Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/QCTgrgqGOcNgXcXzvOG1SlZexok.roa
File: QCTgrgqGOcNgXcXzvOG1SlZexok.roa (raw, json)
Hash identifier: /KDAfS5cNO1xRRguUS6NhcVSyYAkeXmlwIaEDWRO05Q=
Subject key identifier: 40:24:E0:AE:0A:86:39:C3:60:5D:C5:F3:BC:E1:B5:4A:56:5E:C6:89
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 01856C9CB28EA576E4FD4D3B01DF52832378
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/QCTgrgqGOcNgXcXzvOG1SlZexok.roa
Signing time: Sun 01 Jan 2023 09:14:46 +0000
ROA not before: Sun 01 Jan 2023 09:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34288
IP address blocks: 91.232.37.0/24 maxlen: 24
2001:67c:2f94::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:b2:8e:a5:76:e4:fd:4d:3b:01:df:52:83:23:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Jan 1 09:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4024e0ae0a8639c3605dc5f3bce1b54a565ec689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:ef:cd:ad:cf:ea:9c:11:99:96:73:4d:0c:
e4:15:c2:b1:ad:1e:ae:0c:f3:67:27:c9:ea:d0:7e:
2f:6c:50:ea:e0:c0:71:9a:49:bb:dc:7c:9b:6f:05:
d6:36:ae:50:2c:18:53:3f:03:de:1f:c3:68:dd:2f:
68:25:21:f6:72:91:0d:4d:88:4f:ff:11:d7:ed:72:
ae:9a:e3:d4:f6:b9:f3:74:f5:19:a8:84:89:b7:00:
d4:67:b1:77:0c:1f:6c:e9:b4:a1:f6:ef:c8:0a:cb:
55:fe:5d:66:db:3e:66:d2:a9:42:f9:07:9f:08:2b:
e0:b5:3f:07:b2:9c:16:30:7f:39:c0:f3:99:c8:be:
0a:1f:cb:87:4d:41:ec:bc:52:46:6d:84:7e:ab:cc:
e3:cc:87:ec:24:b1:ba:da:92:68:49:1a:2f:18:42:
d8:97:ef:8c:0c:04:fb:1f:5e:65:c2:72:73:b2:7f:
e3:2d:0d:3c:97:6a:8f:db:1a:a2:3e:89:c4:b1:fe:
c8:0c:ee:5b:9b:7c:98:64:5b:93:a7:e3:6a:e5:28:
41:c5:30:58:ed:16:2b:b5:74:1f:2e:39:df:d2:0c:
95:d7:91:bf:d0:4d:20:e1:0b:5c:56:9c:a5:c9:c8:
53:1c:e5:56:4e:e5:7b:47:69:4a:c1:c2:8d:61:5c:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:24:E0:AE:0A:86:39:C3:60:5D:C5:F3:BC:E1:B5:4A:56:5E:C6:89
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/QCTgrgqGOcNgXcXzvOG1SlZexok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.37.0/24
IPv6:
2001:67c:2f94::/48
Signature Algorithm: sha256WithRSAEncryption
08:72:4c:3c:a5:ce:0b:1e:21:fe:c7:8c:de:d9:4b:c8:6c:34:
85:82:d2:77:05:60:a9:9c:eb:93:d9:c9:eb:9d:06:13:33:1b:
35:f5:43:4c:68:1a:67:81:70:86:a0:7e:4e:c1:ce:d2:f2:15:
33:e1:ee:8d:2a:91:0e:ef:28:be:b3:95:57:fc:2a:8f:c2:61:
cf:13:99:f1:4a:83:95:b1:e0:a1:ae:43:4e:7a:b5:bc:b8:ed:
17:da:d5:06:6c:31:69:09:d1:be:05:3f:84:2e:5b:0e:ba:80:
03:e3:b2:20:34:af:1a:c3:6f:8b:ad:12:61:ba:01:83:a9:c5:
73:4e:5f:4e:b5:54:bf:47:0b:80:08:cb:a7:b6:db:42:46:7a:
af:65:b4:9f:19:b7:ca:71:89:3b:fd:eb:a4:9f:70:75:ac:d0:
a6:a0:b7:2c:5a:dd:75:d7:c7:3b:31:bc:29:2a:13:07:27:1d:
89:6c:2b:a3:cf:f4:62:a4:a9:a0:2a:6d:32:47:72:19:4e:77:
8a:b8:5a:47:5f:5d:8e:e9:33:e2:3b:bc:21:6d:fa:30:34:0f:
df:e9:f5:16:e2:2c:fc:1e:e0:9d:73:98:cc:c5:9b:84:42:a5:
f6:c7:ad:d0:65:8e:07:ec:f8:8e:b4:69:39:15:a6:ef:a9:95:
a0:4c:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:23 2024 by rpki-client on console-fra.rpki-client.org