Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qNEZ5HQ9_fyuxzNQW5Clgd_iR2k.roa
File: qNEZ5HQ9_fyuxzNQW5Clgd_iR2k.roa (raw, json)
Hash identifier: UCP0sZwtNl1ulvRmXmrENZiLkDC5061OqG46CkKpWc0=
Subject key identifier: A8:D1:19:E4:74:3D:FD:FC:AE:C7:33:50:5B:90:A5:81:DF:E2:47:69
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0191A25B5F3C3E4CE6A370833305F9B7FBD7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qNEZ5HQ9_fyuxzNQW5Clgd_iR2k.roa
Signing time: Fri 30 Aug 2024 08:16:22 +0000
ROA not before: Fri 30 Aug 2024 08:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198510
IP address blocks: 2.57.242.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
45.144.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 13:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:5b:5f:3c:3e:4c:e6:a3:70:83:33:05:f9:b7:fb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 30 08:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8d119e4743dfdfcaec733505b90a581dfe24769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:34:a8:50:0d:b5:d2:27:3e:b8:04:d3:a7:
45:27:1d:f7:3c:01:cc:16:4b:92:c0:6f:cd:e3:34:
a2:8c:04:78:7e:24:b2:ca:db:64:33:ff:32:f7:9e:
8f:0b:ad:b3:61:dd:81:70:b1:61:18:b9:51:17:fb:
0e:ba:a8:c6:55:34:b0:2a:cf:da:92:0b:8e:aa:b4:
64:e7:5a:44:13:3d:1e:87:2f:5d:67:e3:53:4f:90:
63:1d:5b:0d:c1:94:be:51:f2:c4:a1:c1:6b:78:58:
f5:4f:9f:cc:a9:f9:d5:9f:17:21:9d:22:33:29:10:
21:ab:99:f7:b4:3f:4b:d4:4d:66:b7:30:02:99:63:
c5:d5:b1:59:0a:4e:17:91:15:29:43:d0:eb:95:b6:
5f:e6:f0:35:32:cf:c5:f0:0e:1a:d4:d4:44:17:85:
f6:d1:11:6f:77:1a:de:35:02:c3:f7:89:9f:1e:24:
2d:dd:24:56:80:45:ad:ed:56:4f:1b:52:a9:b8:36:
0e:82:3b:1e:cb:bd:fa:3a:1e:dd:54:4d:b6:9d:f0:
c9:af:4d:07:1f:ed:16:3b:ba:b0:12:c2:08:a0:0a:
be:d9:44:42:5b:6b:fd:ed:7d:a4:59:8d:55:3d:59:
07:05:cd:fd:88:07:d0:96:6a:75:8b:af:17:57:62:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:19:E4:74:3D:FD:FC:AE:C7:33:50:5B:90:A5:81:DF:E2:47:69
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qNEZ5HQ9_fyuxzNQW5Clgd_iR2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
45.144.174.0/23
Signature Algorithm: sha256WithRSAEncryption
18:33:d3:4b:b1:a3:8a:0c:ec:2f:c6:5c:c8:2a:2e:3b:2f:8b:
08:3e:ad:75:59:77:2b:33:b5:ce:88:17:1f:91:b6:1e:4a:75:
ca:96:3c:1d:65:7c:d2:0c:57:d8:1e:50:9f:57:81:72:a3:01:
fa:f7:c8:95:34:ea:a8:9f:e3:bd:77:b5:c8:01:9b:88:34:3f:
91:6a:0a:c1:74:1d:ad:d3:e5:27:28:23:49:cb:de:5a:68:9f:
b8:6b:ac:c8:18:7b:51:47:02:85:61:b9:d3:95:fa:b9:a5:22:
0e:9d:05:f7:dd:15:32:e6:b8:e5:26:59:1d:b1:b9:c3:b5:43:
3b:16:7f:d9:e8:7d:3f:1c:40:e0:52:2f:51:ac:64:04:bd:9c:
d7:d2:7f:c6:38:f3:aa:19:a3:96:82:ea:e7:fe:59:2f:9b:de:
31:82:33:05:2b:24:f0:5f:34:ba:2a:8d:b8:7f:ea:b6:d7:4f:
25:63:2c:e0:0f:0f:7f:e5:35:ed:0b:72:55:4b:3f:84:ff:d2:
2f:9e:a0:69:07:b3:3a:50:52:bb:95:48:4f:13:9d:da:7a:39:
21:a3:de:59:a1:96:0d:7d:a9:c5:90:95:14:6e:33:14:77:e2:
ff:d9:33:39:5d:4c:df:cc:b6:eb:ef:44:1d:6c:36:46:be:14:
7f:b4:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 15:47:28 2024 by rpki-client on console-ams.rpki-client.org