Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/qFjz6lzF3uFXF6YdE5Z_A8fXaaU.roa
File: qFjz6lzF3uFXF6YdE5Z_A8fXaaU.roa (raw, json)
Hash identifier: mLJv2NqRmshnJ6poyeFLB9MVch7w8Tg9ixVUlRyyEzs=
Subject key identifier: A8:58:F3:EA:5C:C5:DE:E1:57:17:A6:1D:13:96:7F:03:C7:D7:69:A5
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 0191F60FAFF4C8E8D677238CAB91656C7400
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/qFjz6lzF3uFXF6YdE5Z_A8fXaaU.roa
Signing time: Sun 15 Sep 2024 14:21:48 +0000
ROA not before: Sun 15 Sep 2024 14:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.134.253.0/24 maxlen: 24
193.135.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 14:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f6:0f:af:f4:c8:e8:d6:77:23:8c:ab:91:65:6c:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Sep 15 14:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a858f3ea5cc5dee15717a61d13967f03c7d769a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:de:3f:3f:09:b4:47:fd:bf:40:5d:3c:92:
b4:f6:ff:aa:a3:a3:7a:c7:b9:6f:aa:f7:97:a9:a2:
d1:d3:36:a3:d3:70:27:43:22:63:02:c3:5b:70:14:
9e:7a:a2:68:ac:7d:a9:fb:3d:d4:49:da:8b:d0:28:
25:01:80:d6:9d:6d:0e:27:69:a1:b6:55:ed:31:80:
0a:72:2e:b9:69:97:ca:7a:c0:f7:e7:02:df:93:89:
5c:6a:95:64:05:fe:cc:e9:99:62:bb:fa:4e:f1:c5:
f1:dc:c6:d7:7b:5b:82:ac:86:1e:05:fd:2f:5a:fd:
b5:6f:fb:b7:38:f2:b3:99:42:4e:86:7e:a2:ff:d4:
e1:21:96:84:cf:7a:6e:b3:5d:ba:90:eb:91:24:0e:
80:ad:1d:08:88:c2:b4:41:ed:65:6e:4e:1f:c2:27:
69:06:7d:94:d0:10:bd:1c:39:25:e6:e9:a1:ce:28:
bc:c7:03:65:53:5c:d3:86:f2:0e:50:2c:bc:88:c4:
d9:8f:90:e1:d2:71:c6:b1:3a:17:e6:e1:39:41:7e:
7f:06:87:9a:c4:9c:c6:ff:68:6d:d2:93:8e:b5:66:
30:1a:fd:02:c4:7a:23:88:1a:ce:f6:67:e9:7b:24:
c7:74:a5:83:07:8d:e8:ba:db:10:e2:f4:ae:9a:ac:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:58:F3:EA:5C:C5:DE:E1:57:17:A6:1D:13:96:7F:03:C7:D7:69:A5
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/qFjz6lzF3uFXF6YdE5Z_A8fXaaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.253.0/24
193.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
35:38:61:f8:84:20:5c:68:d1:35:ee:61:f1:0b:4b:27:ba:83:
8d:69:67:4b:10:9e:47:32:da:8f:42:3d:93:e0:60:bf:7a:10:
e3:c8:29:44:55:78:c4:5a:ba:28:96:a3:c9:fa:77:07:81:9c:
8c:fb:e4:5c:91:aa:97:21:8f:93:59:b8:12:2e:43:e1:ee:b1:
7d:6a:a2:1d:1e:37:e5:c6:ce:9e:74:e2:70:a3:49:27:15:f1:
55:cf:b1:b1:e9:50:8f:99:c6:8f:19:3a:12:6b:c5:14:2a:bc:
06:e3:a6:30:bb:bd:5b:83:de:6f:ee:ac:b5:5f:9d:90:37:44:
9c:5a:f5:7d:7d:e9:8f:df:04:19:86:94:15:50:82:36:8e:52:
72:11:62:dd:e4:c7:36:22:74:88:63:a4:9f:8d:15:c7:62:56:
4f:45:87:1c:96:5c:39:79:18:6c:a2:ab:20:17:00:cb:7d:2d:
53:e5:a8:5a:34:80:61:cd:c2:45:77:9a:31:b4:65:3a:0e:54:
9a:ae:31:8f:d0:73:68:b2:2b:04:52:98:6c:25:6e:96:ab:ab:
6e:40:36:74:12:3f:0d:73:34:8d:29:1e:af:7f:40:63:64:a8:
ef:65:d6:f3:95:44:c6:ee:1c:9b:fb:32:47:87:cf:95:68:f6:
1a:a0:1e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 20:26:04 2024 by rpki-client on console-fra.rpki-client.org