Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/QSKD91Z3-QtmXDJcOBL-KUxpJAI.roa
File: QSKD91Z3-QtmXDJcOBL-KUxpJAI.roa (raw, json)
Hash identifier: ycSvkvKMM9p5uKPl/GNg7sjdJsjwnXms6GUdVmVrxEI=
Subject key identifier: 41:22:83:F7:56:77:F9:0B:66:5C:32:5C:38:12:FE:29:4C:69:24:02
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 018CC86FDC6BB612203FDF3DBE0DE3D881C5
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/QSKD91Z3-QtmXDJcOBL-KUxpJAI.roa
Signing time: Tue 02 Jan 2024 04:30:23 +0000
ROA not before: Tue 02 Jan 2024 04:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205122
IP address blocks: 45.92.52.0/24 maxlen: 24
45.92.53.0/24 maxlen: 24
45.92.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 17 Aug 2024 12:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:dc:6b:b6:12:20:3f:df:3d:be:0d:e3:d8:81:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Jan 2 04:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=412283f75677f90b665c325c3812fe294c692402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:69:84:2e:02:a5:ed:74:7c:4f:22:31:3c:
a0:fd:89:b4:d9:a2:aa:d9:ac:5a:4b:4c:08:28:9a:
55:31:1a:64:a7:25:c6:9b:35:6c:4a:32:ad:eb:d6:
c3:43:06:d2:7d:9b:fd:12:9f:90:2b:60:a1:42:9f:
40:86:45:72:a8:60:bd:60:a9:0d:a5:4d:ce:84:a3:
67:fd:a2:29:df:33:6a:08:36:0c:96:67:f6:12:7d:
15:0b:b5:75:2d:90:4a:29:af:f3:ae:0e:bc:85:7b:
e4:00:28:a3:29:f6:05:af:b6:40:dd:82:e1:37:73:
8f:b7:76:23:b2:6d:60:d4:21:38:d5:94:b5:3b:c3:
cc:0e:e4:2a:fc:1c:0b:48:d0:2b:a2:cb:1c:ac:88:
27:1f:a2:4a:59:42:79:ad:35:89:81:4c:47:45:52:
54:f3:9e:5f:45:92:2a:ac:01:b3:a7:c7:5f:b0:47:
06:79:50:fa:4b:06:b6:9b:66:b3:da:da:3d:18:0f:
ea:c2:57:91:1e:0a:b5:4e:86:c9:98:76:3f:45:65:
7d:10:65:46:2f:f5:df:ee:d8:40:4f:6e:a3:c1:f9:
e5:40:d7:e2:61:a7:36:29:c8:c8:23:f8:30:4e:64:
06:b1:88:78:f1:db:43:6d:e7:b7:3f:3b:e5:5e:91:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:22:83:F7:56:77:F9:0B:66:5C:32:5C:38:12:FE:29:4C:69:24:02
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/QSKD91Z3-QtmXDJcOBL-KUxpJAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.52.0/22
Signature Algorithm: sha256WithRSAEncryption
01:13:c6:72:04:fa:cd:fb:8e:8b:54:b5:4e:69:02:da:ef:93:
a5:38:af:03:53:8d:da:6c:82:37:52:f7:93:64:aa:e3:30:15:
e4:e8:01:54:07:03:e2:5f:0c:43:bd:66:4f:36:dc:17:ad:68:
0a:01:6b:b9:8c:73:0e:57:78:a3:60:c4:e7:29:c2:fa:80:d2:
56:7a:22:ad:3e:18:37:f6:39:c5:44:cb:77:ce:a6:82:b4:db:
79:f0:23:40:8c:27:17:99:11:51:fc:34:41:db:a4:a5:9c:c1:
c5:6a:c8:dc:e3:ee:fd:8b:f6:1c:fa:81:a2:ec:38:cc:b9:a6:
8e:c1:48:8f:ed:d6:5b:81:66:ef:eb:7d:be:c3:a2:7e:23:97:
f3:d6:c5:44:d7:2e:e4:94:a2:4b:20:0a:0f:f9:59:cc:87:04:
8b:f8:a5:25:6c:cd:57:d3:c1:18:6b:df:be:b8:7d:a3:8c:98:
65:ae:ed:2e:02:30:28:40:9a:73:9e:10:bc:22:3a:52:e4:ed:
13:0c:16:ad:37:9d:35:e9:86:3c:db:59:ef:2a:8f:52:88:03:
63:00:58:b0:27:23:de:d4:94:4f:7f:9b:18:d6:e5:43:60:35:
84:50:1f:71:89:26:87:ff:6c:81:ad:bf:14:8d:45:7e:eb:2b:
42:e2:2e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:51 2025 by rpki-client