Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/q0gRuPMFOuMKHcDFE68yI8YUXKE.roa
File: q0gRuPMFOuMKHcDFE68yI8YUXKE.roa (raw, json)
Hash identifier: /uLGPQCNttoVWaNAgDL4MzgHRKudK7Sqh/mKeQgpJdc=
Subject key identifier: AB:48:11:B8:F3:05:3A:E3:0A:1D:C0:C5:13:AF:32:23:C6:14:5C:A1
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01895996F2ADB02CD81A2D53B7BCDAC7947B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/q0gRuPMFOuMKHcDFE68yI8YUXKE.roa
Signing time: Sat 15 Jul 2023 12:46:52 +0000
ROA not before: Sat 15 Jul 2023 12:46:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212027
IP address blocks: 185.243.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 06:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:59:96:f2:ad:b0:2c:d8:1a:2d:53:b7:bc:da:c7:94:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 15 12:46:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab4811b8f3053ae30a1dc0c513af3223c6145ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:6d:a5:23:5c:92:69:14:15:75:3f:c7:5b:
18:57:6e:d9:91:12:92:cc:5e:49:f6:15:32:0e:72:
1e:5a:78:b3:45:43:03:75:34:c2:43:98:23:5c:cd:
a7:ae:91:62:bc:8e:67:51:f9:72:d9:b9:63:26:93:
a1:fc:6f:a5:04:78:68:ac:db:63:05:63:c0:5e:34:
1a:fb:85:55:34:84:d6:cb:ef:a4:9a:e3:cb:9d:55:
96:50:f6:dd:1e:e6:29:9b:74:9f:ec:89:97:c6:4c:
2f:2c:3a:14:66:5f:ed:ef:05:49:d6:5d:02:fe:42:
9e:8d:ea:5c:f4:64:ad:82:14:2d:5b:f8:22:88:b6:
96:e2:7b:4f:b6:2a:7c:e0:9e:85:2c:71:c0:d2:93:
b2:04:9b:34:d4:ad:8f:c1:5d:09:9b:0c:1a:6d:ae:
18:ab:44:0b:75:6d:50:ee:74:53:5d:ed:0c:16:84:
eb:8b:6d:68:01:e4:f9:f9:1a:ab:2e:d6:e7:50:0f:
05:17:ee:4a:6a:67:3b:d0:8a:c7:35:57:be:98:df:
49:26:71:8b:c6:ae:89:8a:7e:04:9b:76:e5:9e:82:
06:f1:59:ec:45:44:92:e6:0e:71:c9:21:3f:fd:ff:
a3:6f:56:d8:24:dc:b8:4c:e0:cf:11:a3:cf:31:21:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:48:11:B8:F3:05:3A:E3:0A:1D:C0:C5:13:AF:32:23:C6:14:5C:A1
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/q0gRuPMFOuMKHcDFE68yI8YUXKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.5.0/24
Signature Algorithm: sha256WithRSAEncryption
74:04:53:63:52:45:02:ed:69:41:f9:d1:e9:a6:b7:54:35:a3:
39:ab:d4:a5:9a:47:95:48:f7:2f:a0:b9:d6:b9:87:3a:50:a9:
e8:97:a8:a2:2a:e6:a9:c7:c1:96:63:0f:81:38:64:72:1c:c9:
8e:30:8b:a7:66:34:4b:be:0b:83:27:97:b2:63:64:c2:29:c5:
61:b8:09:52:5b:4c:29:03:46:b7:86:78:d1:62:c8:8a:16:2b:
4e:0c:bd:cf:53:33:dc:a4:45:b1:97:eb:c4:2d:f6:a6:e5:fa:
77:f5:46:1d:8e:40:f0:c9:5b:cb:93:d7:64:c8:3f:3a:00:b6:
df:17:92:aa:11:cb:3e:f1:c5:cb:4d:0f:b5:05:52:c2:c1:b9:
ed:c6:a2:1e:3b:c8:2d:0a:2f:cb:d9:0d:82:36:16:2e:4d:9b:
7b:30:57:8f:75:30:38:96:f6:b9:e9:ce:52:5e:12:21:ba:9c:
a8:5d:fb:b7:f0:0d:dc:e2:14:c4:1b:d6:12:c4:2f:61:60:03:
34:0a:ec:01:d3:a0:a8:61:f2:9a:40:3b:41:19:65:08:e4:cb:
ca:95:6e:a2:95:58:08:8e:88:d0:3e:e9:a8:f1:a5:a6:a0:59:
b3:94:0c:8e:b6:f4:c2:fc:07:b6:9e:00:ab:95:64:64:21:7a:
d3:80:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org