Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/QwO2puiTRvIXcU2N5SxWERy8Avw.roa
File: QwO2puiTRvIXcU2N5SxWERy8Avw.roa (raw, json)
Hash identifier: QhEB8rJpANZvlK3amhObaxQdR3CrhzJ3H1S9ghzSH08=
Subject key identifier: 43:03:B6:A6:E8:93:46:F2:17:71:4D:8D:E5:2C:56:11:1C:BC:02:FC
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0190E4DECBD97FE12C7970DAB4AAC18CE027
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/QwO2puiTRvIXcU2N5SxWERy8Avw.roa
Signing time: Wed 24 Jul 2024 13:12:04 +0000
ROA not before: Wed 24 Jul 2024 13:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49418
IP address blocks: 45.89.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:de:cb:d9:7f:e1:2c:79:70:da:b4:aa:c1:8c:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 24 13:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4303b6a6e89346f217714d8de52c56111cbc02fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:1f:e4:25:d7:53:ba:cd:41:08:38:38:c4:
b5:35:fb:ed:9e:86:86:8e:ed:99:06:2e:ca:46:67:
4c:54:05:97:52:1f:3e:c5:7c:e1:68:6d:07:8b:c0:
04:8d:75:d5:69:7a:62:46:92:28:90:9c:d4:b5:2c:
e9:3f:06:22:da:38:ed:86:b7:e3:89:b2:3f:1f:4b:
ca:8a:2f:5c:79:fe:d7:12:72:8e:34:ff:d6:09:3a:
16:54:54:69:3b:e3:3f:89:07:a5:b7:2a:4e:88:11:
1e:5c:35:1c:a1:3f:31:dd:dc:e6:70:ea:f7:b3:a2:
7d:b1:74:5a:c9:72:4e:c7:94:67:1f:24:c7:19:24:
f6:d9:79:ca:a9:32:04:4a:ee:6b:35:dc:90:94:f8:
da:01:99:9e:51:78:5e:e0:2c:a1:29:a8:ff:a7:a5:
df:5c:5e:69:39:4f:be:f7:6f:40:c1:85:95:7c:bf:
33:8f:f4:2e:42:e3:55:af:81:6b:bc:dd:d8:16:a1:
7c:04:5d:aa:07:42:01:31:34:92:e1:b0:64:87:b8:
e3:99:e4:65:2a:4b:8f:b9:12:89:20:69:33:4b:f8:
2f:d8:5b:8a:01:f1:64:30:00:72:2c:99:f0:27:62:
e0:6d:f5:c4:a6:ef:58:cd:5c:30:97:36:96:94:46:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:B6:A6:E8:93:46:F2:17:71:4D:8D:E5:2C:56:11:1C:BC:02:FC
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/QwO2puiTRvIXcU2N5SxWERy8Avw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:6e:ad:a7:73:da:c3:4f:72:61:73:06:09:3a:f1:9e:19:3a:
20:af:ce:56:af:a3:7d:02:8a:39:83:37:b7:ae:11:60:ee:8a:
73:1c:d0:b1:c6:56:56:b6:ab:86:cb:7c:5e:46:a5:29:44:34:
6f:a4:1e:58:00:81:fb:04:f9:96:78:75:4c:5b:a7:bc:f1:22:
6c:d1:a8:22:16:33:18:fe:4a:d6:c1:57:d8:3d:01:87:c8:8a:
fd:7f:e0:16:1f:ab:f9:c0:a5:66:68:5c:4e:d2:d3:7b:dd:52:
bf:66:75:93:33:19:e7:fd:41:cb:09:c3:0d:a2:04:fd:38:66:
05:56:39:4c:f0:f2:3e:b6:ea:61:4a:c1:4e:bd:1f:4a:09:03:
c3:ec:e1:00:c4:e9:c1:69:32:a0:1a:67:64:48:34:92:40:a7:
e7:f6:74:a1:60:f2:ae:30:59:bf:f5:e3:a6:26:f9:db:f0:d5:
9a:08:1c:da:07:f8:47:04:53:d1:37:86:25:62:15:13:9f:c2:
88:84:36:f0:4c:19:2b:d6:c8:80:e6:ce:bd:77:e1:89:77:d8:
78:16:a5:0b:5b:9a:00:d3:f5:be:31:5a:61:19:2e:3a:4a:0a:
bd:e3:8d:09:80:8c:6a:ab:67:4a:09:0c:88:b5:fb:75:c0:2e:
01:92:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:18 2025 by rpki-client