Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/QdTU4Cfq973nGsr2hEsxNT77iWc.roa
File: QdTU4Cfq973nGsr2hEsxNT77iWc.roa (raw, json)
Hash identifier: z15QLobd8Vh+rmMhryKRQqLDDNvJNfUvdpbd2WOjMJk=
Subject key identifier: 41:D4:D4:E0:27:EA:F7:BD:E7:1A:CA:F6:84:4B:31:35:3E:FB:89:67
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018B900C7067685B08BF1D7082F17D021507
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/QdTU4Cfq973nGsr2hEsxNT77iWc.roa
Signing time: Thu 02 Nov 2023 12:40:16 +0000
ROA not before: Thu 02 Nov 2023 12:40:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 91.193.252.0/24 maxlen: 24
91.193.255.0/24 maxlen: 24
93.89.219.0/24 maxlen: 24
93.89.223.0/24 maxlen: 24
93.89.222.0/24 maxlen: 24
93.89.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 11:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:0c:70:67:68:5b:08:bf:1d:70:82:f1:7d:02:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Nov 2 12:40:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41d4d4e027eaf7bde71acaf6844b31353efb8967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:f4:ea:7e:e0:47:b8:67:2d:d5:62:18:eb:
7a:c7:ba:87:6e:84:f5:ad:0f:d9:0e:c0:c7:28:12:
f0:83:f7:e5:84:7e:4d:38:17:92:b2:f3:69:77:e1:
99:d1:c8:7f:3c:00:a0:2d:da:29:8c:0b:ad:14:6e:
26:e0:ca:44:01:e8:f2:a4:c9:99:a1:1d:19:16:8f:
60:2e:9f:c8:8a:16:7c:e0:74:e3:4b:a4:72:b7:06:
a4:93:50:7e:82:47:cc:80:f4:e0:fa:95:b6:fd:85:
cc:bc:02:75:7d:75:c1:56:5e:1d:08:77:9d:c4:cf:
a6:a3:4a:0f:aa:e9:e8:18:9a:a8:e8:77:71:98:fe:
f2:55:21:eb:74:ad:13:f0:74:4a:54:58:88:2f:ab:
f4:b5:86:7a:86:df:e2:6e:01:87:3c:64:5e:71:7f:
5a:fa:77:1b:8a:f0:aa:d3:8f:8e:67:e5:15:da:4e:
c2:4c:7f:4d:0e:84:ff:ab:56:7a:ca:dc:89:e0:93:
24:25:9c:de:c9:26:8f:88:d1:ff:ed:b9:65:49:18:
fe:02:27:fc:db:d5:bf:c1:5d:39:8e:de:39:c3:0a:
24:76:d7:d2:7f:58:4c:12:8e:f3:8b:9e:f4:11:e6:
d6:68:48:0e:1c:55:3a:8a:3b:0a:79:48:b1:de:45:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D4:D4:E0:27:EA:F7:BD:E7:1A:CA:F6:84:4B:31:35:3E:FB:89:67
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/QdTU4Cfq973nGsr2hEsxNT77iWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
91.193.255.0/24
93.89.219.0/24
93.89.221.0-93.89.223.255
Signature Algorithm: sha256WithRSAEncryption
03:b7:cd:07:ec:74:8c:fa:8d:8f:5c:51:47:1a:51:5f:c8:db:
4d:51:28:50:b0:d7:cd:f1:57:da:99:96:db:c1:99:69:23:07:
2c:cf:61:63:db:f4:40:36:ae:f0:ad:37:f9:87:b2:94:55:40:
fd:83:4e:83:79:9c:2e:c7:c6:aa:3e:dc:86:95:66:af:b8:49:
c0:f9:77:20:80:35:42:f0:54:d6:63:93:88:e5:42:cb:02:0f:
3d:03:6b:6d:e2:39:f8:82:1a:73:36:72:b9:f6:f1:9c:5c:5d:
e1:c2:d2:22:76:d0:bf:c5:f9:6d:4d:dd:74:ba:c0:58:32:ff:
12:ca:d4:c4:cf:b3:2e:1d:25:b8:80:61:b0:b1:ae:26:a9:d9:
27:3f:4e:9a:bd:f7:30:fd:db:62:34:84:30:b9:47:c9:1f:c2:
cc:48:3a:8a:8c:0a:52:f8:32:c2:b2:31:d2:bf:c4:83:93:20:
f3:d5:69:51:6f:19:ab:f5:c5:df:ef:2d:85:e2:4e:5d:4a:3b:
bc:fb:71:2c:cc:05:5f:3b:40:de:76:2f:26:98:0f:a6:5d:61:
5b:3a:e0:7c:31:bf:15:6b:59:a7:49:b9:ed:30:56:94:28:00:
66:20:77:c0:98:aa:16:25:5b:1c:88:b0:ac:28:23:8b:ef:d3:
b8:36:58:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org