Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/qxQ0U1cOn7hWm7wGNsa0jOVVH58.roa
File: qxQ0U1cOn7hWm7wGNsa0jOVVH58.roa (raw, json)
Hash identifier: oGqBcDaYZIXBV2ixE+dfXPkAoLrWlk62KJ2uUcqcmcQ=
Subject key identifier: AB:14:34:53:57:0E:9F:B8:56:9B:BC:06:36:C6:B4:8C:E5:55:1F:9F
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 019329DF73077E100FBDB2F851B5032DB89C
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/qxQ0U1cOn7hWm7wGNsa0jOVVH58.roa
Signing time: Thu 14 Nov 2024 08:52:09 +0000
ROA not before: Thu 14 Nov 2024 08:52:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5609
IP address blocks: 163.162.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:df:73:07:7e:10:0f:bd:b2:f8:51:b5:03:2d:b8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Nov 14 08:52:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab143453570e9fb8569bbc0636c6b48ce5551f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:aa:c3:64:db:93:bc:82:12:ee:4c:cc:12:
89:c9:97:2d:d0:49:38:27:05:8c:24:9d:02:58:11:
7d:11:dd:cd:0f:83:8d:c2:31:3b:14:ed:59:3a:f7:
35:c4:5f:2e:19:4a:f6:80:4c:6d:d1:8d:6d:60:c9:
05:a7:4e:b9:37:18:e0:c6:db:c3:ef:7a:39:f3:37:
95:84:4b:b8:32:f8:bc:28:8f:37:57:37:78:cf:49:
9d:b4:93:d0:ca:0b:8a:56:8f:bd:40:8b:b2:ca:01:
b1:cb:e9:a7:90:b2:8f:96:d6:d6:08:5e:ac:b5:ae:
74:5c:98:f0:2a:57:be:f0:40:3c:e1:3a:54:ec:58:
ab:40:2d:e2:35:48:fe:b6:97:d0:72:9c:c5:4a:80:
20:30:8f:2a:e8:a7:23:cb:28:7c:79:b5:12:fc:5d:
03:38:b4:20:31:8e:c8:17:de:bf:32:d6:d5:e8:70:
b4:03:43:43:75:7e:e6:90:e0:b8:d2:de:95:f4:bd:
fc:3c:a9:9a:87:ec:48:37:97:4e:7d:48:27:47:2e:
a0:f8:f1:4c:75:8e:97:db:be:91:7b:cc:a0:c7:22:
cd:b0:40:00:5c:98:8f:b4:98:79:02:8c:d3:4a:c6:
b0:2b:c1:20:0d:5d:c3:ea:86:3f:8f:6d:67:aa:cd:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:14:34:53:57:0E:9F:B8:56:9B:BC:06:36:C6:B4:8C:E5:55:1F:9F
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/qxQ0U1cOn7hWm7wGNsa0jOVVH58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.162.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:a0:a8:fe:74:f1:7d:88:7e:a5:2c:33:4a:9a:d4:aa:88:54:
2e:42:2c:9a:ca:69:56:28:4f:48:06:26:18:19:97:97:c0:92:
de:54:ed:2d:8f:bf:37:8a:e4:12:3a:1e:c3:53:51:01:d9:40:
7c:e4:4d:a0:c1:45:50:f5:6e:1a:a3:18:47:00:c3:ea:bd:2f:
ea:5f:0d:b8:93:e2:f2:dd:5e:db:47:bf:34:6a:71:2e:0c:5d:
97:0a:a1:22:66:63:43:b0:97:2f:b6:5a:61:48:5c:97:ba:f1:
2b:e4:90:60:9a:48:42:b7:6e:52:9c:1f:18:99:2b:00:b4:6c:
72:bd:cc:0d:82:0c:8f:c2:c2:0c:d3:eb:f3:ef:29:e7:de:eb:
fa:39:b6:28:ee:25:16:f7:69:6a:f3:77:44:b6:31:a8:cc:b2:
0d:2a:ba:18:da:41:3d:da:13:97:c1:55:7e:0a:40:79:66:34:
19:56:88:a8:7f:59:59:c6:c5:1f:f2:ec:07:19:5d:37:02:d8:
19:70:fe:0e:82:6d:25:99:ea:4f:96:ee:fd:6d:31:5c:ad:8f:
75:30:8f:94:11:0d:a2:0f:b8:47:23:20:32:61:f0:27:03:75:
f3:98:45:c8:2d:31:60:5c:c0:56:84:79:25:52:56:57:8e:c6:
52:cf:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:24 2025 by rpki-client