Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/Q04ZjN00-EDQal3sBoGhBWnbc1E.roa
File: Q04ZjN00-EDQal3sBoGhBWnbc1E.roa (raw, json)
Hash identifier: ucNVZ/VomjcJUCdUUnC1PRxOKHaWQm/u9OkQOi/hCd4=
Subject key identifier: 43:4E:19:8C:DD:34:F8:40:D0:6A:5D:EC:06:81:A1:05:69:DB:73:51
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 018570FBD5BB22A7D43939DCE1B1CEC95980
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/Q04ZjN00-EDQal3sBoGhBWnbc1E.roa
Signing time: Mon 02 Jan 2023 05:37:10 +0000
ROA not before: Mon 02 Jan 2023 05:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31715
IP address blocks: 155.193.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:d5:bb:22:a7:d4:39:39:dc:e1:b1:ce:c9:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jan 2 05:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=434e198cdd34f840d06a5dec0681a10569db7351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:75:c5:5e:c3:09:f0:0f:b9:86:8b:8e:10:
31:a6:06:0d:d4:58:da:1c:3c:db:5b:28:20:9f:16:
60:e1:2f:37:b3:26:6c:b0:7d:0d:5b:cf:f0:91:b6:
74:13:87:fa:60:e4:5f:b9:c0:22:37:83:98:bd:d4:
ee:04:2d:1a:d0:71:12:96:41:56:0d:02:39:6a:6e:
cb:36:5e:7c:67:4b:53:e8:f4:72:12:8e:8e:0b:9c:
1b:a3:0a:95:c3:2f:32:c7:d1:9e:cc:ef:fb:dd:ad:
04:c4:af:6a:29:cc:33:fd:83:ff:4a:50:87:79:00:
cc:6c:84:62:c2:53:2a:62:2f:01:58:fa:40:5c:50:
73:28:aa:5e:61:9f:f3:90:92:fb:7a:72:5f:51:86:
22:22:68:25:6c:32:9f:d2:aa:40:e6:d9:07:b1:ae:
40:f6:71:6f:0d:2c:cf:a9:b7:6a:78:7b:e3:f3:86:
6e:18:39:2a:f9:05:3e:54:21:4b:2f:f4:ad:49:fa:
63:20:34:f6:7c:19:09:47:be:a1:f9:04:19:28:cd:
c5:bc:ff:fb:0e:2e:0b:c7:db:2d:ed:bf:e7:95:d0:
3d:d6:34:b2:d4:54:ec:b6:6d:38:a0:7a:b8:7f:4e:
d2:69:dd:fa:ff:a4:d5:60:45:a4:5e:ce:a3:f5:fc:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4E:19:8C:DD:34:F8:40:D0:6A:5D:EC:06:81:A1:05:69:DB:73:51
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/Q04ZjN00-EDQal3sBoGhBWnbc1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ad:80:0f:bf:87:77:25:90:e0:94:87:ef:f4:71:3e:3b:50:
46:f9:51:5b:6d:e1:33:35:d2:89:1f:49:12:7d:bc:8f:0e:ee:
91:43:42:d4:5e:f0:a5:bf:cd:23:a4:e3:6d:08:31:02:9b:ed:
25:83:85:4d:9a:0f:b9:b3:11:a2:a5:16:0f:f2:30:f7:a4:c7:
26:fa:c0:bf:cf:08:df:16:71:be:4e:59:9b:de:75:89:f3:d2:
f4:81:f4:f1:fa:64:8f:48:c9:ee:eb:fa:06:f9:46:63:16:08:
ca:e4:2e:43:89:86:01:3f:07:b3:cb:c7:35:d7:73:d1:91:19:
bc:f5:0e:f6:1d:57:74:18:5c:90:5a:71:61:c1:cc:f6:c9:f7:
80:5e:6c:37:63:42:db:8d:91:a9:a8:2c:1f:65:aa:f7:ea:61:
0b:57:3a:d0:56:48:90:86:ce:5c:60:78:b6:fb:72:2d:e1:05:
46:cb:5b:60:15:90:9d:29:c0:ba:ba:66:09:6d:ac:07:06:91:
24:e8:36:5d:e6:ee:a2:38:2a:a4:3e:87:04:fd:8c:fd:ee:ff:
76:b6:91:ec:21:6e:00:3a:ff:bc:91:f5:9e:44:ff:2a:74:6d:
8c:2a:a7:93:f4:fe:3c:2a:08:4a:75:79:1b:cb:70:f3:de:4b:
0f:cc:48:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 17:53:38 2023 by rpki-client on console-ams.rpki-client.org