Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/iqk-6K6ygvf78p-qknksre4mQ9I.roa
File: iqk-6K6ygvf78p-qknksre4mQ9I.roa (raw, json)
Hash identifier: BMXAzX+gbKwrII0mlVsaI77bHecJk/laPlwGog9ZNyk=
Subject key identifier: 8A:A9:3E:E8:AE:B2:82:F7:FB:F2:9F:AA:92:79:2C:AD:EE:26:43:D2
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018CC801D2D642DEC7FFC6FDB9E17C61196C
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/iqk-6K6ygvf78p-qknksre4mQ9I.roa
Signing time: Tue 02 Jan 2024 02:30:11 +0000
ROA not before: Tue 02 Jan 2024 02:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6134
IP address blocks: 176.113.68.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 05:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d2:d6:42:de:c7:ff:c6:fd:b9:e1:7c:61:19:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 2 02:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8aa93ee8aeb282f7fbf29faa92792cadee2643d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7b:41:3f:47:fb:d4:a5:b7:d8:b4:d6:aa:81:
af:75:f7:86:fd:83:66:c9:35:a6:ed:50:19:59:78:
1a:2f:74:ff:2f:39:84:d7:ff:cd:d2:a3:cd:34:6b:
b8:4e:c5:aa:dd:11:19:28:4f:8b:8c:4d:e1:6b:8a:
f7:7f:cb:45:d8:79:7d:44:5f:1a:7e:f0:88:06:67:
5d:41:1b:2a:90:3a:4c:1d:75:07:7e:7e:26:72:d8:
c4:66:85:8c:13:7e:48:66:ac:1a:74:42:4e:bf:15:
3b:31:e9:8d:e1:27:db:e7:a4:c5:3d:88:ec:35:42:
84:0e:7e:18:c0:a2:c8:6d:d0:a4:c3:38:b0:7b:95:
10:39:7d:45:11:6a:26:54:f1:ea:a6:fe:5e:00:2d:
09:27:53:2a:83:71:f6:fa:f6:fa:0b:2e:7d:fd:d3:
d1:8f:33:5f:e7:ab:bf:17:e5:70:a5:77:d0:fb:83:
cb:37:54:ff:7b:53:cc:68:da:db:fc:c1:2b:db:5d:
9d:fe:06:f1:d5:7c:97:fc:f6:7b:40:9f:39:0f:bb:
2d:2c:4b:a2:d5:51:0d:1b:aa:21:fc:db:98:2e:fd:
bb:05:fb:bd:7b:16:d4:01:6c:f0:60:05:76:31:fa:
96:eb:17:df:be:ef:79:e7:46:5b:10:e4:30:23:46:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A9:3E:E8:AE:B2:82:F7:FB:F2:9F:AA:92:79:2C:AD:EE:26:43:D2
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/iqk-6K6ygvf78p-qknksre4mQ9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.68.0/22
Signature Algorithm: sha256WithRSAEncryption
51:8e:d1:8e:02:cf:ae:1a:34:d5:1e:2c:c5:41:a8:25:fc:7c:
2e:5c:bb:82:d8:07:6e:c8:fb:f2:49:67:69:79:ce:3b:cb:eb:
93:b1:32:97:44:69:29:8f:dc:77:3b:f3:43:35:0b:cd:61:63:
e1:70:9c:f6:7b:38:42:f8:81:3b:97:67:e7:66:cb:b2:dd:e7:
c2:03:21:d8:1b:a8:9a:52:11:ae:32:fc:e5:5f:00:67:e6:a4:
14:f9:b4:23:45:b3:6d:d9:56:9a:d3:55:5e:1e:35:2e:0d:73:
c2:66:e7:b6:65:14:b7:7a:32:04:d8:88:03:d6:0f:92:03:6a:
3a:44:d8:db:b1:67:47:b8:ab:a8:7b:39:e3:41:34:5d:04:74:
6a:83:c7:cb:0a:71:9d:cf:86:ca:dc:3b:d8:db:47:83:e4:84:
67:a4:d3:1a:af:fe:61:c9:5e:2f:3f:0e:4c:84:9c:15:0a:ea:
13:dc:1f:ac:1e:81:e3:87:1c:d3:f2:82:a0:f1:17:cc:c6:1f:
f4:39:d5:59:4b:3b:12:e5:d1:98:80:b2:43:06:f6:7a:55:2e:
7b:6c:58:d3:91:df:b9:8f:4c:d1:7a:8d:85:d1:2c:41:28:87:
7b:e8:ba:d5:72:41:e5:3b:4b:8c:b1:99:c8:dd:5d:57:b3:9a:
58:9a:32:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org