Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QKk4rNHGBD64JPFUTw7hcQy9BjM.roa
File: QKk4rNHGBD64JPFUTw7hcQy9BjM.roa (raw, json)
Hash identifier: /m6oWamxI8vsmH0NC70gve/2fV6ZoMRFgGiTPEKPAaA=
Subject key identifier: 40:A9:38:AC:D1:C6:04:3E:B8:24:F1:54:4F:0E:E1:71:0C:BD:06:33
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0187849D1B2AEB11A1886D12DE3AC1A05849
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QKk4rNHGBD64JPFUTw7hcQy9BjM.roa
Signing time: Sat 15 Apr 2023 11:11:41 +0000
ROA not before: Sat 15 Apr 2023 11:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.200.220.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Apr 2023 09:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:84:9d:1b:2a:eb:11:a1:88:6d:12:de:3a:c1:a0:58:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 15 11:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40a938acd1c6043eb824f1544f0ee1710cbd0633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:a4:0a:46:c0:3b:7a:14:23:b8:bf:e9:38:
9b:73:f5:9c:f4:18:67:04:90:5c:8a:cd:07:d9:2f:
2b:9f:dd:eb:59:eb:74:40:05:da:c2:ec:1e:6f:ce:
07:60:13:c5:0f:21:1a:b3:a9:91:17:30:f2:72:45:
ce:15:63:b8:18:ee:9d:89:e1:f4:5b:ae:79:69:a8:
ef:0b:e9:b4:76:f1:b1:cd:cb:cb:54:ee:2e:84:09:
61:c9:e1:23:80:ea:01:5c:95:21:61:6c:52:06:41:
f0:60:93:4b:03:dc:37:90:04:2d:4f:c7:a2:31:04:
0d:35:1b:07:66:53:9e:5b:83:ae:a4:b6:bc:91:c0:
80:3a:33:b5:e7:bc:c2:57:19:7b:bf:d9:c4:c7:fa:
11:e0:28:c5:7e:a4:21:ac:24:59:3d:67:ad:99:e3:
84:8d:fc:c4:c5:66:5d:0d:e9:7e:ee:7a:64:04:69:
b3:b2:ab:59:02:34:1a:da:0d:f7:0a:92:ae:4a:3f:
be:a3:26:18:bc:c9:cc:83:ce:f7:6a:de:6c:d8:d0:
74:e4:a1:52:bd:66:de:52:dd:9c:ec:30:e1:7a:6e:
8a:88:97:15:1d:bd:b1:45:6c:22:f2:e5:5e:3f:99:
9e:e4:83:d5:30:cb:0a:21:63:d2:b4:69:26:84:73:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:38:AC:D1:C6:04:3E:B8:24:F1:54:4F:0E:E1:71:0C:BD:06:33
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QKk4rNHGBD64JPFUTw7hcQy9BjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.220.0/24
109.122.40.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ca:c6:9c:e7:aa:1b:60:86:31:c0:a3:a4:96:bd:de:9c:42:
3c:0b:ce:7d:ce:e3:04:75:6b:e1:82:c8:f6:10:73:f7:59:f0:
f4:4b:11:db:27:c0:d6:12:a4:d6:67:cf:b4:0c:04:6d:c3:48:
ca:eb:ef:7f:72:14:18:fd:54:f0:38:24:10:26:9e:9c:bb:d9:
01:b2:8c:f1:1f:69:ae:5a:fd:34:da:6a:5f:2c:65:40:c5:39:
f6:50:4c:fb:3d:39:6d:50:df:7d:30:48:0b:ec:b0:fe:f3:ba:
11:5a:80:d0:09:23:24:db:77:ba:f1:65:8f:f4:e4:53:56:f3:
95:fc:07:8b:19:74:81:a7:8b:69:a1:94:06:2d:a7:c8:4c:84:
e6:14:07:d0:23:47:36:9f:39:5c:72:f6:94:87:4a:16:fc:b8:
f2:3a:ac:08:a3:16:87:bf:3c:e5:52:86:88:9a:1e:96:81:fc:
ee:48:1f:13:f5:cd:47:37:10:4b:af:03:bc:12:b3:38:a0:38:
66:70:56:44:43:a3:a4:bc:67:25:20:f6:f7:c3:fd:e2:7e:48:
b8:5e:e9:40:fd:89:72:19:4e:59:6c:1c:71:b9:58:5f:05:c9:
4d:d7:0b:fd:1c:93:fc:fa:25:39:3c:02:d3:e0:5c:b3:a5:15:
36:59:7d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org