Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/QasgtJ1PEsNh-r21Fm-G4gRchRw.roa
File: QasgtJ1PEsNh-r21Fm-G4gRchRw.roa (raw, json)
Hash identifier: zlC3C4CaZn5QYb6PI58R/7xw1yRaDc1EoXOw1bPPYdY=
Subject key identifier: 41:AB:20:B4:9D:4F:12:C3:61:FA:BD:B5:16:6F:86:E2:04:5C:85:1C
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0193CE7067A2CE72E0E4CD265E9539776AA9
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/QasgtJ1PEsNh-r21Fm-G4gRchRw.roa
Signing time: Mon 16 Dec 2024 07:48:13 +0000
ROA not before: Mon 16 Dec 2024 07:48:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.102.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 13:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:70:67:a2:ce:72:e0:e4:cd:26:5e:95:39:77:6a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 16 07:48:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41ab20b49d4f12c361fabdb5166f86e2045c851c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:48:d5:4a:52:a6:5c:a0:d1:c2:fc:c6:9b:
8a:56:fd:c6:ed:9a:e3:7e:67:ed:21:c4:f9:c4:97:
f2:00:21:a7:1e:4e:aa:10:04:26:3b:25:ce:6f:3a:
99:6a:5b:45:08:6e:13:29:e6:df:50:9d:07:b7:3c:
7e:2e:85:32:0c:6f:ce:bb:10:a3:0a:25:cb:d5:90:
cb:29:72:3b:c5:cf:52:46:78:fc:67:f5:2f:d7:fc:
ad:c2:fb:73:70:d4:d6:50:ef:da:63:6d:7c:cf:64:
5d:0c:1e:ae:cd:06:a0:c2:46:a0:19:2d:2c:26:b4:
b2:25:8e:a0:c2:a9:8d:0b:e5:1f:7d:62:e9:79:84:
4c:27:65:7f:4c:be:c8:e1:7d:b5:50:f9:af:f1:5e:
8c:9d:22:18:5c:fc:00:e8:ec:57:47:f1:3b:49:0e:
78:4e:58:73:8f:0e:70:09:df:e8:d1:ec:79:18:da:
89:52:25:f8:19:2f:2a:4c:4c:5f:a2:f2:32:41:f8:
ad:8a:19:b5:ef:c2:86:71:04:d5:b8:6c:73:b3:0b:
cb:00:a2:3a:d2:83:b1:4b:c2:cf:a7:85:f5:a2:0f:
1b:fd:63:fd:30:b1:f9:9f:d8:33:00:5d:16:58:70:
0b:45:bf:ea:ca:9a:62:99:ea:59:b2:1b:7f:b3:e8:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AB:20:B4:9D:4F:12:C3:61:FA:BD:B5:16:6F:86:E2:04:5C:85:1C
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/QasgtJ1PEsNh-r21Fm-G4gRchRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:78:e5:ca:45:79:2d:9d:bc:63:58:1e:14:f5:86:23:46:25:
92:c1:2c:5c:e8:ab:7b:0e:a6:df:86:b5:80:50:f9:a7:50:8e:
27:1e:9b:ee:51:d1:22:1c:6c:d4:49:aa:d5:7f:f8:86:9d:7e:
92:ae:b0:ca:a3:45:34:07:bc:76:a4:3e:71:e5:1c:45:e7:05:
c4:03:32:1e:fa:43:29:24:b5:7d:6d:12:71:94:60:b3:8e:5e:
c5:5c:04:84:0e:ac:99:69:78:1e:4e:26:11:70:65:e3:27:ef:
31:b5:5e:ef:43:a0:68:6e:71:c8:79:33:88:32:74:e5:4b:93:
6e:a5:03:f5:ef:d8:3d:b2:c7:ef:ff:7f:78:3c:6b:f9:e6:c0:
7b:c5:97:aa:60:03:a0:41:9a:53:7e:55:4b:6b:1a:12:8c:14:
28:26:4c:2b:3a:77:d6:10:c0:ca:9a:34:b3:64:72:d9:38:ee:
10:b2:6c:52:20:68:c5:1f:21:95:19:94:56:f8:91:c3:f9:cd:
e3:bf:33:5d:38:c4:4d:59:72:8d:bc:d1:66:3e:8d:a9:be:78:
b6:e7:d2:c2:24:ee:05:d8:f8:d4:7f:5e:3b:5f:35:a3:cc:74:
53:86:86:29:ca:7b:83:16:19:15:93:37:fe:63:9c:6f:af:5f:
3b:91:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:02:21 2025 by rpki-client