Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qPQQ9YAI1k5F82iqcucY2dDQFlk.roa
File: qPQQ9YAI1k5F82iqcucY2dDQFlk.roa (raw, json)
Hash identifier: FGFj6HovhTH95K6XVz3VkwhBrNf9OWQASGK71k2kFjg=
Subject key identifier: A8:F4:10:F5:80:08:D6:4E:45:F3:68:AA:72:E7:18:D9:D0:D0:16:59
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190BEE62E815C720D3429E241B840142FD5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qPQQ9YAI1k5F82iqcucY2dDQFlk.roa
Signing time: Wed 17 Jul 2024 04:14:34 +0000
ROA not before: Wed 17 Jul 2024 04:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211557
IP address blocks: 188.240.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 15:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:be:e6:2e:81:5c:72:0d:34:29:e2:41:b8:40:14:2f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 17 04:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8f410f58008d64e45f368aa72e718d9d0d01659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:69:b9:3b:f6:0c:07:5b:e2:82:ca:e4:f3:9a:
24:3f:95:af:27:e1:7e:84:3c:db:19:a8:82:b2:ae:
ba:75:2b:25:17:d9:bf:7c:d6:92:48:fa:ae:7b:41:
85:ef:97:66:fc:4b:61:46:32:68:be:18:6b:ef:57:
d5:2e:2a:6f:fe:ea:42:17:5c:07:7c:8b:9b:67:27:
7f:ef:bf:d2:b5:74:90:15:7c:40:a0:bb:b7:61:8f:
37:80:ce:95:05:32:7b:0d:fb:1e:46:11:3a:8c:14:
ef:7b:80:34:fd:ca:95:18:6b:21:4f:e7:c1:42:85:
dd:2d:0e:b2:e2:1d:44:31:db:3c:c4:62:5c:f0:d6:
29:9e:7d:bc:f5:e4:38:c5:86:15:d2:86:5b:3d:a0:
37:55:7c:75:65:6a:af:5c:d4:a1:06:50:1d:08:7c:
51:04:34:f4:7d:b4:d0:7b:a2:4d:c1:d2:1a:0a:55:
87:d5:97:5c:f9:13:ab:fc:1f:5d:fb:33:e9:07:1d:
5b:29:66:79:86:78:a1:f6:0e:ba:55:34:4e:ca:88:
54:5b:f8:a8:3b:a5:23:84:bb:5d:82:d4:7e:99:da:
eb:97:d1:96:6e:c9:61:ad:11:45:d9:46:18:dd:94:
37:d9:96:fb:e3:e9:83:7f:8e:50:ea:1f:09:46:da:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:10:F5:80:08:D6:4E:45:F3:68:AA:72:E7:18:D9:D0:D0:16:59
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qPQQ9YAI1k5F82iqcucY2dDQFlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.81.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:02:a3:f8:64:9b:2a:50:e5:a7:78:fc:34:e0:66:97:07:fc:
8c:5c:e9:e7:1f:7b:d5:dd:33:39:5f:6b:fd:a7:41:ec:0a:28:
0d:ba:f1:78:b6:a2:65:2f:d5:02:e2:55:1f:c6:63:6d:dd:59:
00:63:da:7d:e4:06:9f:60:ba:fd:b3:70:a3:f6:69:e6:49:b4:
57:e5:43:ad:a0:35:6d:c5:4d:69:91:47:35:82:50:dd:2c:dd:
27:dc:70:ff:cd:a2:68:53:51:60:8a:05:33:a7:ef:22:fb:70:
ad:1f:c5:c2:35:0f:5a:ac:b5:75:61:aa:ff:64:7b:5c:33:2a:
a0:e8:49:97:09:da:73:da:03:f9:91:ae:ff:f1:84:25:8c:a5:
f0:01:08:4d:ba:86:1b:54:92:b2:a9:97:5d:89:c5:fb:1a:2c:
c0:34:ff:9a:6f:5f:67:bd:d4:2a:ba:dd:9b:d0:5e:47:65:97:
1b:cf:43:46:37:a3:86:fb:a3:33:88:57:21:f1:72:cf:d7:b5:
3d:94:68:d0:cd:63:18:d8:78:bc:14:06:73:80:86:26:cf:7c:
ee:77:60:ea:f2:e4:c6:24:88:44:19:d3:f4:42:52:ea:5d:58:
62:9f:27:92:ab:0c:d9:f1:dc:c3:22:9b:d6:dd:3b:8f:01:de:
27:37:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 17:19:07 2024 by rpki-client on console-fra.rpki-client.org