Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/QuAp-AYcROMhX5rE-cbva0UxJ2U.roa
File: QuAp-AYcROMhX5rE-cbva0UxJ2U.roa (raw, json)
Hash identifier: 5U9GzZYtVBnYeQeTx5CLkhv8i4q5dyMTWBjG3SH2yvc=
Subject key identifier: 42:E0:29:F8:06:1C:44:E3:21:5F:9A:C4:F9:C6:EF:6B:45:31:27:65
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 018D0CCD5A7895824D5D8AB4907C137B90F9
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/QuAp-AYcROMhX5rE-cbva0UxJ2U.roa
Signing time: Mon 15 Jan 2024 11:06:41 +0000
ROA not before: Mon 15 Jan 2024 11:06:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207582
IP address blocks: 185.248.59.0/24 maxlen: 24
91.205.41.0/24 maxlen: 24
2a07:a700::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 18 Jan 2024 13:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:cd:5a:78:95:82:4d:5d:8a:b4:90:7c:13:7b:90:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: Jan 15 11:06:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42e029f8061c44e3215f9ac4f9c6ef6b45312765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:48:c6:8f:3a:04:a8:65:97:3b:24:4f:81:d1:
98:a8:0b:18:6d:1d:9d:36:26:58:59:5b:85:4b:0e:
1c:09:10:61:75:6d:73:58:87:a9:ce:99:83:f5:dc:
2e:68:52:b6:0f:d6:f7:7d:11:05:72:98:41:3a:7e:
2e:72:d0:23:af:dc:5d:4e:69:52:bf:10:b7:f9:88:
92:13:44:6c:ba:06:79:7c:00:8d:bb:7d:38:38:06:
70:bd:5b:ba:7e:42:9c:38:c9:c9:49:86:97:f7:6e:
d7:f9:ec:00:bc:e4:5c:13:7c:5c:17:6f:3a:d7:92:
12:6c:42:08:00:1a:a5:32:7b:af:c3:78:3a:32:04:
b9:32:46:40:3a:88:de:34:0b:35:62:e2:1d:a2:64:
78:8c:c5:e7:cf:6f:13:ca:8a:fa:90:28:71:53:8c:
d1:76:66:83:30:9e:3b:94:41:5b:4f:3e:cf:7d:49:
02:13:0d:87:32:fa:a1:40:50:ef:08:78:0d:77:f5:
c9:cf:f2:ac:18:27:22:c7:68:ac:d9:af:90:24:78:
37:28:3a:5b:ca:94:01:d1:72:0d:17:6a:d8:85:f8:
00:fe:cc:e7:bd:84:10:41:37:d7:eb:ee:83:d1:5d:
b9:b6:6b:9b:4f:e8:0f:cf:13:8d:7d:35:ae:a5:d0:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E0:29:F8:06:1C:44:E3:21:5F:9A:C4:F9:C6:EF:6B:45:31:27:65
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/QuAp-AYcROMhX5rE-cbva0UxJ2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.41.0/24
185.248.59.0/24
IPv6:
2a07:a700::/29
Signature Algorithm: sha256WithRSAEncryption
e0:f6:7c:7a:29:93:fe:85:ec:eb:f5:5c:28:c0:b3:16:1e:2b:
f9:67:74:b8:bd:96:9f:9b:6a:34:3f:62:9a:7e:92:cd:8f:97:
f0:f5:bb:9d:17:0c:63:80:bc:e9:ad:ca:8f:37:6b:c9:9b:ad:
cd:c4:81:26:7a:83:a3:7e:d5:01:81:b9:f4:1a:0a:ea:a6:b6:
cb:6b:50:95:73:74:a3:c1:3f:77:c2:d6:8b:e8:74:2d:82:64:
74:33:3d:47:41:25:74:ae:92:7f:9d:a2:c4:31:a8:0e:98:5d:
c2:cf:b2:eb:5b:05:19:b5:2e:6f:62:9d:69:eb:f6:64:35:92:
0c:71:fe:2a:ba:31:c5:3e:b8:5b:02:bf:1f:08:82:01:74:d1:
9a:d3:fd:cb:7b:7a:4a:18:59:fc:60:63:31:1e:ba:90:9e:0c:
c1:ac:49:57:7c:22:c5:a9:d0:94:46:37:b7:95:bc:3d:b9:5e:
42:87:d1:0e:71:9c:ff:20:df:9a:db:43:38:b2:eb:48:54:08:
2f:8d:20:f8:42:25:b3:97:0d:dc:73:1a:f6:24:f6:07:39:b0:
88:1c:7d:1e:64:0e:7f:bb:76:71:6b:99:45:b1:6a:af:5d:72:
cb:9e:3f:63:02:6c:c6:fb:8e:5c:f0:42:b5:35:e9:69:f3:37:
89:4f:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:33 2024 by rpki-client on console-ams.rpki-client.org