Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/Qd7kUAxypWu5Feq5k650mgkS3gQ.roa
File: Qd7kUAxypWu5Feq5k650mgkS3gQ.roa (raw, json)
Hash identifier: j32NKyfROFOIWXN1V5gGy7ezj9qRDMz7qR3+DkVWye0=
Subject key identifier: 41:DE:E4:50:0C:72:A5:6B:B9:15:EA:B9:93:AE:74:9A:09:12:DE:04
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 01857102E58FF52D7C30319298FDD40E576E
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/Qd7kUAxypWu5Feq5k650mgkS3gQ.roa
Signing time: Mon 02 Jan 2023 05:44:53 +0000
ROA not before: Mon 02 Jan 2023 05:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 193.247.84.0/24 maxlen: 24
193.247.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:e5:8f:f5:2d:7c:30:31:92:98:fd:d4:0e:57:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Jan 2 05:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41dee4500c72a56bb915eab993ae749a0912de04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:b0:41:fd:1b:1e:d5:e3:e4:c4:e9:6f:75:
12:1b:56:f7:32:7d:33:9a:e3:0b:fd:24:0f:b3:07:
8b:4e:ae:53:62:96:c6:2f:c4:5f:16:70:c5:c8:b0:
02:19:b7:a2:e8:5c:77:99:84:cc:51:12:91:4f:d5:
71:fc:54:37:13:db:99:cd:95:99:11:56:2e:e5:3f:
ef:c6:c7:6f:22:55:55:4d:af:48:3e:06:8f:11:89:
bf:82:3e:fd:4d:44:65:6c:88:e8:a1:e1:0c:45:93:
fc:66:12:b0:3f:2e:34:2d:73:64:f9:68:8b:b6:e0:
fc:14:5b:7b:d9:fc:05:6b:03:09:9f:c6:d9:18:c6:
0c:ec:54:19:61:3e:5f:9f:9d:ce:04:07:dd:b7:22:
50:c2:ce:b1:35:e9:49:e9:77:3e:d0:f3:68:c0:4e:
04:9f:fe:64:39:60:23:d7:59:15:43:45:ce:f4:d5:
a6:c8:34:14:14:f8:59:aa:52:8c:46:1e:48:c7:9a:
df:dc:72:ff:0d:16:17:28:66:43:f7:bd:f9:a9:8b:
13:b6:29:d4:45:07:ce:dd:69:46:51:5c:9d:77:c3:
ed:92:5c:10:60:4d:04:66:57:85:4f:ba:64:b4:4f:
48:4d:d8:98:61:c9:be:03:57:cf:c1:29:90:cb:7c:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DE:E4:50:0C:72:A5:6B:B9:15:EA:B9:93:AE:74:9A:09:12:DE:04
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/Qd7kUAxypWu5Feq5k650mgkS3gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.83.0-193.247.84.255
Signature Algorithm: sha256WithRSAEncryption
71:b7:cd:a6:da:0b:d5:af:78:4c:89:4f:22:db:c0:5f:60:ac:
7b:a4:21:1d:f6:60:75:f0:ca:60:75:71:e1:b3:81:4e:17:fc:
4b:04:b1:b5:00:3d:3f:99:d6:7d:cd:ba:0d:e4:53:c7:a7:91:
df:0b:fb:96:8d:b4:e8:ea:27:25:1b:5d:9f:06:32:ac:cf:35:
93:29:cd:eb:cf:e8:88:1e:58:2b:5c:c7:0a:21:dd:72:da:b2:
06:75:0b:ee:63:a2:d5:60:bb:7f:8d:f4:02:e5:5b:f6:78:ee:
93:c2:45:47:ba:b9:91:b3:da:8a:e7:ed:15:b2:d0:76:a8:64:
24:f4:a9:f4:85:0a:cc:ff:f1:67:a8:38:9c:76:6d:99:dd:d2:
e2:61:ef:d1:03:1d:41:69:50:ee:10:6c:df:a2:8a:69:35:a1:
c1:72:9a:20:68:f1:77:3b:22:68:83:0e:e4:fe:c8:8d:4a:06:
80:f3:09:1c:3a:48:60:6a:5a:41:7c:80:8e:ce:81:a8:0c:80:
4b:17:68:55:37:6c:3d:35:31:a1:89:4a:55:6d:80:cc:74:14:
e5:e3:65:da:50:98:78:32:13:e9:7e:0c:d9:ff:bf:ac:cd:6f:
ce:5b:91:9f:98:1c:37:95:92:0a:37:f4:cf:e8:66:ad:fb:50:
d2:45:9b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org