Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/QUxkV7j-yWZAjPgdrbS3sTAB2UA.roa
File: QUxkV7j-yWZAjPgdrbS3sTAB2UA.roa (raw, json)
Hash identifier: /96D6Qd4GNTUihTajm1ynepflP32XzR/eSe/ZyXVmPA=
Subject key identifier: 41:4C:64:57:B8:FE:C9:66:40:8C:F8:1D:AD:B4:B7:B1:30:01:D9:40
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 018F05B795C5FD246DB7DD09B09321D9DE6C
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/QUxkV7j-yWZAjPgdrbS3sTAB2UA.roa
Signing time: Mon 22 Apr 2024 12:11:08 +0000
ROA not before: Mon 22 Apr 2024 12:11:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25717
IP address blocks: 171.25.138.0/24 maxlen: 24
171.25.139.0/24 maxlen: 24
171.25.140.0/24 maxlen: 24
171.25.141.0/24 maxlen: 24
171.25.142.0/24 maxlen: 24
171.25.143.0/24 maxlen: 24
193.221.16.0/24 maxlen: 24
193.221.17.0/24 maxlen: 24
193.221.18.0/24 maxlen: 24
193.221.19.0/24 maxlen: 24
193.221.20.0/24 maxlen: 24
193.221.21.0/24 maxlen: 24
193.221.22.0/24 maxlen: 24
193.221.23.0/24 maxlen: 24
193.221.32.0/24 maxlen: 24
193.221.33.0/24 maxlen: 24
193.221.34.0/24 maxlen: 24
193.221.35.0/24 maxlen: 24
193.221.54.0/23 maxlen: 23
193.221.56.0/24 maxlen: 24
193.221.57.0/24 maxlen: 24
193.221.68.0/24 maxlen: 24
193.221.69.0/24 maxlen: 24
193.221.70.0/23 maxlen: 23
193.221.72.0/24 maxlen: 24
193.221.74.0/24 maxlen: 24
193.221.75.0/24 maxlen: 24
193.221.76.0/24 maxlen: 24
193.221.77.0/24 maxlen: 24
193.221.78.0/24 maxlen: 24
193.221.79.0/24 maxlen: 24
193.221.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 13:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:b7:95:c5:fd:24:6d:b7:dd:09:b0:93:21:d9:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Apr 22 12:11:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=414c6457b8fec966408cf81dadb4b7b13001d940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fc:66:4e:4f:a7:4a:04:90:75:29:71:ff:76:
03:79:8b:8d:3e:45:57:64:95:3e:d7:4e:9a:67:6f:
99:cb:fe:04:32:e9:3e:9a:d0:67:33:18:a8:9d:73:
cb:a0:4e:c1:36:ce:26:f3:98:92:f6:1a:07:18:9f:
14:26:b8:f7:d0:ac:7a:ea:dd:48:5e:79:1a:ff:34:
27:ad:de:f5:bb:80:56:b7:21:cb:43:60:02:74:0f:
b3:df:4a:57:75:64:de:ba:b3:d6:0c:dc:2b:46:e9:
10:26:a1:6e:f9:f3:e6:72:bd:81:9e:6a:c3:6d:b3:
8a:28:90:4b:94:e8:13:22:dd:1b:19:2c:db:48:13:
4b:43:2c:ca:c5:96:31:f6:88:a4:6b:4d:1b:94:58:
58:c1:d1:aa:d1:8b:3a:c3:a2:82:c1:45:3b:90:fd:
1c:24:0c:e0:ad:da:0d:12:39:07:e0:5f:81:32:53:
13:f1:32:a4:c8:25:34:a7:a3:b5:b9:00:1d:4a:c6:
64:05:3c:af:b9:2b:38:fc:2d:73:1c:99:d5:9b:68:
7f:fa:01:73:09:13:4c:9a:23:30:14:44:13:5c:1b:
0b:e4:24:b4:0f:1d:46:14:02:04:28:57:25:ee:16:
25:86:1e:fb:8f:18:11:8f:bc:b4:19:2b:af:3a:d9:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4C:64:57:B8:FE:C9:66:40:8C:F8:1D:AD:B4:B7:B1:30:01:D9:40
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/QUxkV7j-yWZAjPgdrbS3sTAB2UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.138.0-171.25.143.255
193.221.16.0/21
193.221.32.0/22
193.221.54.0-193.221.57.255
193.221.68.0-193.221.72.255
193.221.74.0-193.221.80.255
Signature Algorithm: sha256WithRSAEncryption
58:ab:90:11:40:bb:dc:10:ab:d1:c9:e2:32:18:65:3b:a4:1d:
84:05:b4:ac:bd:13:69:b2:a9:40:19:20:44:27:85:d7:2b:1f:
54:de:18:15:db:78:65:9d:30:0e:21:cd:10:32:48:9e:00:a9:
16:92:f1:59:65:e0:db:cc:e6:74:0e:98:02:68:44:97:0e:16:
ee:e4:29:4c:18:aa:12:eb:16:b0:76:4e:46:5f:f7:4d:0c:4b:
52:48:d7:e6:0d:43:f5:74:33:22:54:78:3e:24:5e:8a:11:4f:
04:eb:75:b9:5d:54:e5:56:66:c0:d4:42:e1:bb:3c:5c:c5:c8:
d2:a9:4f:71:03:45:26:ca:0e:40:fb:e1:50:7e:82:b1:f1:b9:
e1:bf:f4:37:50:98:31:fa:44:6e:9e:87:fb:45:26:df:06:e6:
60:2b:03:34:bd:0c:21:79:bc:c0:6a:aa:9f:eb:77:b9:06:eb:
50:04:26:78:cc:29:04:48:6a:ea:f5:ee:2c:0b:10:5e:00:d4:
43:28:63:d3:21:69:c6:05:19:39:39:12:9b:49:01:20:6e:8e:
bc:8f:c3:b3:8b:de:d5:0d:b5:2f:b7:37:d6:da:62:a5:2f:00:
ab:89:44:09:6f:c0:4d:3c:78:1a:90:54:db:b0:1b:23:d9:b2:
5d:e6:5d:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 8 16:57:55 2024 by rpki-client on console-ams.rpki-client.org