Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/QNj8z8x1CHBo41dlP9m9YUWWdYM.roa
File: QNj8z8x1CHBo41dlP9m9YUWWdYM.roa (raw, json)
Hash identifier: lNLcFPfZVefxGaWy7RMf6gROmsYwQszvKvzQ4JSm+Ys=
Subject key identifier: 40:D8:FC:CF:CC:75:08:70:68:E3:57:65:3F:D9:BD:61:45:96:75:83
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 01856F67161771B5602AD0D393A2BC08C122
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/QNj8z8x1CHBo41dlP9m9YUWWdYM.roa
Signing time: Sun 01 Jan 2023 22:15:04 +0000
ROA not before: Sun 01 Jan 2023 22:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35236
IP address blocks: 37.221.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:16:17:71:b5:60:2a:d0:d3:93:a2:bc:08:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Jan 1 22:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40d8fccfcc75087068e357653fd9bd6145967583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:90:82:1a:e0:84:4f:df:25:03:bc:91:e4:
c0:9a:ba:dd:bf:97:95:9f:90:24:b1:1f:a7:14:f6:
66:ed:ad:c7:60:75:b4:c9:5a:0b:ff:89:1d:84:44:
20:43:0d:7c:5a:90:3b:66:ee:4e:00:9a:bc:2d:72:
dc:53:85:cf:11:69:d4:0b:f3:71:5b:66:bd:82:05:
25:0a:41:63:7c:29:48:31:13:12:23:58:a9:8e:0d:
0c:83:68:62:8a:3e:b6:c0:48:b3:ea:df:df:b9:aa:
16:fd:4d:20:7e:0c:2c:52:81:10:56:68:a4:68:37:
9b:63:54:e8:c8:a6:e4:6e:6a:98:65:05:06:16:cf:
84:74:2d:a3:16:dc:54:59:e9:04:a7:a2:d4:01:4f:
20:97:c9:d7:e8:d8:5a:75:80:98:eb:85:73:83:65:
c4:0f:0f:aa:6c:cd:e0:2c:59:dd:b9:51:32:22:55:
d9:d7:5c:0b:7e:63:e0:fd:60:44:48:a4:d7:e5:a4:
a2:e4:2e:b9:ce:b6:f3:eb:4e:b6:fb:13:2c:56:cc:
29:bc:b4:66:b1:07:7b:27:f2:61:39:0e:b7:f2:86:
c4:7e:68:fe:1a:e9:62:e6:ce:29:4b:5e:1b:2f:e6:
2a:2d:3f:87:a5:07:c2:f2:09:20:0c:88:b0:65:04:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D8:FC:CF:CC:75:08:70:68:E3:57:65:3F:D9:BD:61:45:96:75:83
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/QNj8z8x1CHBo41dlP9m9YUWWdYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
32:93:6d:b8:20:d1:5b:9b:dd:a4:c4:2d:94:17:fe:a9:0d:4e:
e2:f8:e3:28:98:25:98:6e:f1:fe:ea:07:3a:3d:b7:45:b4:37:
0d:91:a2:99:a5:f6:05:15:ef:0d:d1:42:e8:d5:ac:6b:3f:ad:
63:56:79:32:55:c9:8d:5c:9c:25:79:81:fe:20:e2:f2:10:8f:
8e:a5:5e:17:bc:d4:9c:38:61:fb:8c:fb:9e:44:88:9f:86:12:
24:ed:b5:ee:df:17:00:a7:60:b8:14:98:13:61:8d:52:91:bb:
26:a5:06:aa:1d:11:af:0f:45:e3:0e:b8:d0:96:6b:1b:17:53:
e1:ea:5e:44:12:f6:45:9d:50:06:d5:74:58:59:8d:35:d2:32:
d1:20:9b:2f:57:cc:e2:69:7e:7e:4a:ef:8a:9b:5c:ec:17:55:
28:70:6c:57:cd:57:95:81:76:22:ce:a4:ba:c2:22:2d:bc:39:
bd:4c:a4:e3:2c:84:86:fb:63:91:0c:70:78:21:94:10:d8:e7:
bf:84:df:a0:08:d8:e4:9f:25:c6:b5:bf:8e:51:51:4a:54:c0:
b1:c8:4c:42:d3:c2:f3:dd:71:91:6b:d6:0b:a7:00:60:bd:da:
c3:19:59:a5:81:9c:d3:18:f4:52:17:4f:08:b3:90:c0:4d:e3:
08:0f:d2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:25 2024 by rpki-client on console-fra.rpki-client.org