Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/QGGoadip1a6vr4Xg0iNrOCYfeXc.roa
File: QGGoadip1a6vr4Xg0iNrOCYfeXc.roa (raw, json)
Hash identifier: jzyGeTko99DedXNqDOSNclcryzfOpT7siFq6L91dYak=
Subject key identifier: 40:61:A8:69:D8:A9:D5:AE:AF:AF:85:E0:D2:23:6B:38:26:1F:79:77
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018570027BEA4706F9B0F0C2A0BE688461B2
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/QGGoadip1a6vr4Xg0iNrOCYfeXc.roa
Signing time: Mon 02 Jan 2023 01:04:49 +0000
ROA not before: Mon 02 Jan 2023 01:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204447
IP address blocks: 178.235.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7b:ea:47:06:f9:b0:f0:c2:a0:be:68:84:61:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 2 01:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4061a869d8a9d5aeafaf85e0d2236b38261f7977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:2f:fd:68:5e:d2:5f:d7:da:17:3a:f9:69:
db:3f:5a:71:2c:38:d4:d8:73:51:13:c6:46:f4:70:
25:3a:80:84:a8:ac:88:87:b6:04:aa:e0:01:7b:a6:
1c:04:e4:2f:3b:31:27:1d:43:60:2b:0c:71:2b:63:
87:13:63:80:9f:da:0c:0c:67:c9:9e:c8:c8:cf:fc:
c6:b5:82:e2:15:5d:56:81:94:09:92:fc:15:2b:f5:
48:b6:1d:85:68:8a:7c:e7:88:be:a0:ba:52:55:3e:
ab:55:f9:a0:15:3a:4a:e7:c6:39:fb:31:7c:eb:e5:
52:87:74:ec:6b:91:b5:49:47:e8:55:92:4f:6c:a6:
3f:6f:bb:07:c2:54:11:66:2a:07:e9:13:78:c5:2d:
58:68:ad:90:e8:bc:d4:c2:f2:73:61:08:f7:ae:4c:
88:28:69:2a:93:c2:93:1c:7e:54:07:c4:bf:6a:e6:
51:b1:2a:fc:69:1e:e3:5f:e3:7a:85:e3:a8:56:43:
a4:c3:ae:63:1b:15:4b:d9:11:4b:96:d1:d9:52:3e:
20:f0:cc:fe:aa:a7:7e:d6:11:a7:93:d0:ae:d3:98:
7a:07:bf:09:c2:c0:57:eb:ab:8f:43:fd:6d:74:50:
2b:ee:e7:4c:90:07:85:11:d9:6f:b2:61:ef:2c:87:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:61:A8:69:D8:A9:D5:AE:AF:AF:85:E0:D2:23:6B:38:26:1F:79:77
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/QGGoadip1a6vr4Xg0iNrOCYfeXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.235.242.0/24
Signature Algorithm: sha256WithRSAEncryption
86:28:65:c3:22:46:67:25:12:0e:6a:d2:1f:ef:49:31:5d:27:
e2:f8:78:28:2d:e2:5b:42:aa:9c:d9:c8:45:68:e4:d0:51:c0:
10:ec:98:55:03:c0:a2:53:b3:37:fa:af:1c:7d:b2:5e:a7:7f:
b7:7c:7f:bd:73:3d:4e:50:df:b4:45:68:e8:a0:c6:82:83:13:
49:ce:dd:3b:80:e3:0e:65:1b:4c:49:20:f5:49:0b:5e:b7:38:
ee:39:08:33:89:c6:da:b8:b8:a2:62:0e:7b:a5:27:f1:cf:e0:
0b:23:ac:05:fc:22:91:60:c4:4c:ee:c0:b0:03:74:a7:3e:4c:
be:5e:e8:5e:7e:ce:80:86:04:23:94:75:44:d4:75:d4:57:d9:
9f:51:ab:98:45:dd:60:d1:13:d9:f5:a4:1a:84:b1:de:0b:ac:
ba:87:e5:4c:68:d9:32:0e:09:e8:21:e5:14:a0:72:fa:02:fe:
b5:de:a1:0d:2c:e2:c7:24:0b:ce:08:d0:81:79:48:0f:91:9f:
8b:7f:d0:57:8e:6b:dc:22:8a:d1:30:d0:b5:16:f2:af:83:97:
54:c1:0e:98:8a:27:4b:d5:a1:7f:f2:ef:56:7b:53:dc:c5:ee:
d9:7f:f1:68:cc:30:9d:67:ca:3b:1f:8e:41:d4:ea:f2:49:79:
64:50:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:26 2024 by rpki-client on console-ams.rpki-client.org