Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QlVSuiG-gHHzh36Ca_JGZRtHYOc.roa
File: QlVSuiG-gHHzh36Ca_JGZRtHYOc.roa (raw, json)
Hash identifier: FPyiWMbLC/GnP9BzAyfk697UunRPoZLFrtVOysSa/8Y=
Subject key identifier: 42:55:52:BA:21:BE:80:71:F3:87:7E:82:6B:F2:46:65:1B:47:60:E7
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B39F3E3BB2A8943353A7DE64168455B02
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QlVSuiG-gHHzh36Ca_JGZRtHYOc.roa
Signing time: Mon 16 Oct 2023 19:26:06 +0000
ROA not before: Mon 16 Oct 2023 19:26:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
89.251.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 19:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:39:f3:e3:bb:2a:89:43:35:3a:7d:e6:41:68:45:5b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 16 19:26:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=425552ba21be8071f3877e826bf246651b4760e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b0:cd:cf:80:91:87:32:fa:c9:e7:b0:13:7e:
93:b5:a4:aa:98:e9:69:36:3c:23:d4:fc:3f:30:4b:
ce:05:8d:50:13:f0:98:aa:bc:49:48:dd:2d:25:88:
ed:a0:cf:4f:eb:f3:99:fa:37:a0:b7:8b:6a:0f:01:
df:ee:c2:f7:ea:71:9a:32:2c:6a:f1:16:aa:60:7d:
28:29:90:6d:56:bc:32:73:e7:58:9a:6e:c9:5f:90:
54:c2:09:cd:71:f3:87:45:ec:7e:9d:33:d3:ee:37:
0c:db:93:17:31:8f:45:5f:ae:3c:92:99:52:8e:80:
8d:e9:35:7a:97:08:04:4a:27:4a:28:f7:88:a1:a3:
90:e9:22:7c:45:e8:c2:cd:3d:6c:ee:4f:b1:fb:d6:
da:32:2d:02:26:f2:51:34:90:12:68:8a:b7:4d:a8:
3e:e9:1b:5c:73:5d:57:10:7e:2f:02:c5:89:44:43:
5f:e8:19:79:d2:8b:40:0c:10:81:c7:3b:86:c1:ec:
83:63:27:19:f3:6b:2b:77:f8:70:f4:38:16:b3:dd:
dc:9a:5c:e6:a2:d3:2a:a3:0e:19:80:4a:75:ec:79:
f8:0d:ce:2b:d9:81:3a:02:08:7c:3e:3e:01:0b:c8:
64:11:0d:c5:51:25:82:63:c5:da:ad:01:df:36:b1:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:52:BA:21:BE:80:71:F3:87:7E:82:6B:F2:46:65:1B:47:60:E7
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QlVSuiG-gHHzh36Ca_JGZRtHYOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.30.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9a:b3:bc:43:24:0c:58:0d:6d:82:7f:cb:37:69:4c:24:e1:
db:e5:aa:41:ce:52:2e:b2:e8:f0:d3:7d:69:69:db:38:92:ba:
dc:43:b5:17:17:42:bf:72:ba:fc:9d:72:41:13:6a:b3:9d:54:
c3:8f:bd:69:54:f5:06:68:5b:12:d5:cb:26:8f:bb:2b:c7:40:
ff:59:36:c0:8b:aa:57:76:f7:b2:b2:29:62:1d:20:35:11:64:
a1:75:09:06:f4:e2:66:3d:35:e0:0c:cc:45:66:f4:c1:71:00:
28:4a:fc:9f:55:73:09:e6:55:a9:f1:f2:8b:67:2c:4c:db:49:
8c:b0:f2:6a:91:eb:bf:9f:bd:c8:95:8b:fb:9f:43:98:38:1a:
d8:21:1e:2c:77:5b:b4:72:04:42:bf:34:9f:62:35:0a:0e:ee:
51:ba:bc:ab:7a:eb:72:f9:e8:84:c7:39:64:88:f0:28:19:b6:
13:dc:9c:46:6c:c1:29:7a:c7:ec:94:59:4b:a6:3b:c5:25:9f:
04:b6:72:9f:eb:3e:b9:33:87:f1:20:d9:a4:7d:ee:b3:a2:ab:
dd:64:ff:65:3d:d7:96:c4:b4:cb:b1:3a:f7:7a:0b:ff:d1:56:
fb:44:fd:68:bf:de:82:b8:ba:a0:d6:a7:44:d1:eb:d1:59:b5:
fe:b7:20:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org