Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/fRmqaMvuS8VG0WGr629fhhClzog.roa
File: fRmqaMvuS8VG0WGr629fhhClzog.roa (raw, json)
Hash identifier: sReAM8uaxCcS+lqHXoGtDz6qZWvQxuM2O2aNXTdIkA4=
Subject key identifier: 7D:19:AA:68:CB:EE:4B:C5:46:D1:61:AB:EB:6F:5F:86:10:A5:CE:88
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019299CBB4D6043C78A15B24A06858CB45A5
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/fRmqaMvuS8VG0WGr629fhhClzog.roa
Signing time: Thu 17 Oct 2024 09:25:16 +0000
ROA not before: Thu 17 Oct 2024 09:25:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49127
IP address blocks: 103.229.81.0/24 maxlen: 24
185.219.6.0/24 maxlen: 24
193.37.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Nov 2024 07:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:cb:b4:d6:04:3c:78:a1:5b:24:a0:68:58:cb:45:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Oct 17 09:25:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d19aa68cbee4bc546d161abeb6f5f8610a5ce88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2c:40:18:db:17:b1:36:4a:10:e4:b1:d6:84:
7c:87:a0:b6:3e:aa:4d:61:da:37:0a:60:b6:52:1e:
20:b2:d7:0f:e1:d1:03:d9:47:08:82:54:67:02:fc:
b2:13:7c:ff:d9:2c:d2:09:5b:0f:1d:4d:6d:ae:2b:
12:83:6d:0a:9b:98:32:c9:a3:6b:a9:ac:84:c2:63:
78:fe:1d:bb:ae:de:3d:00:26:04:b1:65:c6:27:84:
c2:47:8c:08:24:96:f0:eb:2b:ca:53:8e:68:76:4a:
cd:51:dd:6b:e7:1d:1d:e5:b8:c5:40:69:fa:77:be:
3d:79:8b:25:1a:68:ec:d7:97:20:99:0d:5c:df:fd:
33:8b:b2:44:ae:da:cd:1b:dd:7a:b0:c0:45:52:05:
4a:ac:65:5e:7f:26:3c:08:ba:6c:42:6a:42:8b:93:
4a:4e:74:08:fa:d2:7a:47:a1:14:ab:3c:88:32:57:
e5:12:db:e1:90:04:81:f9:ea:e5:bc:ad:db:eb:f1:
9c:72:f7:29:cd:03:44:ac:61:c2:b7:10:5a:c9:5d:
ca:86:be:6f:e9:89:cf:39:54:43:b5:0d:af:26:16:
0d:42:20:a1:b8:59:7f:7c:9d:d4:ca:45:04:06:95:
f7:8f:30:fb:ef:4b:c2:34:86:0a:fa:09:3c:21:4c:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:19:AA:68:CB:EE:4B:C5:46:D1:61:AB:EB:6F:5F:86:10:A5:CE:88
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/fRmqaMvuS8VG0WGr629fhhClzog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.81.0/24
185.219.6.0/24
193.37.216.0/22
Signature Algorithm: sha256WithRSAEncryption
34:4a:a1:69:a4:f9:5b:18:68:07:3e:1a:fb:83:45:a2:15:05:
03:fd:fc:63:f6:35:35:5c:38:6b:e8:6f:b4:46:09:d7:61:5b:
58:29:bd:ec:17:33:c6:dd:33:2f:2c:36:76:8e:59:45:ad:8f:
bd:b6:f8:5a:39:04:a9:7d:fd:68:f7:67:1d:14:37:48:98:c6:
60:6f:d1:4b:27:78:14:e0:37:0e:99:b6:cc:37:bf:da:33:73:
bc:db:1c:b1:61:eb:5b:af:e6:ab:2f:f9:55:69:27:7d:d2:72:
29:8b:ce:6d:15:b2:30:2f:98:02:02:86:45:82:07:2f:0b:5f:
80:58:79:11:d5:7e:78:69:c6:37:83:64:ef:6c:ca:77:dc:f9:
2e:89:65:2c:36:46:40:32:2e:f6:8e:25:c7:33:f8:8e:97:ce:
be:25:8b:c5:f3:9d:fa:76:7e:fe:12:ad:c3:ab:1e:f3:fd:cf:
72:55:f4:fd:92:e7:b8:4f:04:ef:99:7b:da:49:fc:47:8a:95:
75:a7:51:c9:85:bf:38:0f:dc:26:7a:67:28:4c:ac:ab:38:50:
aa:14:25:61:73:44:a4:c9:c2:0c:22:da:02:34:c9:72:1b:6e:
15:d9:93:0d:27:4f:07:17:57:61:cd:03:69:8c:27:93:57:e8:
83:7a:e7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 09:47:21 2024 by rpki-client on console-ams.rpki-client.org