Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/qqtdR9ARdDpE_ZWywroqstXOdmM.roa
File: qqtdR9ARdDpE_ZWywroqstXOdmM.roa (raw, json)
Hash identifier: ubas7RXSkEbWH+BaIsUo+NlpcZi0cZ9EDSUpvFbdrII=
Subject key identifier: AA:AB:5D:47:D0:11:74:3A:44:FD:95:B2:C2:BA:2A:B2:D5:CE:76:63
Certificate issuer: /CN=9d9606edeef908959ce4336ab395ca9083316108
Certificate serial: 01856D6622C60C895FA22DAD9E403C2B29DC
Authority key identifier: 9D:96:06:ED:EE:F9:08:95:9C:E4:33:6A:B3:95:CA:90:83:31:61:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZYG7e75CJWc5DNqs5XKkIMxYQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/qqtdR9ARdDpE_ZWywroqstXOdmM.roa
Signing time: Sun 01 Jan 2023 12:54:48 +0000
ROA not before: Sun 01 Jan 2023 12:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60631
IP address blocks: 178.211.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:22:c6:0c:89:5f:a2:2d:ad:9e:40:3c:2b:29:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9606edeef908959ce4336ab395ca9083316108
Validity
Not Before: Jan 1 12:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaab5d47d011743a44fd95b2c2ba2ab2d5ce7663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:ba:4f:11:50:7c:23:f9:36:43:a0:a1:d5:
57:2f:fa:06:de:e0:32:3c:89:5d:06:fc:6f:30:08:
a7:d5:f0:d5:61:db:f6:99:ce:4a:8c:86:8c:9c:e9:
3e:e9:d9:6c:da:76:ce:f5:fc:8e:2b:26:1a:62:73:
22:94:2a:96:b7:0b:4d:b8:ba:8b:82:f2:15:4d:1f:
17:4c:ab:da:de:e5:cf:b5:32:0c:08:4d:b2:2b:a7:
f3:1e:68:e6:2d:84:99:d2:5d:7e:7a:cb:15:75:31:
80:32:c8:91:32:71:c2:49:77:b2:a5:55:eb:cd:96:
c9:c5:84:e9:72:0e:66:39:91:a8:e6:35:1c:df:0b:
20:08:78:37:ae:4d:9e:3d:89:e8:cc:00:1c:be:95:
73:54:e2:34:18:a4:b8:5c:a5:a7:93:b7:50:51:41:
47:aa:87:ce:9f:b1:85:fb:a1:d9:07:87:0b:00:2a:
79:76:7d:57:20:1d:80:b0:31:4a:88:0d:dd:a8:15:
42:f9:10:10:22:c9:b9:15:cd:40:4f:c2:ab:5b:78:
7d:ad:6c:c7:a8:a6:12:e3:a8:99:aa:37:5c:fe:5b:
14:74:9a:ae:36:a9:63:f4:8e:b1:84:b6:05:4a:cb:
85:6b:a2:ec:c2:85:be:a7:0e:06:c8:b7:48:18:a6:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AB:5D:47:D0:11:74:3A:44:FD:95:B2:C2:BA:2A:B2:D5:CE:76:63
X509v3 Authority Key Identifier:
keyid:9D:96:06:ED:EE:F9:08:95:9C:E4:33:6A:B3:95:CA:90:83:31:61:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZYG7e75CJWc5DNqs5XKkIMxYQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/qqtdR9ARdDpE_ZWywroqstXOdmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/nZYG7e75CJWc5DNqs5XKkIMxYQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.145.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fd:66:63:ff:01:02:ff:2e:94:85:2d:fc:69:11:58:ea:d6:
35:71:79:d7:f2:f4:6c:05:8b:78:d0:29:05:97:8e:19:77:c1:
2e:da:da:ed:f1:0e:11:bd:82:74:cb:74:85:1b:52:a2:24:ed:
03:cf:a1:af:c2:27:95:4d:79:bf:2a:6a:e6:00:d6:01:ac:59:
2f:c3:d3:99:72:56:d2:09:55:84:16:bb:60:a6:07:99:6a:af:
4b:20:16:95:42:99:fe:c5:74:9e:58:3c:8a:a0:31:8b:b1:0a:
9b:66:1b:ec:a6:45:71:e8:3f:bd:3d:1c:b9:9f:24:a7:dc:c8:
f5:cb:67:27:36:d0:05:d2:55:aa:51:a2:b0:a5:78:12:37:2b:
44:c1:7f:79:2f:75:e1:1c:11:5b:cf:df:52:a5:fd:0b:c2:1a:
25:c8:56:43:60:2d:3c:08:71:81:fd:ca:1f:45:74:54:78:82:
43:7e:dd:82:2a:00:dd:9f:80:0f:a6:cc:35:11:4b:9f:53:f5:
2e:a9:fd:6c:9a:9c:d4:cd:39:24:f7:0a:1b:9e:ad:e2:b5:8c:
c1:32:28:6a:9a:ae:c5:e7:c2:9c:db:8d:33:07:ae:bd:a3:6e:
a1:2d:9f:f9:e4:46:9d:ca:28:54:c1:0e:2f:b4:8c:a3:5d:67:
fb:b4:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:17 2024 by rpki-client on console-ams.rpki-client.org