Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/QqnfVSLXGtC_3kjG8syPjR2kDX4.roa
File: QqnfVSLXGtC_3kjG8syPjR2kDX4.roa (raw, json)
Hash identifier: ugOzP9bEhcXTs47DjlsWKPNz2YdHLElxEkqR7yB7P6A=
Subject key identifier: 42:A9:DF:55:22:D7:1A:D0:BF:DE:48:C6:F2:CC:8F:8D:1D:A4:0D:7E
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01871034C73A4621E44B1B94789A4A54A083
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/QqnfVSLXGtC_3kjG8syPjR2kDX4.roa
Signing time: Thu 23 Mar 2023 20:41:47 +0000
ROA not before: Thu 23 Mar 2023 20:41:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.145.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Mar 2023 19:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:34:c7:3a:46:21:e4:4b:1b:94:78:9a:4a:54:a0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Mar 23 20:41:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42a9df5522d71ad0bfde48c6f2cc8f8d1da40d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:69:b3:35:3d:56:0c:65:ad:4a:20:c1:30:
1e:a1:45:8d:54:39:6b:10:44:92:c6:14:00:d0:df:
32:d8:a7:17:fa:2a:a1:bb:0d:c0:44:8f:1e:a7:6a:
a0:27:1a:70:38:93:ae:69:9e:df:a0:f0:56:d6:11:
3a:b7:ff:70:ca:99:6c:1b:f6:95:76:07:ff:fd:1b:
0e:91:f9:19:a2:cb:56:02:7e:f2:d1:a0:9b:5c:48:
3f:45:a6:6d:f8:57:7e:f2:6f:4f:5b:84:b9:73:10:
6a:b9:7c:70:b8:4b:6d:3b:d8:2d:8f:f7:be:6d:3a:
68:a1:40:5e:30:be:81:f7:60:78:9d:df:a9:b2:dc:
e8:6d:79:7d:80:8c:27:4f:9a:db:6e:ee:35:b2:b9:
33:37:e2:a7:51:71:4f:6c:99:8a:ed:52:47:bc:e0:
b5:68:35:4b:3e:85:f1:17:c0:c1:82:f3:f7:ca:cb:
8e:87:26:66:c6:0c:1b:dc:c8:60:da:e2:f8:4c:a8:
6d:99:f8:34:ea:bf:c3:15:ca:ac:f1:6a:d0:55:9f:
98:49:3a:be:98:ba:46:80:51:79:1c:bd:d4:08:3f:
dd:58:5a:7a:cd:bc:d1:b5:6d:a4:41:22:f5:7b:e9:
2e:23:01:cc:5e:9b:89:ad:34:45:5f:a2:22:96:c0:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A9:DF:55:22:D7:1A:D0:BF:DE:48:C6:F2:CC:8F:8D:1D:A4:0D:7E
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/QqnfVSLXGtC_3kjG8syPjR2kDX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:cb:4c:c6:9d:0a:a3:e5:07:53:77:6c:2f:15:12:7b:1f:43:
21:78:e8:95:ab:a5:8d:7c:5b:31:ac:78:95:db:21:29:26:8e:
66:1a:e3:41:b1:28:00:00:f7:af:d0:56:b5:0d:a7:33:99:a7:
64:91:cf:68:a7:23:de:9b:b6:c4:96:40:59:b7:b8:83:fc:25:
7c:ff:9e:c9:b4:3c:07:f5:7a:3e:73:45:13:be:d4:fa:a4:6c:
f9:51:7f:6d:d0:27:6b:95:64:b5:6e:6d:4a:5e:e8:f6:f4:f6:
82:33:37:ef:bf:b6:e8:47:a8:b4:47:f1:10:8a:90:4d:39:81:
db:eb:81:ac:ad:a2:32:51:0f:cd:a1:13:1d:f2:83:e8:0f:bc:
34:da:e9:e2:f7:9d:9a:3d:21:01:2a:8a:89:90:b0:c9:31:c7:
93:15:0c:a3:b0:63:d1:c0:de:80:e0:5b:d4:79:c7:b3:32:c7:
28:82:48:5d:d6:c0:47:7a:dc:3b:fe:f0:f3:61:64:79:cb:02:
53:67:a4:ec:6a:04:15:45:1e:8e:7b:66:f3:72:bb:03:e4:8d:
69:01:4f:a0:b5:1b:f6:1e:d5:77:0a:55:d7:75:a3:80:7a:b5:
7c:69:2a:83:76:91:38:6f:a8:b3:f5:1f:d6:5f:b3:68:bd:cb:
39:76:e9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org