Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/QH1Xu8MWmm6NobYNHwQS-9sI1a4.roa
File: QH1Xu8MWmm6NobYNHwQS-9sI1a4.roa (raw, json)
Hash identifier: kQnm6suBfGopPy5/tms57GrFVKQ+vHpxn/Tu/5ADCME=
Subject key identifier: 40:7D:57:BB:C3:16:9A:6E:8D:A1:B6:0D:1F:04:12:FB:DB:08:D5:AE
Certificate issuer: /CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Certificate serial: 018571B9E746F34CE76FF36C790E3E6A8EE6
Authority key identifier: 58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/QH1Xu8MWmm6NobYNHwQS-9sI1a4.roa
Signing time: Mon 02 Jan 2023 09:04:46 +0000
ROA not before: Mon 02 Jan 2023 09:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34863
IP address blocks: 194.30.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:e7:46:f3:4c:e7:6f:f3:6c:79:0e:3e:6a:8e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Validity
Not Before: Jan 2 09:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=407d57bbc3169a6e8da1b60d1f0412fbdb08d5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:ba:79:b4:2a:23:e0:18:e1:61:b0:48:bc:
a0:5c:2b:b1:66:4f:d4:9b:3d:34:d1:61:30:9c:b0:
74:e5:93:60:e3:28:77:57:80:36:77:b4:21:6f:ac:
4b:71:60:6d:20:32:b9:d9:7e:90:a1:26:ad:73:af:
a7:f8:a7:41:2d:2b:a7:c5:ae:78:25:ce:c7:70:34:
a4:1c:d7:05:81:96:40:58:21:cf:f0:64:67:76:1a:
86:7e:af:14:ff:60:6d:3d:8a:3a:18:05:e2:b3:22:
05:6e:6b:e5:7e:e3:6b:d6:9e:75:4b:03:c0:31:06:
53:c7:40:29:9b:ad:3a:4d:86:f5:59:f9:05:4c:a2:
0a:63:dc:41:7d:2c:5b:07:6d:34:d3:09:6e:f4:97:
8f:50:56:c4:e5:b4:f9:24:71:32:b4:82:56:90:79:
d1:a7:b5:1e:2c:d2:1f:bc:ce:a3:8f:ca:c6:cb:3b:
d7:7c:19:6a:62:3f:f6:35:2e:2c:7b:8a:ff:47:df:
b9:50:38:46:d0:7f:5b:4a:e1:6a:2f:ba:6e:7a:c7:
49:f5:b8:85:90:13:a7:db:b8:95:ab:3e:f8:64:99:
a0:aa:a3:ae:73:e9:5c:29:c2:e9:da:2c:39:89:f5:
de:e1:57:47:25:bd:bd:e0:fa:9f:85:6f:97:c2:94:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7D:57:BB:C3:16:9A:6E:8D:A1:B6:0D:1F:04:12:FB:DB:08:D5:AE
X509v3 Authority Key Identifier:
keyid:58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/QH1Xu8MWmm6NobYNHwQS-9sI1a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.173.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:00:18:72:73:b3:0a:36:0e:63:3a:ef:80:fb:6b:df:fb:7e:
70:20:c4:14:0c:43:59:a6:76:b1:b2:42:10:d3:2e:85:e8:63:
a8:9f:96:12:03:cc:4f:d4:8f:5d:fb:64:20:68:8f:a0:68:10:
c7:7d:06:00:1d:57:3c:2f:50:86:17:3b:80:a5:09:47:19:f3:
d0:43:52:e8:d5:ec:07:bd:81:37:7d:c9:5c:13:d1:eb:8f:14:
1e:ac:99:67:29:b9:8e:fb:4f:06:b3:59:07:95:33:17:af:b5:
1c:16:81:bb:d5:2c:f1:15:cb:53:6b:05:e4:97:c0:9a:33:b4:
31:eb:67:84:05:7c:40:c0:7e:a6:05:ca:32:46:6e:87:d1:08:
5d:8a:d1:68:55:f1:49:52:b6:88:f0:8e:9e:3d:ed:b1:33:f2:
90:95:f6:51:15:2a:75:cf:9d:88:ba:93:c3:bf:67:9f:4e:38:
7f:07:f4:cd:03:50:e2:b6:5a:8f:93:4f:70:d0:bf:4c:88:12:
23:87:f7:0b:b3:82:24:85:60:d0:b0:df:46:81:b3:5a:4d:77:
f3:7e:46:f3:ec:d1:4a:98:ad:ce:90:8b:f8:08:4b:f0:9e:49:
a8:de:be:78:99:cd:78:2b:50:ff:47:f2:d2:c6:fe:a8:86:87:
4d:d3:bf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:50 2024 by rpki-client on console-fra.rpki-client.org