Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/QU-1kBpm1SJolnmQ3klWUIMIJmQ.roa
File: QU-1kBpm1SJolnmQ3klWUIMIJmQ.roa (raw, json)
Hash identifier: sPRsLkZtShqTAk/evbJ0e+kveSf2rgSwoqxvAlGnCjM=
Subject key identifier: 41:4F:B5:90:1A:66:D5:22:68:96:79:90:DE:49:56:50:83:08:26:64
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018A1C38477D527590399BC55E3C3D316B82
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/QU-1kBpm1SJolnmQ3klWUIMIJmQ.roa
Signing time: Tue 22 Aug 2023 07:49:24 +0000
ROA not before: Tue 22 Aug 2023 07:49:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43352
IP address blocks: 91.93.139.0/24 maxlen: 24
91.93.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:38:47:7d:52:75:90:39:9b:c5:5e:3c:3d:31:6b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Aug 22 07:49:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=414fb5901a66d52268967990de49565083082664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c0:ab:0a:17:55:26:cf:3a:be:08:d0:2c:ee:
39:56:7c:67:8d:4d:fb:5d:a5:bf:07:36:b7:02:77:
8f:37:0d:5f:ce:4f:2f:58:f6:15:9c:0d:91:66:3c:
73:ec:e5:b9:04:f5:25:7d:4f:7b:17:2f:db:5d:67:
5d:37:50:cb:99:48:5c:2f:30:ab:cf:97:ec:f3:82:
05:06:20:05:4f:73:81:e2:c7:d4:9e:02:a2:c8:74:
cc:e1:63:30:d7:2b:87:43:9f:d9:eb:fe:26:f9:57:
9c:ac:0c:1c:35:1c:25:f9:94:5f:33:23:ec:68:12:
f7:c1:2e:6d:fc:38:a2:a3:d8:41:49:47:ec:5c:65:
69:05:d9:83:f3:63:9f:bb:41:9e:db:e9:11:bc:bc:
1c:01:24:be:c5:1b:ca:eb:73:a8:b1:5f:e6:db:b2:
60:9d:87:84:13:ab:4c:9b:18:bc:98:45:4e:85:03:
48:12:c3:0a:6f:22:71:29:f4:7d:92:e1:db:1e:03:
76:61:20:ed:f0:81:f8:3a:7a:40:72:12:ed:4e:f6:
59:8a:e6:40:e1:cb:5d:21:59:ab:d0:f5:de:9e:91:
27:21:e4:f6:6a:f7:98:e8:81:d2:d9:61:18:2f:eb:
ec:0c:55:b3:36:b5:4c:be:96:ba:7f:cb:23:5c:ce:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4F:B5:90:1A:66:D5:22:68:96:79:90:DE:49:56:50:83:08:26:64
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/QU-1kBpm1SJolnmQ3klWUIMIJmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.93.139.0/24
91.93.155.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c4:6f:bf:82:e6:11:4a:21:b1:ca:11:a8:31:c0:a5:39:3d:
28:6c:f1:07:40:71:5b:2e:a7:60:77:88:3d:71:a6:3c:3c:7b:
db:d4:40:ee:bc:e3:ae:61:85:1b:99:d6:11:f5:6c:76:70:28:
15:83:c4:e7:64:cf:25:b5:dc:ac:c2:6d:7c:c2:65:e1:52:ba:
25:f6:72:92:b5:33:bc:f3:c7:6d:8a:db:0e:35:60:c6:0b:5d:
f0:68:e0:fd:08:dd:31:96:f0:08:74:4f:53:21:43:bc:36:57:
35:40:9d:36:26:1f:38:c7:c8:7e:a6:a0:83:69:0c:f1:f7:14:
32:90:a3:a1:fb:50:b8:aa:ff:cd:03:11:fa:b9:ac:d2:97:09:
6b:c8:fd:66:45:c6:8f:db:0d:a0:89:85:bd:47:8e:b2:62:93:
62:44:9c:41:c5:e5:ee:fb:6f:d5:d8:b1:f9:53:9c:8a:99:2a:
2a:56:07:b8:0a:49:8a:39:c7:25:4d:11:f5:07:67:09:cc:e2:
e6:91:6d:f0:b9:bd:77:f5:67:3e:fd:c8:df:cb:d3:78:22:6d:
a0:9e:b7:e5:a3:9a:20:b3:1f:b5:2e:59:18:bc:7d:fc:c5:65:
0b:f9:98:a2:e6:e1:13:97:ff:c4:4a:98:31:77:6b:be:24:0a:
ba:d2:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org