Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/1-qtTUzqsmVAV7ViST6Sa9gvf4lE.roa
File: 1-qtTUzqsmVAV7ViST6Sa9gvf4lE.roa (raw, json)
Hash identifier: KU9Wg6+kIg1miHd4Eo9amitujFsfjjLd9QXq4X0ee10=
Subject key identifier: FA:AB:53:53:3A:AC:99:50:15:ED:58:92:4F:A4:9A:F6:0B:DF:E2:51
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 018CC56EE224FF38EB75AA53ABBAA892CE7A
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/1-qtTUzqsmVAV7ViST6Sa9gvf4lE.roa
Signing time: Mon 01 Jan 2024 14:30:27 +0000
ROA not before: Mon 01 Jan 2024 14:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209659
IP address blocks: 94.142.251.0/24 maxlen: 24
2a12:5bc1::/48 maxlen: 48
2a12:5bc2::/48 maxlen: 48
2a12:5bc0::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Mar 2024 19:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e2:24:ff:38:eb:75:aa:53:ab:ba:a8:92:ce:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faab53533aac995015ed58924fa49af60bdfe251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:80:4b:d4:03:d9:dd:95:2d:72:6f:37:e1:
2a:22:90:5b:55:b9:9d:bf:de:4f:03:bf:1f:80:fe:
36:c6:c3:55:59:87:5b:be:ee:1d:2a:74:58:9f:18:
41:11:e3:d5:90:82:51:6e:1a:e9:1d:8e:ec:f9:67:
45:86:41:f2:c7:59:c2:6c:6c:00:05:d3:bd:5e:ee:
b1:b6:bb:58:1e:16:8a:31:88:f9:02:b4:ff:32:5a:
e5:5a:13:b1:a5:1b:31:01:31:7e:f7:13:e8:3b:53:
a5:77:09:26:8b:89:05:e2:d3:7c:79:fa:31:90:96:
9e:2d:a5:45:83:94:8a:1b:6e:8b:3a:69:9f:21:c1:
a4:10:34:33:81:84:84:d7:54:1b:ab:ea:62:b2:ad:
08:6e:f6:92:26:18:76:42:11:32:3f:12:a2:f9:6f:
8f:30:ab:c7:89:5b:2b:9f:60:2b:da:67:3d:54:2e:
16:83:bb:8b:1c:23:6f:55:f9:f8:b0:72:e6:61:3d:
ab:e6:eb:ce:49:11:64:80:47:1a:af:bb:a0:34:07:
f2:5b:9f:6a:e0:98:cb:b9:6c:b0:d9:62:ba:20:07:
36:9b:da:e6:cb:b5:b5:de:50:32:d1:aa:2b:cb:2f:
9c:67:61:3c:18:f7:cf:80:65:13:6d:fd:6c:09:14:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AB:53:53:3A:AC:99:50:15:ED:58:92:4F:A4:9A:F6:0B:DF:E2:51
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/1-qtTUzqsmVAV7ViST6Sa9gvf4lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.251.0/24
IPv6:
2a12:5bc0::-2a12:5bc1:0:ffff:ffff:ffff:ffff:ffff
2a12:5bc2::/48
Signature Algorithm: sha256WithRSAEncryption
ab:c0:df:29:aa:75:cd:2a:f4:6d:31:01:73:3c:69:3b:92:84:
c3:76:6f:ac:4a:ff:8a:78:b6:d2:0d:e6:fc:c5:cf:74:54:90:
97:53:13:d1:84:97:e7:e5:21:16:ee:cc:c6:ae:5e:7a:9b:9e:
e0:b1:50:72:d5:5f:13:ab:ce:b1:15:7c:5a:b0:7a:28:03:11:
da:0b:f2:74:d8:66:1d:60:28:5e:18:2c:98:61:b4:d0:53:0a:
a3:69:59:8f:cc:48:71:96:db:b3:57:ec:3f:16:34:2b:ae:cf:
2f:23:5d:d0:ab:b7:d5:43:6f:38:3e:a0:d9:82:2c:fe:5b:37:
e6:08:2e:63:c0:e1:1c:02:c3:96:05:9b:13:b6:d6:74:c5:f8:
ae:19:80:ae:75:cc:4f:ee:30:e2:fa:a7:f2:f3:20:21:19:49:
4b:aa:e6:f4:54:44:23:64:10:82:b5:dc:9f:58:83:28:db:79:
2b:7c:3b:8d:d1:2c:98:b5:77:42:89:05:4b:1c:39:7c:64:17:
ab:1c:37:7c:4d:c7:e7:3b:e7:83:e3:a4:00:04:81:cb:7f:7f:
70:9c:fe:93:06:14:ef:a2:bc:6b:55:60:bb:54:de:32:ad:e6:
d6:d9:ee:df:a2:d8:b1:79:ef:86:2e:90:dc:ed:3d:af:98:6a:
8f:f6:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:39 2024 by rpki-client on console-ams.rpki-client.org