Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/qz6NHu8plOxxaw5CANGVA_EWyXY.roa
File: qz6NHu8plOxxaw5CANGVA_EWyXY.roa (raw, json)
Hash identifier: mdb5WaTd5N9mLcNmR5neUDQuG35vRFVkqWTs2weZWoo=
Subject key identifier: AB:3E:8D:1E:EF:29:94:EC:71:6B:0E:42:00:D1:95:03:F1:16:C9:76
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 01856F54A9D90D3D98F8443F822F243F8255
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/qz6NHu8plOxxaw5CANGVA_EWyXY.roa
Signing time: Sun 01 Jan 2023 21:54:57 +0000
ROA not before: Sun 01 Jan 2023 21:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 192.44.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:a9:d9:0d:3d:98:f8:44:3f:82:2f:24:3f:82:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 1 21:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab3e8d1eef2994ec716b0e4200d19503f116c976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:5c:0a:5e:ed:b0:f9:0f:54:ad:f4:32:95:
99:ee:3a:57:c3:2c:e7:82:b1:9b:9c:35:79:c3:e1:
52:0d:88:69:44:98:60:8b:0c:92:44:df:9c:ea:b0:
45:f2:79:02:28:4a:59:0c:06:ee:4d:70:8e:f2:d8:
7a:74:27:1c:25:8d:0c:63:31:60:be:c6:1e:3e:02:
7b:bd:26:ac:5f:f8:84:27:ea:f0:5b:a6:ce:e5:63:
8f:41:4e:43:c5:cb:25:b6:9e:b2:ef:e4:4f:a1:80:
06:5c:b2:5a:3a:46:d7:6c:4c:73:69:11:f6:17:01:
3b:49:ed:8d:cb:46:f4:a0:67:85:24:86:73:c1:d4:
23:d4:0b:38:85:12:7e:f6:f1:47:90:6b:9d:c7:af:
55:57:f5:ff:e9:2f:64:d7:b6:0a:b0:1b:2f:39:09:
59:c0:30:2c:44:ba:55:38:2c:66:16:b7:ec:98:12:
11:62:98:88:86:37:30:bd:12:74:53:e4:ca:fd:d4:
87:08:e5:09:d2:76:ea:01:08:1c:17:19:ea:d8:8e:
c2:36:59:2f:a8:bc:59:f6:7d:b5:d6:27:d3:5f:30:
74:2f:fc:e0:75:9b:49:1d:83:cb:c7:3a:09:7b:1a:
ec:f2:67:37:c3:0c:38:8c:39:00:3d:cb:9e:ba:4d:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3E:8D:1E:EF:29:94:EC:71:6B:0E:42:00:D1:95:03:F1:16:C9:76
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/qz6NHu8plOxxaw5CANGVA_EWyXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c0:65:c1:3a:36:da:f8:d2:24:ef:64:ec:a4:12:d2:f1:d3:
c1:6a:cc:ba:c0:97:50:4a:e8:34:47:06:bf:86:c2:e6:5d:d3:
78:a8:8a:2b:2c:ce:f9:73:12:b4:9c:b2:1c:3d:18:24:50:6f:
f4:ae:57:f9:ab:ef:29:7b:ff:2c:16:3c:4e:e4:f1:c4:68:73:
51:e1:51:9f:f0:c5:a9:84:33:a5:ed:72:10:fe:c4:57:e0:5f:
31:ca:f0:f0:c1:14:58:04:cf:d0:e6:b6:38:39:62:ed:89:d7:
bf:f4:ad:1a:bf:e9:b9:04:d8:b2:cd:b6:14:77:ab:fb:c0:ad:
7f:f1:63:81:c1:9f:72:00:e7:3b:43:70:2e:b7:7a:aa:e2:c4:
4d:f2:8a:0c:c0:6e:da:0f:91:33:46:de:ff:15:68:f4:19:04:
db:0b:bf:20:de:52:7b:d7:b5:a8:7e:04:06:6a:cc:d5:58:50:
61:72:ab:06:31:d3:90:5d:cf:b1:87:11:66:30:b0:a9:cd:eb:
cd:2e:58:61:02:f4:2e:87:49:9a:ae:7a:3d:69:08:69:08:1f:
64:75:09:c5:5b:a8:d1:1f:48:77:91:d6:1c:fb:b8:7d:0c:37:
a2:1b:4d:42:7a:ef:6a:b6:2a:c1:94:84:ec:36:d0:41:aa:46:
2e:83:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:59 2024 by rpki-client on console-fra.rpki-client.org