Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/qhGsSzYFjhV6_xfAfNfB7DspyAA.roa
File: qhGsSzYFjhV6_xfAfNfB7DspyAA.roa (raw, json)
Hash identifier: vC6yP1VvWPHlpDtdvXEXzf+xzJR7tpi3GSjo3+j8qs8=
Subject key identifier: AA:11:AC:4B:36:05:8E:15:7A:FF:17:C0:7C:D7:C1:EC:3B:29:C8:00
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 01856B811578D9A2E587D8A88BF029E4D054
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/qhGsSzYFjhV6_xfAfNfB7DspyAA.roa
Signing time: Sun 01 Jan 2023 04:04:59 +0000
ROA not before: Sun 01 Jan 2023 04:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31083
IP address blocks: 87.118.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:15:78:d9:a2:e5:87:d8:a8:8b:f0:29:e4:d0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 04:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa11ac4b36058e157aff17c07cd7c1ec3b29c800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:36:5c:4f:9d:f7:1c:da:39:68:0f:ca:a9:0f:
3b:29:be:70:d1:b3:1d:32:aa:a3:7b:03:b5:fb:9f:
89:fb:0f:b6:8b:02:56:af:08:d2:48:2c:15:42:9a:
21:40:68:33:c8:1e:34:60:6c:40:70:fc:9a:73:83:
c0:89:67:d0:96:a8:d6:8d:0b:ee:d2:3e:8b:29:c0:
2f:ac:2c:60:ef:f6:34:4c:e7:85:1f:43:a0:f5:62:
53:e2:97:98:70:64:80:db:9b:f6:13:b8:7c:91:f7:
4b:55:29:2e:d2:62:60:be:e2:f0:21:e4:5b:77:bf:
be:d5:13:da:80:85:32:82:89:b6:43:59:50:6b:26:
ae:10:d2:86:e4:37:0d:63:3c:29:80:d7:5d:dc:5f:
89:cb:f6:f1:94:64:88:70:0c:b6:fc:e3:47:fe:09:
40:4e:d9:e2:49:da:42:8d:c6:05:86:61:2c:03:60:
d0:ea:dd:3f:6a:70:7c:87:20:a5:89:9e:f7:d4:a5:
7a:7c:38:fd:62:93:b4:9b:15:01:08:1d:26:2d:bf:
5f:8a:b0:3b:9f:25:22:8e:09:9f:9d:0a:a4:7f:77:
2a:76:49:fc:5b:41:74:ec:37:c8:29:34:1d:69:e4:
1f:d4:4d:99:f3:61:fb:63:10:e8:83:2c:be:1d:27:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:11:AC:4B:36:05:8E:15:7A:FF:17:C0:7C:D7:C1:EC:3B:29:C8:00
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/qhGsSzYFjhV6_xfAfNfB7DspyAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.140.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f4:f1:b1:06:8e:31:d2:3c:a6:da:48:e8:3d:4a:84:82:4c:
3b:ab:96:4b:5f:bb:6c:bc:dc:35:56:e8:50:ff:76:1c:c9:b2:
fa:2f:ff:dc:cf:f9:47:c9:81:4a:16:f8:ac:14:fa:09:35:dc:
66:c5:02:a4:5e:cf:b2:6a:03:31:f3:df:6a:0d:1a:d0:cc:c5:
4b:bb:d5:aa:7f:fe:69:17:cc:13:53:18:cb:73:a1:03:74:14:
db:96:6f:30:0b:a1:84:69:18:9f:36:10:68:16:52:7b:1d:85:
c6:60:41:bf:89:73:46:00:4d:9c:3b:ee:ec:cd:50:5e:f5:c4:
69:23:31:65:82:72:1d:31:96:5f:ea:4b:ea:a2:67:79:05:da:
c9:b6:92:dc:ef:0d:39:6a:3d:63:7b:5a:cc:4b:9f:fa:4f:ac:
9d:a9:8d:fc:59:f1:60:52:bc:48:b3:6e:ae:38:2d:05:0d:da:
7b:0e:bb:2e:d8:d6:7f:13:e9:67:1d:60:28:00:d0:fb:1a:d7:
26:58:4d:d7:7c:bc:f0:1a:39:a3:f3:1b:4f:7c:05:3c:c7:ba:
36:1c:3c:1b:84:c6:1d:a4:7f:23:19:29:d1:6a:ed:22:f3:97:
e6:db:8a:08:f0:6e:80:d7:f9:ee:d7:68:31:45:80:e4:fc:37:
81:59:e0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:48 2024 by rpki-client on console-fra.rpki-client.org