Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/QcX4AlFXMSbOLyaMa5DNIEe5c58.roa
File: QcX4AlFXMSbOLyaMa5DNIEe5c58.roa (raw, json)
Hash identifier: ihAmQLpoRi/EoXFvxl06ljCWNHPxZccyZVqxjPav7lk=
Subject key identifier: 41:C5:F8:02:51:57:31:26:CE:2F:26:8C:6B:90:CD:20:47:B9:73:9F
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018AFE799F465FE2E20A06E7627F57CC4501
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/QcX4AlFXMSbOLyaMa5DNIEe5c58.roa
Signing time: Thu 05 Oct 2023 06:14:57 +0000
ROA not before: Thu 05 Oct 2023 06:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55933
IP address blocks: 45.150.198.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:79:9f:46:5f:e2:e2:0a:06:e7:62:7f:57:cc:45:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Oct 5 06:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41c5f80251573126ce2f268c6b90cd2047b9739f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:8b:e5:e3:94:ac:50:f8:50:f8:80:72:be:
78:de:8f:79:05:20:6a:13:c1:86:92:8a:26:9d:11:
ca:cd:ae:a6:e1:22:72:6d:c8:39:a5:18:65:1c:f7:
ec:ef:49:15:17:80:ec:ab:8e:7e:06:b5:8c:2e:f6:
98:7b:07:0a:45:2e:6d:1c:20:04:bd:c7:89:00:70:
53:04:fb:ea:3d:f4:bb:a8:b4:26:6c:58:95:68:b5:
fd:e2:95:a3:8e:3a:e0:79:f8:c6:0b:7b:33:dc:0c:
6d:e0:ea:8e:ed:2a:d5:f0:1c:8c:a8:1b:55:8c:6a:
b7:d1:42:5f:39:6b:da:5b:41:ae:cb:87:0d:63:03:
69:1a:79:05:66:39:a8:88:53:1b:2d:15:dd:89:22:
73:14:70:cc:a2:9f:1b:75:c2:85:1c:ae:76:6a:51:
f5:03:22:97:bc:64:28:31:72:5d:e1:2e:a6:37:9b:
19:16:ef:e8:bb:70:5b:c2:ac:ac:83:3f:f5:a0:1d:
63:bf:86:b2:30:e9:f5:bf:3b:b7:c6:46:07:92:55:
52:02:31:d7:af:6b:ea:a1:e6:ea:75:88:16:f6:34:
60:4d:3b:a6:ae:3c:a5:ae:3e:c5:09:fa:5d:d0:09:
99:d0:7b:25:f9:0f:10:78:19:15:fb:66:9a:bf:95:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C5:F8:02:51:57:31:26:CE:2F:26:8C:6B:90:CD:20:47:B9:73:9F
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/QcX4AlFXMSbOLyaMa5DNIEe5c58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.198.0/23
Signature Algorithm: sha256WithRSAEncryption
21:b3:97:2f:4a:fc:a8:96:0b:d1:b0:74:d7:a6:a3:1b:52:c7:
e5:4b:82:9d:ea:4d:06:e4:07:5c:7d:6c:50:93:e3:f7:a2:4e:
de:e5:e3:d9:b0:84:e1:24:6a:5f:cb:fe:67:cd:75:f5:ec:2b:
c4:8b:27:22:93:f0:a7:d1:84:e1:5c:66:9d:b9:73:0b:d4:61:
4b:e7:f1:1f:a6:72:ea:c4:af:36:49:45:18:dd:da:1e:43:5f:
ed:a3:f0:7e:4c:b3:f0:e2:14:01:c5:44:41:d1:86:dc:75:dd:
d7:9d:96:71:ba:44:5e:1a:dd:75:ab:92:f6:e2:5b:ec:76:d4:
73:c8:18:50:fa:77:f6:27:4f:db:6c:5d:af:9f:0b:b0:03:d3:
4f:dc:ae:31:f8:c0:49:16:a8:a9:65:e3:dd:04:33:a7:46:54:
ff:02:a6:fe:2e:ff:5c:02:28:10:23:6d:78:01:75:db:1c:86:
5f:60:81:98:ce:dc:cd:bf:12:1f:7a:4a:30:e5:9f:01:4a:45:
a4:52:36:c6:fd:84:60:39:56:0d:24:ce:eb:98:38:b1:07:02:
ff:ff:11:ee:61:83:fa:72:3b:83:40:75:72:e0:b0:7d:8c:1b:
33:f4:e6:cd:0c:4c:95:63:90:c2:0d:e9:0f:ee:3e:2b:43:d7:
37:49:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:04 2024 by rpki-client on console-fra.rpki-client.org