Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qDev-dFIehRwvxe8jZ5DDZ3ONNo.roa
File: qDev-dFIehRwvxe8jZ5DDZ3ONNo.roa (raw, json)
Hash identifier: yMC/gnpGGZFlSHkBAbZ+nxIVaayMDSG1pgv0oBzkaEg=
Subject key identifier: A8:37:AF:F9:D1:48:7A:14:70:BF:17:BC:8D:9E:43:0D:9D:CE:34:DA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187518182DBC7E2BB881D9363479DD0F549
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qDev-dFIehRwvxe8jZ5DDZ3ONNo.roa
Signing time: Wed 05 Apr 2023 13:00:54 +0000
ROA not before: Wed 05 Apr 2023 13:00:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 2.57.241.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 09:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:81:82:db:c7:e2:bb:88:1d:93:63:47:9d:d0:f5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 5 13:00:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a837aff9d1487a1470bf17bc8d9e430d9dce34da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:9b:33:b8:be:f5:f6:96:51:88:f9:6c:ce:
6b:e9:71:b1:12:72:ef:ed:b8:24:f3:c5:6d:b1:5c:
bd:cf:04:65:a3:6a:7a:5e:45:ab:b8:5e:9e:1a:0c:
a8:ba:8d:c9:af:47:9b:f3:99:12:a7:5e:ba:6f:b9:
1d:82:63:a2:0c:a7:3c:fd:51:63:e1:ad:45:ef:6e:
49:aa:be:8c:7e:db:43:a4:2d:a0:c9:f5:32:ba:06:
73:97:99:03:a2:44:c5:79:ac:f8:9b:6b:1a:da:83:
d2:6d:f6:e8:8a:3d:15:d3:c7:e5:02:1a:df:d2:2d:
76:4f:ae:cf:27:cf:21:85:5a:1e:56:a7:c7:f7:c5:
02:9d:f9:41:79:7e:db:ef:c2:d6:22:4e:56:a7:30:
f4:34:ca:35:fc:71:09:c2:5c:d4:6f:75:ae:bf:33:
71:e9:b9:8b:a1:9f:ee:8e:86:8c:48:f6:81:13:c7:
ce:9a:8b:36:9f:d5:9b:6f:0f:78:a1:5f:39:ec:d2:
a1:73:f3:77:38:69:67:50:96:3c:b6:9f:4d:15:6d:
47:d6:0d:03:20:83:4a:44:dd:03:de:a5:8a:2d:37:
1c:2d:35:0a:b5:a6:cf:05:64:2d:51:7d:74:e8:b0:
74:a0:60:94:16:50:26:f8:0f:c3:4f:f1:05:9e:7e:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:37:AF:F9:D1:48:7A:14:70:BF:17:BC:8D:9E:43:0D:9D:CE:34:DA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qDev-dFIehRwvxe8jZ5DDZ3ONNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
92.114.54.0/24
93.90.74.0/24
128.0.41.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:86:36:44:18:40:f1:39:ca:1e:eb:92:a5:92:19:7f:ae:cc:
88:c1:d3:a2:94:e4:ee:52:0c:51:de:43:b5:c2:09:26:fa:21:
73:54:6f:ed:6d:7b:bd:1b:67:1c:f5:78:4a:3c:35:6f:8b:0e:
27:4a:c5:a9:85:33:63:06:9a:a7:55:9c:10:0e:53:89:8a:1c:
5f:b1:6d:70:8f:cb:8c:f1:87:9f:25:52:2f:df:e8:55:c0:98:
a1:45:ff:7e:96:9a:53:7f:e6:40:2d:d7:fe:5a:01:e2:6c:cb:
9d:f5:f2:f7:67:d5:5e:6d:53:0c:2a:be:19:50:ba:93:f4:99:
ff:40:55:4f:c9:c2:c9:31:ab:b2:d1:70:80:00:ab:56:d8:94:
65:87:e0:76:ce:60:f4:c6:c4:c4:59:3d:96:88:0e:3e:8d:c2:
51:54:aa:05:d0:3f:01:54:23:56:b7:91:61:3b:be:26:2f:e2:
0d:54:53:25:56:74:61:7f:c9:b3:91:0c:e5:8b:ce:20:82:bd:
11:f4:d0:ef:ce:c2:a5:d7:f3:32:48:d7:20:d1:d7:9f:20:f6:
a9:41:e6:78:27:ca:dc:c7:09:81:06:53:a7:20:c6:73:f0:af:
84:95:3f:82:21:fe:5d:55:6d:84:47:0e:f4:a8:c8:a1:38:90:
df:22:d6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org