z7SUPBG1VEK9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:29:23:98:88:ab:7a:19:1b:8c:31:e0:54:fc:e4:3a:62:45:
97:9c:32:d3:93:0b:86:ed:85:c2:95:ce:b7:07:4c:73:24:5f:
1d:72:d4:e2:2f:9f:4d:17:5f:73:8e:cd:ce:cc:f2:c2:88:21:
7c:7a:42:78:65:af:0b:c4:e4:72:84:54:41:11:83:27:c2:1b:
61:97:ef:bf:38:de:ae:86:e3:90:db:db:ff:d2:77:c2:33:48:
59:23:6a:e9:9d:ff:52:12:4a:da:8f:5e:60:5e:20:c6:d0:af:
f7:15:f3:1e:9a:6b:9a:d8:32:6d:5a:45:5d:ab:e8:58:c3:f5:
ab:c9:36:57:6e:25:f4:36:85:24:bd:38:8f:88:23:b5:e3:e8:
a5:b0:8a:6c:1a:f2:c5:10:82:fe:3a:82:14:06:8d:71:32:0c:
a3:94:f1:7f:30:fc:73:26:42:ab:e5:04:28:35:e4:94:9f:6b:
a8:ef:da:bc:9b:72:68:b1:8f:8a:40:e6:45:17:e6:49:12:fb:
00:61:bc:42:f3:8f:4c:ca:ac:6e:fd:8a:91:4f:ef:f1:a2:a4:
e9:96:29:7f:c3:16:ec:c4:6b:8e:3a:46:bd:25:09:2d:2f:1e:
5f:35:e9:4a:28:49:ae:d0:a0:24:3c:71:49:97:34:eb:d7:fd:
d8:63:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 09:24:08 2024 by rpki-client on console-ams.rpki-client.org