Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/qxVV73oCO68dXel7XHQKNAXd-Q0.roa
File: qxVV73oCO68dXel7XHQKNAXd-Q0.roa (raw, json)
Hash identifier: eur5qzQUBixltLkEVcHxHQtnDMhUq3X1zmZC1ONYj7U=
Subject key identifier: AB:15:55:EF:7A:02:3B:AF:1D:5D:E9:7B:5C:74:0A:34:05:DD:F9:0D
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 01856E2FB0B3EE1D44A3177B1C3FA2883344
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/qxVV73oCO68dXel7XHQKNAXd-Q0.roa
Signing time: Sun 01 Jan 2023 16:34:57 +0000
ROA not before: Sun 01 Jan 2023 16:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13045
IP address blocks: 195.8.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:b0:b3:ee:1d:44:a3:17:7b:1c:3f:a2:88:33:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Jan 1 16:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab1555ef7a023baf1d5de97b5c740a3405ddf90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:8d:f3:66:8d:85:87:f8:ef:01:7a:43:c2:
da:76:24:6a:7d:44:f5:18:c6:b6:6b:38:5d:c7:3f:
db:8c:3d:07:e8:d7:6a:de:f9:c6:65:b5:6d:3f:3b:
5e:fb:a9:24:e2:1f:4e:f7:38:13:08:07:08:5f:bc:
53:dc:95:5d:95:ee:18:0d:2b:6e:8e:6c:80:5f:d6:
32:8d:8c:9c:87:35:60:c4:4a:4c:2f:f5:3e:62:94:
98:eb:85:31:17:86:b2:25:59:c8:1f:29:fd:94:70:
c7:02:03:02:76:52:c8:f4:7b:0e:5a:be:7a:c5:01:
23:a8:2c:1a:10:d9:69:1e:c0:67:bb:a1:12:43:97:
b1:4a:7f:a9:44:06:01:0d:22:ca:d8:87:b5:07:e0:
3d:8c:33:7a:d5:a5:24:63:2f:46:ab:72:f4:af:ee:
4b:c9:d3:1c:91:4a:08:cb:c8:7f:2b:33:d6:3c:98:
fe:2f:48:2e:32:2f:54:d1:2a:c4:95:66:d3:9c:20:
db:4e:54:54:ba:ef:0a:12:38:0c:6d:6b:50:00:c7:
20:d5:9d:4e:9f:54:02:cf:3b:f5:b2:21:5f:1c:c3:
d0:64:e3:51:2c:f6:b4:3c:c9:37:34:f8:77:35:bb:
f7:69:a1:a1:25:4f:26:b6:a1:94:bf:75:53:54:c9:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:15:55:EF:7A:02:3B:AF:1D:5D:E9:7B:5C:74:0A:34:05:DD:F9:0D
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/qxVV73oCO68dXel7XHQKNAXd-Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a6:bf:a0:d3:cf:16:e8:2e:ac:9a:74:70:6b:2d:28:56:a4:
24:68:47:d5:08:99:92:67:70:54:00:cc:3e:9c:97:d8:e9:db:
f1:e2:c7:38:88:24:23:64:63:22:6f:38:7d:41:17:6d:de:9a:
75:24:60:fc:47:d7:3f:12:7d:b9:cc:56:50:48:64:8f:84:b0:
a2:b2:71:36:73:4a:4d:20:14:3a:88:6a:9d:1d:39:6c:05:39:
38:dd:30:12:8a:86:51:88:ad:29:c2:b0:00:b2:82:f8:a1:bf:
2c:ee:69:8f:c6:c0:5c:58:fa:37:04:29:26:d7:d2:8e:c2:e9:
de:8d:97:07:4a:68:e6:d4:29:38:ee:75:3a:4e:84:e9:bf:33:
07:7f:15:e1:6e:3a:5c:88:a3:ce:d5:6b:51:d1:6b:04:64:91:
d6:c7:ef:13:6a:ff:34:83:c5:d0:1d:d6:7e:d3:c2:21:2b:23:
c1:17:b8:b0:7e:e2:db:d2:09:d7:c9:b1:88:ee:fe:99:2e:13:
c3:b0:3e:d9:02:71:77:1a:97:30:9d:c4:c9:37:57:74:dc:01:
eb:67:c9:ab:04:a4:bc:c4:1b:15:b9:e9:80:e8:36:5d:ac:5e:
49:c2:22:82:bf:eb:d3:ec:e7:06:ef:dc:05:fa:e8:9b:69:29:
8c:36:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:08 2024 by rpki-client on console-ams.rpki-client.org