Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/Q0urmd6t31QJutBUhtNWFiuy7OA.roa
File: Q0urmd6t31QJutBUhtNWFiuy7OA.roa (raw, json)
Hash identifier: EGb+3mNMmaewvjLDY6hNnhW2sZctYHqYPRRHU/hOfyc=
Subject key identifier: 43:4B:AB:99:DE:AD:DF:54:09:BA:D0:54:86:D3:56:16:2B:B2:EC:E0
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 0191B88050D159744329054C4E1B90CB2F31
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/Q0urmd6t31QJutBUhtNWFiuy7OA.roa
Signing time: Tue 03 Sep 2024 15:28:22 +0000
ROA not before: Tue 03 Sep 2024 15:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214399
IP address blocks: 193.35.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 05:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:80:50:d1:59:74:43:29:05:4c:4e:1b:90:cb:2f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Sep 3 15:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=434bab99deaddf5409bad05486d356162bb2ece0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:45:1f:eb:f5:0f:58:31:96:c1:2e:98:cd:
77:0b:21:59:ca:4b:25:e4:90:e8:f5:3f:c7:fb:e0:
88:3f:77:7c:84:05:cd:6b:12:8b:c0:46:9a:3d:6e:
0e:90:eb:f7:f0:e8:2e:c0:95:69:19:4b:5b:8d:74:
b2:8f:e9:df:36:f3:3e:b6:a1:df:89:13:b3:13:52:
cf:42:b4:4c:f2:49:62:d6:81:fe:92:00:87:86:be:
91:49:b4:23:3c:c9:23:61:dd:3e:67:e5:0c:02:d1:
74:23:09:ac:27:2b:1f:6f:6b:35:a6:0b:f1:2d:bc:
77:8b:dc:fa:85:64:3b:73:8e:d9:6c:46:ed:d8:0d:
c6:f9:60:e5:9b:9d:59:ad:32:d7:38:28:55:70:78:
4f:6f:a1:ad:58:28:46:8c:a4:0c:28:d5:b7:a6:aa:
69:c7:aa:74:bc:21:88:00:4b:50:0a:8e:f5:ec:2e:
da:ab:22:31:27:a3:0f:52:0c:70:eb:0d:cf:db:93:
6f:24:65:4e:13:6e:a5:89:6a:94:93:8f:ca:96:ff:
95:04:3f:5f:c3:de:be:9f:75:90:df:da:59:08:55:
15:5d:f4:9d:88:86:5a:5a:07:2a:04:3e:4c:61:3d:
11:d6:e4:41:db:c9:3b:f6:4a:c8:0f:70:f3:84:41:
90:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4B:AB:99:DE:AD:DF:54:09:BA:D0:54:86:D3:56:16:2B:B2:EC:E0
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/Q0urmd6t31QJutBUhtNWFiuy7OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.230.0/24
Signature Algorithm: sha256WithRSAEncryption
43:17:5f:1e:7d:21:c4:c7:34:d1:ba:2d:a2:b9:02:47:eb:a3:
a1:aa:a2:4c:9c:09:c8:08:c2:5e:a9:f7:fd:54:bd:80:a9:e9:
d8:d8:f0:88:01:a0:18:c8:a1:41:14:2b:56:7c:fe:73:4d:54:
4d:20:6e:4e:b9:63:a3:59:3f:20:7e:7d:55:ca:8a:d3:b2:25:
ef:55:df:d9:10:28:4c:e6:f0:39:71:a0:bf:bd:23:ce:f5:24:
5c:46:e2:ea:01:07:0b:7d:0c:3e:f5:1d:05:c1:36:53:08:b0:
f2:54:24:06:79:4a:e6:d7:ae:3d:70:ae:94:e1:bd:9a:56:cf:
6c:8c:49:58:57:65:a0:81:a5:05:0a:f4:b7:60:77:4e:42:36:
d7:83:98:cb:8e:9d:29:39:4f:ed:be:39:f9:5b:14:d4:bc:6d:
2e:c7:b4:26:18:af:b8:72:63:81:f8:b3:3f:92:14:07:2c:6e:
05:40:13:24:6a:e0:4c:ca:05:ea:48:8b:a1:c5:c0:34:42:16:
7e:b7:f0:73:75:91:4c:69:05:45:a1:2a:b2:dd:84:9b:07:d5:
a1:a0:73:5c:35:16:54:8e:84:83:4e:a7:f5:59:1d:0d:7a:05:
13:d3:5a:08:a1:6b:a6:ad:10:4e:db:4d:26:db:c4:0f:14:27:
d9:1a:e5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:32 2025 by rpki-client