Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/QwF-K_jQp7aZpQlo78XR5BwoapE.roa
File: QwF-K_jQp7aZpQlo78XR5BwoapE.roa (raw, json)
Hash identifier: +urj3B11ygee2+M5zDCPXDvs69Ln4CtQb+awwq+RYGM=
Subject key identifier: 43:01:7E:2B:F8:D0:A7:B6:99:A5:09:68:EF:C5:D1:E4:1C:28:6A:91
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 018C83CA0D79B589D2D491E669AD0CAEA255
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/QwF-K_jQp7aZpQlo78XR5BwoapE.roa
Signing time: Tue 19 Dec 2023 20:35:06 +0000
ROA not before: Tue 19 Dec 2023 20:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200113
IP address blocks: 45.84.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 00:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:ca:0d:79:b5:89:d2:d4:91:e6:69:ad:0c:ae:a2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Dec 19 20:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43017e2bf8d0a7b699a50968efc5d1e41c286a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:a9:3b:23:c3:e1:b5:c8:0f:5e:e3:11:0e:
d7:16:cd:7f:eb:dd:e2:dc:96:ed:71:72:74:bb:dd:
35:34:b3:8a:70:e1:88:8c:bb:f9:36:97:bf:71:52:
fb:a8:94:26:8c:bf:52:2b:62:dd:07:82:5c:79:bf:
96:93:2f:58:26:78:37:86:e4:4c:97:80:43:39:e8:
33:a9:31:ff:49:62:ec:c3:c7:b2:e1:a2:91:48:2e:
db:68:fb:71:22:8b:16:a8:50:32:a8:61:4d:e1:0d:
1f:ff:cc:ef:88:bd:f3:92:29:e8:06:42:d6:6e:c7:
c8:f0:f9:9b:a5:85:fe:5f:6b:86:96:64:b2:dd:6e:
2c:50:18:f3:ec:81:02:03:29:1a:18:ad:12:3e:54:
cc:a8:07:22:d7:67:7a:1f:9b:d4:31:77:c3:46:f1:
c3:51:73:25:ae:52:63:21:86:3c:70:a1:de:03:4c:
07:40:3d:99:8d:9f:57:66:19:80:15:a4:ba:a0:c3:
c1:0c:02:e9:99:cc:c3:fe:c1:c6:f1:cf:48:fe:f4:
7b:1c:e3:4b:84:b8:86:68:6f:7b:d7:13:ea:9e:1b:
76:5b:26:0f:64:e7:d3:73:2e:6d:37:41:b0:38:55:
a5:70:e5:f5:e2:e7:63:1f:c0:9a:b4:62:05:73:2c:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:7E:2B:F8:D0:A7:B6:99:A5:09:68:EF:C5:D1:E4:1C:28:6A:91
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/QwF-K_jQp7aZpQlo78XR5BwoapE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.101.0/24
Signature Algorithm: sha256WithRSAEncryption
94:61:28:c1:6c:59:1f:63:2e:b4:25:9d:82:2e:1b:e6:11:b2:
61:51:97:22:44:ee:a5:0e:6d:e3:6b:91:2f:39:a5:f6:26:10:
3e:fc:25:b7:db:5e:ac:7d:e4:8d:ed:57:52:8b:30:fd:41:0a:
c4:ca:4a:32:7d:1a:67:86:7d:43:84:82:38:fa:bf:c5:ea:95:
a3:63:74:a3:4c:e3:2e:09:10:56:ad:8d:94:96:a6:c1:31:3e:
d1:15:d1:54:2f:ad:7d:05:70:1c:fd:b3:9a:ec:8b:b3:ef:95:
44:68:ab:80:ff:1f:98:8d:fc:ec:31:0e:9a:f0:ba:f5:ab:81:
f3:97:57:5d:1a:61:6c:ac:da:0b:31:ab:2d:75:19:6a:a2:33:
8f:18:dc:06:ee:71:39:77:d3:b4:08:11:c0:d0:b3:e6:4d:e0:
93:e4:3c:a6:a1:4c:c4:87:4f:26:28:1f:f5:3a:9d:67:15:f4:
71:db:24:92:95:86:10:a2:cb:c4:c6:f8:9c:99:9e:af:2e:e7:
5b:ca:ed:8d:0d:92:12:ea:79:55:fd:a3:30:5d:25:f8:1f:78:
72:74:9a:37:20:c0:3b:04:ed:cd:5f:0f:bc:8f:6f:15:c5:dc:
74:51:b7:76:40:0b:60:b8:8b:28:38:5f:1e:ce:98:c5:ae:ce:
89:0f:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:59 2024 by rpki-client on console-ams.rpki-client.org