Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Q6Fr0MqyLQy86amKFXfGhjKFcy8.roa
File: Q6Fr0MqyLQy86amKFXfGhjKFcy8.roa (raw, json)
Hash identifier: jcWyTx6odkDXEQLiXUzs85v7GzPWdYBJTEEGYSsJP64=
Subject key identifier: 43:A1:6B:D0:CA:B2:2D:0C:BC:E9:A9:8A:15:77:C6:86:32:85:73:2F
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 01856CB85F99100EBBBBFDA1BE567A4BA18D
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Q6Fr0MqyLQy86amKFXfGhjKFcy8.roa
Signing time: Sun 01 Jan 2023 09:45:00 +0000
ROA not before: Sun 01 Jan 2023 09:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31446
IP address blocks: 193.16.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:5f:99:10:0e:bb:bb:fd:a1:be:56:7a:4b:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Jan 1 09:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43a16bd0cab22d0cbce9a98a1577c6863285732f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:4d:18:1f:73:97:39:e4:d6:f4:25:0f:de:
53:df:50:c9:58:0d:92:63:6c:65:38:9e:ee:aa:87:
46:74:6b:6f:3b:42:62:ac:75:2f:b7:68:80:84:ed:
28:4e:a3:e9:2d:d0:1e:99:66:1d:07:36:68:0a:14:
82:c2:2c:bf:26:d3:e2:bd:f7:04:0a:34:08:11:25:
21:ae:a2:4b:33:83:ac:1f:59:0e:2e:9e:d3:6a:67:
c3:72:3b:a0:ea:c4:e5:dd:66:52:54:0a:c7:15:13:
25:22:32:36:58:05:a2:68:6f:00:77:ec:27:f1:e7:
aa:60:c0:4d:fb:d9:4d:b7:0f:75:14:20:58:b0:2c:
03:9c:ed:88:26:da:d4:aa:96:f5:27:2d:d8:f5:e6:
4f:21:ce:b7:08:4a:e8:a1:00:5f:94:66:3b:2b:08:
3b:d4:4c:4b:ca:72:23:49:44:26:70:9f:02:ad:2f:
1b:b7:04:c6:be:1f:15:01:6f:5e:60:e9:5e:5f:d7:
cb:09:95:b0:a4:6d:71:2a:d3:f9:01:1d:73:df:9e:
76:33:e7:d0:71:4e:47:1e:be:fa:17:6b:ab:fe:79:
08:b3:78:2c:5c:16:0d:99:af:30:1d:60:8b:96:cf:
8d:88:48:86:95:e6:fd:c6:38:f9:fa:40:52:ee:05:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A1:6B:D0:CA:B2:2D:0C:BC:E9:A9:8A:15:77:C6:86:32:85:73:2F
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Q6Fr0MqyLQy86amKFXfGhjKFcy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.237.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e6:0e:c6:9f:e7:27:7e:15:61:af:cf:8c:dc:5d:f6:08:e9:
d7:f6:0b:fb:b4:a4:84:5d:a3:f1:37:a4:de:3c:97:55:db:e9:
86:7e:aa:2b:fe:2f:cf:f7:d0:31:1a:06:a5:05:d4:7b:32:ec:
ab:23:bf:c1:99:c1:b4:16:27:6c:80:8e:36:5d:6f:d3:a2:52:
d5:3d:1e:33:2c:c4:27:d0:7b:78:d5:6f:1f:02:7c:32:e1:09:
0a:d4:42:61:1e:dd:a4:6f:b7:9d:a9:96:33:db:ff:b0:d5:03:
e3:e2:5d:0f:76:2e:78:b3:0b:0d:d4:05:a0:34:91:eb:d7:1e:
21:95:2c:d7:0b:2b:22:cb:5a:46:80:1a:96:18:69:79:f3:e7:
aa:09:61:1b:22:97:70:b3:6e:12:38:74:18:72:9e:4a:6e:9a:
f3:34:9a:65:96:d5:c2:8a:79:89:0e:34:25:e7:33:d6:6d:37:
ba:61:e5:e2:5d:89:aa:a5:1f:6f:a0:7d:b4:0b:4b:87:48:59:
20:53:9d:5c:02:0e:8d:5f:4f:a8:62:a1:cc:2d:a1:74:c5:82:
2e:f2:1a:63:01:d8:7b:30:b4:85:0c:55:cb:a6:39:c3:db:04:
89:95:7d:90:e2:25:c1:d3:69:0a:f4:bd:7e:a5:81:2e:35:f2:
c4:58:76:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:05 2024 by rpki-client on console-ams.rpki-client.org