Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qgRSHLhWw0OzNdvzCBjuDUg2RfA.roa
File: qgRSHLhWw0OzNdvzCBjuDUg2RfA.roa (raw, json)
Hash identifier: uNMbSflk5kHxzq4DjDXVbyxGoHk5NTlVkgWXuE12Rno=
Subject key identifier: AA:04:52:1C:B8:56:C3:43:B3:35:DB:F3:08:18:EE:0D:48:36:45:F0
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0190ABA1521B61FA62740FE43CC340D6B6A3
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qgRSHLhWw0OzNdvzCBjuDUg2RfA.roa
Signing time: Sat 13 Jul 2024 10:26:34 +0000
ROA not before: Sat 13 Jul 2024 10:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 109.94.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 14:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ab:a1:52:1b:61:fa:62:74:0f:e4:3c:c3:40:d6:b6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 13 10:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa04521cb856c343b335dbf30818ee0d483645f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:78:95:3f:17:bc:0e:c2:e6:47:22:03:3a:
8c:4a:b3:1d:64:c3:bf:b6:07:b6:5f:30:77:db:d8:
7c:44:45:6f:0a:a9:4c:d2:63:a7:c3:37:9d:f8:67:
26:fa:a2:98:3b:2f:77:e7:dd:92:3a:28:1c:3e:72:
9d:a4:cb:03:5b:58:63:0b:f2:19:f7:ad:07:36:f1:
46:11:59:88:a7:c5:a3:d2:15:f6:a0:93:f2:d2:e0:
7d:5f:21:7a:49:47:c3:49:26:8c:38:bf:2f:1a:ab:
ce:c7:e0:fe:c6:78:6d:7f:ec:55:b4:dc:1a:f9:37:
90:c7:d5:54:bd:10:c3:c0:3a:7f:98:45:28:46:b2:
66:85:4f:9c:bd:68:73:aa:75:55:19:05:bb:24:28:
e7:27:5d:5d:12:2d:42:c7:43:b5:2a:d8:65:55:20:
28:29:fd:da:c9:44:5d:d7:79:1e:82:3c:a4:e9:ff:
c3:ac:b3:b0:33:34:1c:d4:3f:cd:41:95:b6:1e:ce:
36:3d:80:d7:b9:6e:8e:26:5e:55:5b:2b:94:31:4c:
79:cd:f8:fa:6c:d3:be:82:58:d6:1d:26:e5:6a:c3:
bb:fa:2a:73:c2:92:27:0f:12:39:e0:a8:1a:e8:3c:
87:8c:b4:82:82:9b:6c:0b:2d:27:86:8c:79:e4:0d:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:04:52:1C:B8:56:C3:43:B3:35:DB:F3:08:18:EE:0D:48:36:45:F0
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qgRSHLhWw0OzNdvzCBjuDUg2RfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.165.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d8:bc:5b:ab:0d:d2:fc:2f:32:df:72:98:dd:9c:0d:de:e6:
1b:9d:25:5a:2d:60:d8:ff:98:c7:3d:97:ed:e0:25:a6:6d:ff:
d7:28:35:a2:67:fb:90:62:f2:78:b6:81:11:2c:c9:ea:0d:65:
fa:8d:b2:d2:c1:16:30:21:00:5b:cc:fc:75:dc:9c:ea:ca:88:
d1:e2:6b:e4:32:18:e1:46:6e:27:96:d3:40:80:e7:e7:bd:58:
70:09:e4:37:68:31:95:8e:ac:2a:df:bf:d6:91:c3:e2:c0:ef:
73:0a:7c:50:6d:20:1b:0c:7c:88:0d:f9:54:ca:55:65:71:d0:
07:d3:15:76:27:8f:93:10:3c:aa:65:37:17:f2:55:c9:29:f8:
6e:c6:46:a2:2f:b5:5d:5d:54:90:52:2a:cc:a9:73:73:60:aa:
50:bb:2d:82:e0:5c:0b:05:62:99:31:43:ca:73:5e:fd:fb:54:
e9:1d:a3:44:57:f9:c4:fb:b8:6f:cb:d4:62:43:35:8f:f3:33:
3d:0f:22:cb:26:98:99:86:b0:a9:4c:a8:2b:47:d1:ba:76:07:
d1:16:8a:d6:f6:92:d8:91:d3:49:99:3c:88:80:a2:d4:e7:06:
8c:50:1a:7d:d9:13:7f:a6:80:42:a6:39:2c:dc:7e:97:08:5e:
82:37:00:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCroVIbYfpidA/kPMNA1rajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQwNzEzMTAyNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTA0NTIxY2I4NTZjMzQzYjMzNWRiZjMwODE4ZWUwZDQ4MzY0NWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn514lT8XvA7C5kciAzqMSrMdZMO/
tge2XzB329h8REVvCqlM0mOnwzed+Gcm+qKYOy93592SOigcPnKdpMsDW1hjC/IZ
960HNvFGEVmIp8Wj0hX2oJPy0uB9XyF6SUfDSSaMOL8vGqvOx+D+xnhtf+xVtNwa
+TeQx9VUvRDDwDp/mEUoRrJmhU+cvWhzqnVVGQW7JCjnJ11dEi1Cx0O1KthlVSAo
Kf3ayURd13kegjyk6f/DrLOwMzQc1D/NQZW2Hs42PYDXuW6OJl5VWyuUMUx5zfj6
bNO+gljWHSblasO7+ipzwpInDxI54Kga6DyHjLSCgptsCy0nhox55A17oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKoEUhy4VsNDszXb8wgY7g1INkXwMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvcWdSU0hMaFd3ME96TmR2ekNCanVEVWcyUmZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbV6lMA0G
CSqGSIb3DQEBCwUAA4IBAQCF2Lxbqw3S/C8y33KY3ZwN3uYbnSVaLWDY/5jHPZft
4CWmbf/XKDWiZ/uQYvJ4toERLMnqDWX6jbLSwRYwIQBbzPx13JzqyojR4mvkMhjh
Rm4nltNAgOfnvVhwCeQ3aDGVjqwq37/WkcPiwO9zCnxQbSAbDHyIDflUylVlcdAH
0xV2J4+TEDyqZTcX8lXJKfhuxkaiL7VdXVSQUirMqXNzYKpQuy2C4FwLBWKZMUPK
c179+1TpHaNEV/nE+7hvy9RiQzWP8zM9DyLLJpiZhrCpTKgrR9G6dgfRForW9pLY
kdNJmTyIgKLU5waMUBp92RN/poBCpjks3H6XCF6CNwCb
-----END CERTIFICATE-----
Generated at Wed Jul 31 16:48:19 2024 by rpki-client on console-fra.rpki-client.org