Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Qt_GlMfB8ZiDxkDM2tpW9r8KxF4.roa
File: Qt_GlMfB8ZiDxkDM2tpW9r8KxF4.roa (raw, json)
Hash identifier: JWWy5hqHS4UMax99jtAcGT5L58KQ7nKl/kGpAvAVkMg=
Subject key identifier: 42:DF:C6:94:C7:C1:F1:98:83:C6:40:CC:DA:DA:56:F6:BF:0A:C4:5E
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019097662E5F60EAD0C81721603194670C03
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Qt_GlMfB8ZiDxkDM2tpW9r8KxF4.roa
Signing time: Tue 09 Jul 2024 12:09:34 +0000
ROA not before: Tue 09 Jul 2024 12:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 185.57.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 11:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:66:2e:5f:60:ea:d0:c8:17:21:60:31:94:67:0c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jul 9 12:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42dfc694c7c1f19883c640ccdada56f6bf0ac45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:10:ac:dd:85:b5:14:c9:a6:30:f2:a7:b1:
5f:93:f8:f6:9b:72:4c:e3:79:80:e1:cb:ef:f1:d0:
63:98:8b:f2:31:a6:14:27:26:c9:fd:77:00:11:bf:
9d:80:2d:f3:ad:2d:8b:3c:96:b1:74:c4:f6:89:43:
f4:39:7a:6e:c9:d2:2c:f2:94:53:57:1c:c5:1b:1a:
dc:ba:6d:d7:c4:3b:f3:f6:cd:9e:07:48:02:74:80:
15:9e:d8:ff:34:5c:c1:2f:2d:2e:75:22:7f:b2:31:
d0:84:ab:11:9e:e3:33:99:52:76:55:2b:15:bd:92:
83:5e:8d:de:0c:c2:3a:e0:9e:bd:02:79:86:2b:a7:
a2:be:fb:1e:61:be:ea:21:af:8d:a3:b7:91:47:13:
2e:93:70:06:b3:8b:58:b3:ce:48:54:ea:57:0f:d2:
b8:b8:6a:0e:2e:81:57:1c:99:a5:f5:0f:fd:20:13:
ae:c2:56:d6:51:1d:fb:a1:7b:4f:80:bd:81:e3:f7:
ed:3e:c7:48:95:c3:d3:f0:ba:af:b2:f4:b5:e4:43:
68:8f:74:b8:b9:dd:eb:df:e9:31:40:53:6f:c9:bc:
61:4f:4f:22:2c:18:a6:6f:b1:76:dd:00:da:0a:ec:
df:88:dc:31:19:d8:0b:0a:c9:b7:0c:c7:3d:e6:0a:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DF:C6:94:C7:C1:F1:98:83:C6:40:CC:DA:DA:56:F6:BF:0A:C4:5E
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Qt_GlMfB8ZiDxkDM2tpW9r8KxF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.231.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f0:60:c3:d1:5d:0c:5f:59:1f:27:3c:a5:da:81:e0:a2:cc:
e8:f5:0c:6c:af:fb:6e:12:a1:ba:5e:ec:ed:f7:f8:b6:43:9b:
56:70:71:ad:7e:2a:25:d3:b8:e5:f1:1a:90:76:40:57:ab:68:
d6:1e:68:05:43:86:05:fc:c8:ee:0f:1f:3b:2b:cc:8e:c5:ad:
cd:e4:63:2d:08:74:90:f8:86:85:8a:65:c7:cd:2c:6b:14:a0:
ea:5b:63:36:a9:be:fb:83:40:b1:e2:c5:0a:5b:8f:d9:91:9b:
d1:fc:82:75:dc:59:20:86:cc:ad:db:22:b6:b4:b8:43:54:27:
7b:68:f0:77:39:db:f6:ba:cb:8f:c1:30:d5:38:b6:4c:ae:df:
09:c5:54:17:04:b0:8a:da:11:35:aa:62:be:5b:4d:1a:97:11:
59:76:88:56:9a:11:d8:6d:17:75:d8:4f:1d:2c:44:8d:aa:55:
21:14:9a:a8:5a:33:be:44:03:5f:17:d1:87:8e:53:41:b0:46:
2a:b1:6e:63:84:5f:a1:b2:75:31:64:57:c6:3d:26:cc:0f:a9:
e2:ed:5d:07:c5:08:c4:6a:cf:5f:ac:ea:6f:c7:c6:32:8d:0d:
01:6f:58:cd:81:4e:b8:18:a5:e9:cf:83:c0:31:4d:1d:fb:4b:
f2:7c:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 17:42:55 2024 by rpki-client on console-ams.rpki-client.org