Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/qSQvZat6yEyj6wecyXVb-OHnlCA.roa
File: qSQvZat6yEyj6wecyXVb-OHnlCA.roa (raw, json)
Hash identifier: luPts90jxNjMim0jlVMG0hxHZ9o88iAALsrVxBoQbSo=
Subject key identifier: A9:24:2F:65:AB:7A:C8:4C:A3:EB:07:9C:C9:75:5B:F8:E1:E7:94:20
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 019122C5A90366915F0E1B87FDE4C5974DEA
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/qSQvZat6yEyj6wecyXVb-OHnlCA.roa
Signing time: Mon 05 Aug 2024 13:41:04 +0000
ROA not before: Mon 05 Aug 2024 13:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18796
IP address blocks: 185.101.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 11:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:c5:a9:03:66:91:5f:0e:1b:87:fd:e4:c5:97:4d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Aug 5 13:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9242f65ab7ac84ca3eb079cc9755bf8e1e79420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:81:3b:09:84:29:cc:db:c8:61:40:0d:f3:
7d:91:b9:66:48:4d:56:a8:07:a0:23:04:2d:3d:fe:
39:69:dd:ca:c3:b2:44:5b:b7:64:5b:24:1a:50:bd:
4e:58:08:84:79:1f:c6:28:64:37:8e:f6:74:66:12:
e9:94:0d:79:a0:45:72:20:7c:2a:0b:67:b8:f7:6b:
a4:a9:14:09:cf:e4:0b:a6:fc:52:41:f6:78:7d:0b:
7e:19:20:79:36:61:b6:46:59:82:c6:c2:8e:af:15:
78:4d:b3:1f:f2:1a:db:23:c7:1d:90:f5:88:9c:64:
4b:ad:36:6a:f5:65:3f:50:ee:3a:a4:f1:fd:0d:5f:
bc:21:af:75:25:b1:e4:9f:33:2e:23:a6:74:1d:0e:
a9:b7:08:58:85:29:a4:1a:98:9a:c7:b3:ce:19:96:
57:43:0f:91:34:37:63:52:ff:de:fd:94:04:1d:6a:
37:4a:15:4e:33:c8:63:c9:5d:90:0c:51:5f:54:d9:
69:b5:c6:21:fe:76:5b:67:0a:67:e7:a2:58:08:7f:
b7:ca:f8:20:f6:27:a6:a8:57:97:31:91:fe:b5:75:
5d:c1:36:6c:73:bf:d9:48:7f:c4:92:74:68:f5:2b:
48:21:48:af:69:89:4f:d0:8b:8a:0b:18:e4:67:51:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:2F:65:AB:7A:C8:4C:A3:EB:07:9C:C9:75:5B:F8:E1:E7:94:20
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/qSQvZat6yEyj6wecyXVb-OHnlCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:36:39:12:85:bb:da:f7:50:cd:18:80:14:d3:69:bb:9e:0f:
ca:5f:00:49:4b:2e:ff:f5:17:de:ee:24:f3:eb:eb:86:b6:25:
74:4c:a8:09:a6:fc:a4:97:8f:df:00:e9:73:02:0a:6b:a7:fc:
58:0b:c6:64:a9:7b:87:00:06:9a:ba:84:f4:fb:aa:f1:bb:57:
50:31:56:c2:29:45:7e:7e:0f:06:9a:8a:0b:ec:81:99:1d:b7:
e1:a8:f9:a2:ff:8f:6e:01:46:e1:6b:97:f3:6f:ad:19:32:16:
1b:f6:1a:4c:fb:b4:a2:c8:1a:fb:43:de:2d:03:65:75:43:1e:
d9:8c:e2:68:b8:42:b5:52:87:c2:f8:78:69:1e:60:70:d3:c9:
93:80:63:61:03:8e:34:4e:da:9c:93:51:62:68:3c:01:ce:26:
88:c9:71:0f:69:26:cb:f2:29:a6:84:f8:b4:1e:e0:92:54:44:
42:12:8c:02:3b:ca:67:56:52:dd:b2:47:04:87:b9:e7:7d:95:
99:66:3a:d0:f1:34:c9:5c:e7:dd:bb:65:93:a3:4b:56:56:f5:
de:92:86:c4:f8:0b:8b:29:ae:03:c4:a8:af:8c:fe:3b:b5:08:
1f:9c:05:a9:70:2b:16:ae:42:94:89:94:e8:2d:11:c9:18:47:
99:63:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 14:58:13 2024 by rpki-client on console-fra.rpki-client.org