Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/QDY6ce3qMYYH3kozNnPvBfV7jh0.roa
File: QDY6ce3qMYYH3kozNnPvBfV7jh0.roa (raw, json)
Hash identifier: L/D16WiOlY4kXgzrZUfEUo7S5feYl7ZsStDss+DF2As=
Subject key identifier: 40:36:3A:71:ED:EA:31:86:07:DE:4A:33:36:73:EF:05:F5:7B:8E:1D
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 019185874D6E20A5098158AA9997EBD5385F
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/QDY6ce3qMYYH3kozNnPvBfV7jh0.roa
Signing time: Sat 24 Aug 2024 17:55:22 +0000
ROA not before: Sat 24 Aug 2024 17:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 79.132.196.0/24 maxlen: 24
109.230.113.0/24 maxlen: 24
202.164.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:85:87:4d:6e:20:a5:09:81:58:aa:99:97:eb:d5:38:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Aug 24 17:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40363a71edea318607de4a333673ef05f57b8e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:4f:1f:c8:12:a5:0a:5c:87:05:02:66:5c:
45:c7:1c:78:16:e1:19:43:b3:e1:d2:68:fc:9b:5c:
d4:f7:df:fa:a5:67:02:de:62:c2:5a:f1:e3:c5:21:
ac:71:4e:4b:2b:0d:21:9c:15:a8:93:a7:8b:92:87:
96:06:41:64:f9:a9:12:ab:42:e7:bd:f6:3d:c0:0c:
57:f0:3d:1f:bf:66:b9:b9:3e:a8:44:d5:8b:1e:e4:
05:57:36:32:cc:6e:4e:96:b7:77:b0:3f:e4:e3:c0:
e1:53:37:d1:69:93:eb:88:b8:c5:ff:79:da:da:3e:
a7:eb:2a:f3:b4:9f:b8:c9:de:a4:a9:1e:ed:38:34:
bd:80:b4:42:84:bf:9a:0f:d7:8c:8a:09:67:8f:ab:
7e:0a:9e:8d:3c:64:ca:97:76:27:34:ea:a2:36:8d:
df:c7:3c:e0:6d:f9:01:e6:62:c2:60:01:94:14:ed:
50:7f:93:00:65:42:f7:b8:f4:e0:61:fe:ce:5d:59:
ae:77:ef:83:34:27:17:27:16:e9:86:46:5d:37:c7:
2b:8d:eb:8b:93:84:43:7b:80:d3:82:f5:2b:d2:2e:
1a:b7:b0:0c:b7:dc:80:4c:ca:51:70:87:00:32:39:
d9:7a:58:50:e3:18:1e:d4:59:d4:8a:36:8c:0a:4f:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:36:3A:71:ED:EA:31:86:07:DE:4A:33:36:73:EF:05:F5:7B:8E:1D
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/QDY6ce3qMYYH3kozNnPvBfV7jh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.196.0/24
109.230.113.0/24
202.164.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:36:eb:96:e9:98:4d:96:6e:c4:75:2c:71:86:3c:f7:fa:b9:
83:3e:60:b7:16:ac:59:3f:c7:da:06:03:37:9f:0a:3b:8d:42:
3f:94:1f:b6:9f:85:10:a8:12:54:c3:49:62:a8:1b:96:98:ab:
68:60:96:5e:f7:54:5a:63:78:57:15:a4:50:9f:f4:7d:e0:4a:
85:f4:1b:51:e6:2c:17:6b:cd:5d:63:f6:64:f5:5c:67:85:3b:
29:49:fb:9b:fb:13:93:e9:c1:1b:26:27:fe:97:0b:6a:79:5a:
de:87:4b:27:af:f9:da:0b:a3:df:6d:1e:5e:98:30:47:5b:97:
02:64:a0:39:f4:3f:97:d1:b1:62:dc:e1:5d:6a:42:c7:3c:ba:
23:47:68:ea:00:74:14:53:d1:c2:2c:d2:fb:5d:c6:34:bc:02:
cd:13:de:b0:a1:fb:f9:61:20:27:72:f1:31:d1:6f:b9:f0:07:
0a:e1:9d:58:a5:a7:bc:63:7e:56:79:d5:b1:0c:be:fb:0c:a5:
76:ef:b6:0a:d7:95:d5:7b:a9:e6:21:32:f6:e9:bb:e4:3d:a8:
28:9f:d5:7e:06:42:75:40:29:46:26:40:b0:2b:28:88:a5:3e:
db:4d:f3:23:e8:44:b7:8f:87:b4:12:ef:c7:25:01:1b:b5:bb:
da:4b:0a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:22 2024 by rpki-client on console-ams.rpki-client.org