Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qo8Kml272UrwtHFO0RhXmNEpYxg.roa
File: qo8Kml272UrwtHFO0RhXmNEpYxg.roa (raw, json)
Hash identifier: Ro86FggPVAd10iFXph9E0ev8zhDxZArQh+GUb2GqqSk=
Subject key identifier: AA:8F:0A:9A:5D:BB:D9:4A:F0:B4:71:4E:D1:18:57:98:D1:29:63:18
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018EFF66C53B814472C60B9A497374669B97
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qo8Kml272UrwtHFO0RhXmNEpYxg.roa
Signing time: Sun 21 Apr 2024 06:45:08 +0000
ROA not before: Sun 21 Apr 2024 06:45:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 128.0.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 10:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ff:66:c5:3b:81:44:72:c6:0b:9a:49:73:74:66:9b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 21 06:45:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa8f0a9a5dbbd94af0b4714ed1185798d1296318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:59:a2:10:f9:0c:94:50:42:71:19:c5:ce:
b9:25:0b:fb:5c:54:2a:a6:53:b2:a0:54:4a:4b:d2:
de:07:21:94:9a:17:99:90:10:76:e3:2a:60:d9:a1:
dc:3b:10:cc:9d:c4:3b:15:33:c9:a0:5f:dc:62:d2:
f7:cc:d9:84:c9:59:64:c1:bf:2f:e0:4b:ea:50:98:
99:f8:d3:8a:de:8f:af:1e:a0:bf:af:6e:23:38:22:
8c:91:2e:24:94:6d:2d:fe:3f:3b:02:05:d5:28:68:
99:d6:43:7b:46:23:25:7b:0b:a3:da:a2:79:e5:41:
47:17:fc:65:c6:a1:9a:fb:01:5d:b2:f4:1f:c4:21:
72:9b:a3:26:31:b5:86:d5:ec:99:f9:58:8c:d3:08:
8e:8a:c5:b9:5c:99:51:11:7e:8e:8b:89:1d:fb:ff:
9d:be:e9:1c:b0:eb:f8:1f:4d:ad:99:53:fa:11:b0:
75:77:58:5e:e8:8b:f0:7b:3d:e4:28:6c:5e:40:2f:
1a:87:39:98:b1:af:97:e4:d9:9b:d4:65:a8:94:39:
0a:76:85:85:5f:ce:88:c1:63:19:4c:00:b2:0b:52:
7d:cb:2d:10:3c:90:84:20:3f:e2:cf:1f:12:d4:11:
84:cf:da:7a:29:62:55:c3:8a:fe:8d:1b:16:38:b9:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8F:0A:9A:5D:BB:D9:4A:F0:B4:71:4E:D1:18:57:98:D1:29:63:18
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qo8Kml272UrwtHFO0RhXmNEpYxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4b:ed:3b:c6:ae:00:85:96:9c:a2:b9:1c:a7:0d:c2:a4:df:
ca:e9:45:4a:ec:72:7f:17:22:f1:4b:9b:a0:05:92:b3:49:da:
12:b5:54:53:c1:4c:48:cc:02:ef:0f:7c:21:57:22:91:04:6d:
99:cd:5e:26:51:e1:b5:3c:05:6a:79:44:18:79:78:d2:9a:01:
34:12:6d:37:de:9d:d5:58:2c:87:35:68:98:e5:c8:b4:f9:42:
4e:16:fd:4f:d1:cb:b8:66:65:6c:9c:53:0a:60:d0:fb:a0:46:
06:4f:61:4d:de:c7:cb:73:d0:88:f4:48:f5:da:96:50:7a:3f:
10:b5:8d:04:de:24:3b:23:81:a2:4f:8c:f2:7b:9e:64:aa:d3:
52:33:7b:f1:c9:ad:58:53:66:88:ce:a7:f7:48:67:b0:87:a6:
3e:a1:d7:29:5c:0f:ca:a7:bc:75:d6:40:e4:4c:c6:8d:13:6c:
15:e6:12:b9:da:97:4d:22:3e:a5:a8:dc:06:f9:78:58:68:15:
e9:ee:82:ec:31:9c:15:8e:b1:59:eb:8f:31:15:b6:5a:b6:21:
36:2d:5d:0a:9d:0c:c1:e5:99:46:4f:8c:3d:4e:07:c9:91:71:
44:f4:b8:05:d5:99:f2:91:2d:0f:15:87:63:80:df:86:fa:e1:
74:dd:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 13:11:04 2024 by rpki-client on console-fra.rpki-client.org