Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/qA8_NgmH1ZAw_eGBj1ynobLo4Kw.roa
File: qA8_NgmH1ZAw_eGBj1ynobLo4Kw.roa (raw, json)
Hash identifier: QTFvvuI4cQ98PLTAD/4tW+QTl8xU2AAuzW2IWIbPlGY=
Subject key identifier: A8:0F:3F:36:09:87:D5:90:30:FD:E1:81:8F:5C:A7:A1:B2:E8:E0:AC
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 0192E34EB4AEE2700F09BAD952772885E2D6
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/qA8_NgmH1ZAw_eGBj1ynobLo4Kw.roa
Signing time: Thu 31 Oct 2024 16:00:38 +0000
ROA not before: Thu 31 Oct 2024 16:00:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 128.127.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 12:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:4e:b4:ae:e2:70:0f:09:ba:d9:52:77:28:85:e2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Oct 31 16:00:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a80f3f360987d59030fde1818f5ca7a1b2e8e0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:7c:85:a0:b3:3c:dd:79:3c:62:a0:d4:c9:
c2:ae:82:0b:c6:41:1e:e5:b4:e1:0b:15:db:27:0e:
32:8e:d5:83:93:2a:bc:6b:e1:06:60:c1:7d:f7:09:
26:51:42:a1:f0:3e:e4:7b:f7:17:fa:0a:93:d5:ff:
39:83:bd:50:8c:07:f0:c0:9a:04:5a:7c:ad:59:d4:
e3:94:d0:3f:c0:a1:c3:a5:7d:e2:47:e6:7a:2c:5b:
0d:11:01:20:c6:f2:7b:50:75:c0:39:5b:42:27:d1:
24:06:b3:8c:af:b3:fb:7d:26:35:3f:5f:f7:75:60:
ce:a3:c4:a7:2c:0b:1e:0b:df:f8:66:83:d4:2b:58:
e0:1a:fb:b4:45:43:f7:55:e0:b3:cf:15:1e:ac:1d:
67:db:5e:56:80:af:7d:84:10:6a:0d:a7:47:15:3f:
33:03:c3:90:0c:46:1e:7b:4c:7d:b8:63:2d:c9:e7:
fd:bc:2b:62:70:c8:d9:18:be:65:d5:ae:c6:5c:d3:
65:49:0a:d2:94:3f:e7:d2:f3:7c:a6:4e:98:4c:54:
b5:cc:6e:4d:7b:85:b2:2d:50:77:26:43:5a:c8:8c:
33:00:62:57:d0:b5:b1:af:60:2c:cd:d4:bc:d3:87:
b7:fe:60:ff:b8:ff:3d:2b:29:e6:a2:53:f3:aa:04:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0F:3F:36:09:87:D5:90:30:FD:E1:81:8F:5C:A7:A1:B2:E8:E0:AC
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/qA8_NgmH1ZAw_eGBj1ynobLo4Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5d:5d:5b:45:39:52:bc:b0:bd:d7:b7:46:db:18:b4:16:45:
2b:9d:70:71:3e:8f:12:04:2b:06:cf:95:67:81:6f:6b:5b:90:
8f:81:c0:3b:64:a2:2f:59:ec:2d:47:cc:18:68:9f:5d:16:42:
a0:bf:64:39:8f:3c:5d:69:33:f1:21:9c:8b:29:cb:3b:1d:3d:
5a:02:c2:5b:2f:ca:24:aa:7b:bc:f0:2a:bb:3b:b9:bd:c2:37:
ec:37:8b:38:38:a7:bb:5b:65:08:04:28:67:14:85:77:d3:8b:
a1:67:9d:08:34:ab:19:78:96:fa:37:65:1a:7f:12:ab:63:7b:
0f:81:f1:07:21:cd:da:26:01:45:47:11:9a:10:89:bd:01:e4:
3f:a7:05:68:d5:04:a0:40:71:e0:05:ba:f3:c3:48:44:bf:c9:
9e:ac:b9:ae:1c:e4:42:c6:46:ba:f1:ec:4f:d2:50:cf:fc:b2:
1f:91:42:2b:d6:f2:3d:f0:f5:f0:7c:47:cf:ee:78:1a:f9:43:
f9:4c:dd:e5:90:dc:a4:ef:5e:94:99:c3:a9:24:8d:80:a9:8a:
4f:5a:34:13:85:64:92:1a:e7:4a:4a:af:c7:45:95:3c:56:9a:
35:5f:af:f7:a9:b9:74:aa:df:28:94:a1:61:5e:64:3a:82:01:
7b:0c:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 15:01:50 2024 by rpki-client on console-fra.rpki-client.org