Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/qbldh3Mm3_tRaxfTCC9TedDkqAw.roa
File: qbldh3Mm3_tRaxfTCC9TedDkqAw.roa (raw, json)
Hash identifier: cFJ38yLAccQC7HiuDOq/PZ2wYUJ/uQBjSNpYtHAftfg=
Subject key identifier: A9:B9:5D:87:73:26:DF:FB:51:6B:17:D3:08:2F:53:79:D0:E4:A8:0C
Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial: 01870DB4D17678D66047A56955344969C4EC
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/qbldh3Mm3_tRaxfTCC9TedDkqAw.roa
Signing time: Thu 23 Mar 2023 09:02:46 +0000
ROA not before: Thu 23 Mar 2023 09:02:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208197
IP address blocks: 194.9.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 05:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:b4:d1:76:78:d6:60:47:a5:69:55:34:49:69:c4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Validity
Not Before: Mar 23 09:02:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9b95d877326dffb516b17d3082f5379d0e4a80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:d3:c8:15:bb:fd:58:48:c4:a9:19:2e:8c:
93:be:38:52:40:a1:eb:7d:09:0b:6d:ce:9f:66:61:
b9:b8:e5:28:c4:74:e9:4f:a3:af:8a:f9:66:12:f0:
b1:93:64:36:28:1d:8b:d6:48:2c:4b:31:32:3b:da:
e8:08:b2:20:ea:b7:ea:31:0c:8b:d9:06:74:1b:28:
99:b4:3e:7b:14:9d:39:fb:6a:77:c7:2a:6a:4b:20:
5e:18:6f:b5:f7:e7:1e:53:ab:ca:25:28:9c:ed:ad:
2f:f5:c1:2c:16:d5:ec:2a:e2:79:38:b0:09:1a:10:
51:80:6b:db:ec:df:16:6e:75:fd:f6:be:2f:5a:da:
5c:9e:e3:81:ea:95:f7:49:2a:fa:6a:93:b5:12:79:
dc:b5:84:31:7d:21:b8:63:de:04:58:1c:6e:56:09:
0d:08:6d:e6:34:85:d3:18:f8:06:61:34:7a:a1:b2:
40:0b:ee:ce:0e:f8:21:92:42:37:4c:fc:14:8c:da:
69:6b:cd:89:d8:cc:2f:37:3c:9b:db:71:b5:25:64:
76:13:dc:de:e5:11:a5:de:c8:2d:2e:e5:38:17:bb:
83:06:44:66:e8:9a:5a:49:33:f4:4a:0d:08:bf:dc:
0a:1e:16:9a:7a:83:e0:09:35:02:be:06:d7:7d:7a:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B9:5D:87:73:26:DF:FB:51:6B:17:D3:08:2F:53:79:D0:E4:A8:0C
X509v3 Authority Key Identifier:
keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/qbldh3Mm3_tRaxfTCC9TedDkqAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.63.0/24
Signature Algorithm: sha256WithRSAEncryption
44:21:7c:12:52:a8:32:41:9a:8a:a8:fd:f4:7a:26:d1:6a:ae:
d3:71:0b:15:9f:0f:8a:ea:e4:63:01:9c:ad:f1:3d:26:17:5b:
59:ab:79:a3:68:f2:59:57:13:50:bc:32:aa:a6:de:45:a5:1c:
34:fb:00:94:d1:87:1c:f1:4f:04:4d:89:c5:0c:b5:4c:ac:f1:
b8:d0:7b:7c:55:e8:b5:db:4a:ec:6b:41:ea:1c:ea:06:4e:35:
bb:28:98:cb:29:76:82:51:7d:ab:e2:0a:a3:54:60:bd:a9:60:
15:1c:9d:36:5f:b9:8f:75:f2:7c:80:80:fc:50:dd:37:e2:83:
4e:57:ba:e0:a8:24:8d:83:3d:1f:e8:cf:71:89:81:bc:bc:bd:
22:d9:28:a6:ba:f2:5b:f5:45:f4:3a:1a:cc:d1:bb:f8:30:8e:
a9:4e:6a:bc:f0:84:d4:06:a3:fd:7c:f4:f7:53:a5:26:20:ca:
ca:ea:e0:22:0f:7a:04:4c:72:d8:9f:08:7e:c0:71:f0:da:fc:
28:8b:f7:b5:8c:92:6e:be:16:64:db:a4:5c:e6:ec:7f:d3:f7:
a3:f0:f8:24:70:31:f2:23:7b:b5:44:d8:74:b1:00:0f:5c:a9:
bc:7f:40:81:cd:ea:a4:5d:1c:f0:45:9a:36:cd:19:4d:95:70:
ee:13:b4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:37 2024 by rpki-client on console-fra.rpki-client.org