Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QohTLVUJaNTfn28E9nm8m7YPAN0.roa
File: QohTLVUJaNTfn28E9nm8m7YPAN0.roa (raw, json)
Hash identifier: V967Zy7GXOYU3lwd60hgtDRxnhS7D7R/wc/oUPUVHX0=
Subject key identifier: 42:88:53:2D:55:09:68:D4:DF:9F:6F:04:F6:79:BC:9B:B6:0F:00:DD
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 018CC3B73A9F075BAA1DDD7E0D186F7462C6
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QohTLVUJaNTfn28E9nm8m7YPAN0.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51780
IP address blocks: 91.209.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3a:9f:07:5b:aa:1d:dd:7e:0d:18:6f:74:62:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4288532d550968d4df9f6f04f679bc9bb60f00dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:8b:25:7f:b2:06:bb:aa:83:ab:30:bf:97:
d3:c9:15:5f:73:89:69:e5:c4:72:51:b3:5b:91:62:
29:60:10:f5:70:0c:a4:c0:1c:be:88:b7:2f:7d:3a:
33:a2:2b:ca:4c:d3:f9:b6:a7:88:46:23:5b:af:74:
7e:56:7f:11:f3:6e:48:dc:45:f7:90:db:c3:c9:2b:
2f:c3:ad:11:cf:e9:e9:6c:41:66:b6:35:bf:ee:fc:
61:96:47:cb:d6:92:60:fa:8b:70:e4:81:b9:1d:2e:
38:2d:5c:53:dc:5a:d9:7a:73:46:70:b3:e6:81:10:
a2:70:fe:00:4d:7c:3f:d8:d0:09:aa:66:e1:c2:74:
26:39:26:23:1f:05:6e:55:a2:45:72:d7:47:64:3c:
80:4a:a8:27:d2:79:7e:4f:68:b2:69:4d:41:4b:0b:
a0:ad:60:3d:ae:ad:4b:2b:6f:00:a7:14:fe:e9:b5:
14:39:e8:11:da:08:67:1e:6a:c8:be:57:16:8e:c8:
fc:98:d0:77:b4:4d:df:38:7d:4b:55:13:e4:03:a8:
23:34:7a:5f:1b:89:b1:78:63:08:ca:bb:51:3e:24:
52:56:e6:c7:d3:18:11:b1:1a:b2:df:0f:8c:64:09:
fa:24:91:55:46:b1:58:37:ce:eb:6e:08:ed:9b:e1:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:88:53:2D:55:09:68:D4:DF:9F:6F:04:F6:79:BC:9B:B6:0F:00:DD
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QohTLVUJaNTfn28E9nm8m7YPAN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.233.0/24
Signature Algorithm: sha256WithRSAEncryption
52:21:f6:37:53:1d:4e:8e:03:8a:61:b3:b4:d3:a1:0e:32:36:
dc:df:ca:6e:07:ba:f6:46:39:8d:7c:4f:27:20:e9:e2:b1:66:
bf:c9:86:95:64:29:9e:b3:d6:cc:24:cb:b1:11:21:e2:5c:1a:
5e:c3:32:59:1d:cf:89:9b:88:67:da:b1:a7:ad:eb:9c:76:2f:
cc:c5:f6:e1:89:02:4a:c8:cb:d6:64:e7:24:8d:da:43:cb:8d:
95:fe:9b:1c:9e:83:ae:8a:d0:9d:17:c8:fc:8a:4a:ce:4c:6b:
9a:32:dc:b4:8b:ee:ad:ae:4a:e5:a8:bc:21:a1:4c:d4:41:f6:
fe:77:fd:c8:ca:5a:32:10:f4:0d:55:39:91:05:77:71:35:17:
f2:50:1f:6f:13:3a:78:c8:32:fb:4a:23:10:1f:11:c5:53:df:
bd:f6:64:63:86:c7:3d:80:c2:7b:80:72:37:c0:3d:b3:36:6f:
c8:ef:8f:a9:96:af:9f:d6:6c:97:8d:70:c2:22:e6:9a:5b:b7:
2f:77:d6:12:d5:0e:e5:3a:83:39:66:ae:cf:82:b3:aa:29:cd:
8c:0c:da:40:6f:d0:e7:ce:d7:64:1b:35:d5:67:e5:c0:a6:dc:
21:d4:de:69:34:d5:32:3f:fe:ac:be:73:59:0c:ce:33:e9:49:
bf:06:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:17 2025 by rpki-client