Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/QlcYOTAmVl4UUHSXu9GP20_Xn8s.roa
File: QlcYOTAmVl4UUHSXu9GP20_Xn8s.roa (raw, json)
Hash identifier: 4V82aebcCPxycJ3oTkp8qXMb1qYRGW7eQaVz8BB1Y7g=
Subject key identifier: 42:57:18:39:30:26:56:5E:14:50:74:97:BB:D1:8F:DB:4F:D7:9F:CB
Certificate issuer: /CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
Certificate serial: 018CC56E108C5C4DDA9473B9521BCCB699C3
Authority key identifier: FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/QlcYOTAmVl4UUHSXu9GP20_Xn8s.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20555
IP address blocks: 213.135.44.0/22 maxlen: 22
213.135.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:10:8c:5c:4d:da:94:73:b9:52:1b:cc:b6:99:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=425718393026565e14507497bbd18fdb4fd79fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:57:cf:62:3f:e6:5e:ab:18:46:91:10:10:
dd:a6:a4:b5:14:4e:ed:49:08:fe:8e:93:68:cf:8b:
23:3e:dc:8b:2b:e6:6f:d1:99:2b:b6:22:4a:ab:fb:
95:b0:e6:b5:ae:9e:27:81:14:dc:f4:9e:11:0d:04:
73:15:8c:78:50:8d:b6:26:e4:a8:99:72:78:6d:88:
6b:8b:bf:70:55:56:50:c2:25:9e:0d:9a:ca:16:09:
af:1f:37:1b:0f:be:b5:6d:8d:af:5c:ee:1a:e5:87:
30:bf:46:33:ac:21:4a:3b:34:29:74:9a:56:52:08:
96:9d:87:39:3b:34:fb:1d:51:ea:b5:de:d2:d1:42:
31:09:6d:71:e8:27:e8:8b:45:19:59:db:e0:66:7e:
50:a2:99:69:04:5b:32:85:3b:3b:0e:ca:fe:4e:05:
18:75:68:0c:99:62:d2:85:f9:74:f0:79:67:26:7e:
01:f5:c8:09:24:0a:3b:9f:b2:8c:8e:96:10:c1:79:
4f:dc:d0:52:48:d1:f7:c7:31:79:d1:ac:3c:f5:05:
52:d4:d7:f6:8e:1d:1b:1f:f4:dd:3b:45:64:39:ae:
72:06:6d:b0:62:94:39:41:8f:3e:00:a8:3b:4a:9a:
43:3f:31:be:8e:43:7d:3b:2d:41:86:ce:a0:33:5f:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:57:18:39:30:26:56:5E:14:50:74:97:BB:D1:8F:DB:4F:D7:9F:CB
X509v3 Authority Key Identifier:
keyid:FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/QlcYOTAmVl4UUHSXu9GP20_Xn8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.44.0-213.135.49.255
Signature Algorithm: sha256WithRSAEncryption
0d:8d:67:91:6a:9d:21:17:06:8d:9d:06:04:cb:f4:05:64:12:
19:55:d7:b8:06:fd:c5:32:e2:99:e7:00:55:5e:90:fb:d5:dc:
9d:4f:2b:0d:ea:81:14:17:7f:b8:14:0b:23:1e:0f:92:6f:d8:
ea:56:cf:eb:da:ea:bc:49:5c:1a:bf:9c:39:4b:f3:68:fc:e4:
35:56:3c:1f:f1:e0:6f:2f:14:b0:6f:05:29:4b:a1:41:23:a1:
c9:29:e0:a6:a2:5b:62:56:a3:22:ff:09:c8:06:65:82:b4:86:
2e:a9:32:fc:bc:de:7b:20:01:79:56:70:ee:9a:88:f3:a9:8f:
3c:7d:d4:60:38:c3:8c:54:7b:8e:8a:31:9a:81:36:18:e2:de:
23:a2:2a:41:1e:18:c4:10:5f:3e:5a:bb:5a:e0:18:f5:fc:c8:
f0:48:c2:47:0c:e0:9f:1a:3d:f9:60:d4:7e:d4:83:b0:71:53:
af:f6:14:4c:81:2c:e8:10:29:c9:6d:3d:22:f5:0e:2b:fd:e0:
da:0e:31:79:5b:18:60:b1:75:83:fb:e3:ca:b9:b4:26:2a:01:
10:71:da:7c:1c:85:91:1a:3e:03:0f:3e:4b:53:7a:73:da:bd:
5f:3f:da:b9:0f:a0:89:62:de:57:56:ad:73:5a:92:31:9f:6f:
5a:ee:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:24 2025 by rpki-client