Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qbwsx7aoc1ULtb6l9-5Jdgm-V74.roa
File: qbwsx7aoc1ULtb6l9-5Jdgm-V74.roa (raw, json)
Hash identifier: CHXKdihFIUKMr8syhpYShJBWiQHpJWA3ud6h5/CGUMM=
Subject key identifier: A9:BC:2C:C7:B6:A8:73:55:0B:B5:BE:A5:F7:EE:49:76:09:BE:57:BE
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018CCA2A46F6742886073A69F46E1D802558
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qbwsx7aoc1ULtb6l9-5Jdgm-V74.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 81.29.146.0/24 maxlen: 24
81.29.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:46:f6:74:28:86:07:3a:69:f4:6e:1d:80:25:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9bc2cc7b6a873550bb5bea5f7ee497609be57be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:01:4d:9c:84:9c:fb:bb:d1:fc:70:3f:1d:38:
94:71:75:10:82:25:63:b0:37:38:ce:50:72:46:c7:
4e:3a:45:c0:44:c5:68:dc:c0:31:3b:12:d9:27:68:
2f:ac:31:6d:f8:ea:ae:06:18:8d:64:94:2a:ae:10:
21:59:2b:0c:69:47:a3:76:0d:c9:fd:25:8e:52:b1:
21:be:ca:8d:87:bb:ca:af:2d:28:10:86:a4:84:26:
d3:12:1c:8e:1d:22:da:e6:a6:ce:13:d4:e7:1c:73:
d6:1c:d2:8d:07:15:2b:f3:da:b0:b8:94:09:f8:c0:
5d:62:05:c1:59:d6:cb:0c:bb:34:24:da:fd:62:f7:
11:9e:19:6d:5b:ab:44:b6:25:68:b3:5e:40:e8:51:
41:32:a3:15:93:13:04:b8:a2:c1:98:70:1e:7c:d3:
b4:79:97:44:e1:de:1a:db:e4:a1:5b:a9:2f:03:38:
c7:a0:d1:0e:02:31:a3:81:82:c1:09:7e:9b:da:c6:
42:55:ae:9e:80:a0:b1:ff:6c:d7:87:e7:f2:10:a7:
06:93:e6:71:c2:da:63:69:a6:f7:71:28:20:67:4d:
e8:a4:68:e2:5d:75:2d:ad:3f:20:5c:4d:0f:ce:eb:
cb:fc:18:eb:1b:5e:35:ff:96:cc:87:7b:ce:15:40:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BC:2C:C7:B6:A8:73:55:0B:B5:BE:A5:F7:EE:49:76:09:BE:57:BE
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qbwsx7aoc1ULtb6l9-5Jdgm-V74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.146.0/24
81.29.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b8:0a:2a:39:41:45:a2:e4:4f:82:0c:98:66:f7:2b:68:44:
16:bc:b3:05:57:b9:b7:d1:da:a2:10:b6:c2:ec:20:28:85:aa:
e8:a2:09:52:4b:54:0b:ca:96:a4:ac:fd:da:e0:3c:9b:dd:66:
c2:40:a5:87:d5:78:02:a9:93:51:c0:a2:d3:a7:1f:76:7c:17:
e6:f1:17:e5:9f:91:6d:1c:9d:82:9d:e5:6a:69:1d:97:2f:62:
16:ce:8e:5c:20:d5:46:e6:99:da:c9:bf:8a:10:c5:f4:11:07:
1f:b2:c0:1d:11:bc:3a:2f:21:c8:c6:0f:ce:60:c4:ec:02:eb:
5a:a6:af:16:06:32:68:57:06:16:0f:3c:37:c0:cf:b4:e1:6b:
54:04:ff:33:e8:95:f7:18:3c:68:e3:e5:20:c7:0f:8d:f9:66:
48:af:c2:e1:46:4b:d5:09:a2:7d:7d:2a:32:32:8d:96:02:db:
2b:e6:bc:c1:2e:c6:4e:95:4d:02:8e:2a:a5:86:c3:4f:c9:df:
eb:1b:ee:60:ab:75:c9:b0:1a:48:01:9e:d2:7f:58:34:67:82:
ff:84:c2:1a:68:16:1d:43:29:db:e7:d8:cb:3b:3d:84:c2:e2:
3b:91:a2:7b:04:5f:49:d0:dc:af:6e:1b:db:fc:36:5b:28:ac:
8b:d0:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 12:56:05 2024 by rpki-client on console-fra.rpki-client.org