Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/q_Id4JJar4HSuuqDmAqMVZH6SBk.roa
File: q_Id4JJar4HSuuqDmAqMVZH6SBk.roa (raw, json)
Hash identifier: 9Cn9JtoUOkGFH0pXpyC2kCTvdwqxnV3IU/o2wV1nl7U=
Subject key identifier: AB:F2:1D:E0:92:5A:AF:81:D2:BA:EA:83:98:0A:8C:55:91:FA:48:19
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 018F2937535F4CB830DE1E512466AA16BEB2
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/q_Id4JJar4HSuuqDmAqMVZH6SBk.roa
Signing time: Mon 29 Apr 2024 09:37:22 +0000
ROA not before: Mon 29 Apr 2024 09:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 194.140.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:37:53:5f:4c:b8:30:de:1e:51:24:66:aa:16:be:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Apr 29 09:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abf21de0925aaf81d2baea83980a8c5591fa4819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:81:44:5d:d3:80:ad:0d:94:54:fe:f4:24:
24:3b:3b:00:3a:97:ac:9d:dc:c5:20:a5:fb:e7:cd:
5b:fb:6e:c9:fb:f6:ad:57:0c:51:74:ba:e8:26:06:
92:43:12:b6:c4:c4:0a:ca:31:cd:05:ac:52:54:78:
0c:70:ee:ff:5c:af:78:36:84:70:26:ce:be:65:14:
32:46:bb:38:d5:5f:97:c5:8a:00:07:61:5b:ae:d8:
d9:00:e5:ab:e4:48:19:a9:7b:56:6d:36:ac:60:01:
0a:59:27:86:52:03:42:41:fc:ae:5a:50:25:a6:d0:
87:ee:cc:9c:97:e1:32:d3:5d:57:bd:23:f4:1f:31:
c3:16:95:45:e2:d2:1e:7b:34:7d:79:12:fd:e3:ae:
6f:61:83:3b:8f:e4:1a:ba:5b:f9:27:80:07:d2:a0:
93:39:77:43:c5:ae:f8:ee:7f:15:5d:0f:4b:aa:a7:
8a:b5:46:ee:ed:bf:b0:21:58:35:ed:43:73:78:32:
7d:da:3f:40:4b:36:4b:01:08:03:35:91:44:77:89:
ed:ab:c3:e5:c5:82:c6:64:6c:66:d3:9b:0d:f7:7d:
36:3f:c3:0d:46:69:4c:59:35:98:77:d2:98:9b:4f:
5a:2b:2d:56:2d:78:cb:2a:dc:3c:bc:ab:53:63:6b:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:1D:E0:92:5A:AF:81:D2:BA:EA:83:98:0A:8C:55:91:FA:48:19
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/q_Id4JJar4HSuuqDmAqMVZH6SBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ab:cd:c2:21:34:64:35:f3:f6:0e:1c:1c:44:26:2c:5c:cb:
59:4c:0c:4d:8d:6f:be:b3:e0:32:fc:2a:a2:ca:02:83:cd:6c:
ae:c1:b5:f6:48:2a:8e:79:81:f5:da:ba:a2:0b:8c:0b:32:fc:
5a:32:50:2b:1f:94:4c:63:ed:a0:9d:60:f1:4f:d4:a6:a0:1a:
25:2d:4e:46:71:22:4a:d9:38:d5:08:a5:b9:15:e0:e2:a6:18:
e4:c2:6a:40:03:53:40:24:57:c2:46:a9:20:20:58:54:3e:4f:
24:50:8c:ae:6c:c8:f2:2a:d3:b8:54:78:e9:2f:56:9a:58:61:
a9:c5:1a:06:c5:10:f2:23:ad:90:5c:63:f7:35:e7:aa:a7:51:
fc:4a:38:04:49:de:02:b5:94:e3:3e:77:7d:9b:63:87:58:18:
f5:af:90:ba:ca:90:70:aa:a2:fc:1c:a5:e8:1f:dc:ea:2e:00:
02:2c:2b:c3:b8:85:66:ea:6b:0e:cd:e5:43:13:c8:fa:b4:49:
4c:09:dc:d0:9e:28:44:cc:46:b8:57:b6:89:4a:89:b9:43:d8:
81:72:ac:b1:24:78:e0:e7:85:ae:7d:bb:e4:d7:1f:df:1b:5c:
70:71:f1:38:a4:8d:fb:c1:58:4e:49:6a:3c:38:b7:34:2a:92:
92:c5:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:47 2025 by rpki-client