Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/Qj8DykZGDkiFBg2UXru-KdCNwpI.roa
File: Qj8DykZGDkiFBg2UXru-KdCNwpI.roa (raw, json)
Hash identifier: PV+dz/NO29QXL83WWkwc/9YSVOex8oakiqhofwhEico=
Subject key identifier: 42:3F:03:CA:46:46:0E:48:85:06:0D:94:5E:BB:BE:29:D0:8D:C2:92
Certificate issuer: /CN=496e79694637ee05579e1804c14d851e382a14c8
Certificate serial: 018D13D7F0557B26A327298E2EA6D078FFDB
Authority key identifier: 49:6E:79:69:46:37:EE:05:57:9E:18:04:C1:4D:85:1E:38:2A:14:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW55aUY37gVXnhgEwU2FHjgqFMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/Qj8DykZGDkiFBg2UXru-KdCNwpI.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 176.124.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 19:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f0:55:7b:26:a3:27:29:8e:2e:a6:d0:78:ff:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496e79694637ee05579e1804c14d851e382a14c8
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=423f03ca46460e4885060d945ebbbe29d08dc292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:94:71:48:30:69:0b:bf:de:b6:6b:14:9d:
7a:d4:04:0d:5a:58:d7:54:e5:d8:b4:26:b3:07:13:
fe:06:a6:bc:2c:11:9f:50:41:36:4f:90:c5:4c:dc:
98:1c:27:d8:f4:fc:bb:2d:c3:39:45:a8:00:49:38:
a8:e1:be:fc:33:aa:4b:00:15:96:ca:84:62:d9:7a:
3d:1d:ee:0b:ab:c1:02:fa:0a:ee:cc:a0:20:f7:9b:
9d:7f:83:96:83:53:f5:1c:55:ed:29:b5:16:df:d6:
75:ed:79:37:b2:04:f6:2f:d3:8a:72:d1:74:43:39:
d7:3c:8d:b1:ad:80:a8:92:75:17:ef:a5:f0:d5:1e:
95:5a:c8:9b:dd:8a:6b:5d:cd:6c:a1:51:38:71:9d:
49:e4:27:2d:e3:dc:94:0c:b0:32:2e:9e:3f:3d:62:
6a:45:21:75:98:15:f1:58:2f:ac:d8:d7:63:01:02:
e5:ed:a1:c7:ce:32:97:b0:61:42:aa:7b:05:c4:02:
b8:84:6f:f2:f0:e4:15:83:e4:c4:49:95:56:a6:d0:
89:86:4c:db:b9:f0:3d:54:e3:9f:5b:88:bf:d1:c8:
2a:a7:cb:51:7c:06:e1:58:0a:c8:8b:b2:03:60:3b:
3a:6d:77:f1:e1:78:a7:ba:50:80:0a:22:d0:54:a5:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3F:03:CA:46:46:0E:48:85:06:0D:94:5E:BB:BE:29:D0:8D:C2:92
X509v3 Authority Key Identifier:
keyid:49:6E:79:69:46:37:EE:05:57:9E:18:04:C1:4D:85:1E:38:2A:14:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW55aUY37gVXnhgEwU2FHjgqFMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/Qj8DykZGDkiFBg2UXru-KdCNwpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/SW55aUY37gVXnhgEwU2FHjgqFMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.34.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fa:07:b6:9c:b2:dc:1c:22:93:9e:4e:bc:d9:b4:1c:18:45:
93:b1:04:4d:d3:ef:fd:80:dd:fd:bb:7a:db:dd:0e:a2:91:3d:
76:36:67:49:ce:41:f7:ee:d5:b7:d5:14:7c:af:ff:a6:65:89:
8b:f4:7d:99:de:a1:18:7b:e3:69:64:c6:58:2c:2c:2f:4f:9b:
bb:f6:61:ec:eb:fb:a8:38:ea:b0:f5:83:45:2e:d5:0c:11:35:
f2:4a:72:99:6d:50:85:77:8d:38:6d:51:0f:85:9c:72:de:aa:
16:c7:50:c5:33:16:98:8e:16:b6:04:3e:91:76:ee:c9:40:0e:
1a:0b:67:34:7e:c1:91:32:74:51:81:d7:76:7a:40:66:4c:32:
8b:17:1a:1a:a0:35:6b:ed:86:a1:43:42:99:b6:20:db:ad:ba:
63:a8:3b:de:18:33:e3:df:09:b4:b9:82:cc:c7:8e:4f:c2:06:
71:b0:8c:f6:83:79:86:f4:01:80:f4:e0:a9:9a:b5:41:be:33:
34:98:a6:78:d6:f8:c9:36:9d:62:1b:a2:1f:a9:d7:fb:15:25:
ea:df:13:bd:f2:c4:86:1c:96:b1:5f:d1:63:46:bb:c0:a5:1b:
88:bf:81:83:e5:1f:b8:75:fb:34:a4:74:1c:d8:28:3a:5f:2c:
df:4f:d9:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0T1/BVeyajJymOLqbQeP/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NmU3OTY5NDYzN2VlMDU1NzllMTgwNGMxNGQ4NTFlMzgy
YTE0YzgwHhcNMjQwMTE2MTk1NTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjNmMDNjYTQ2NDYwZTQ4ODUwNjBkOTQ1ZWJiYmUyOWQwOGRjMjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYyUcUgwaQu/3rZrFJ161AQNWljX
VOXYtCazBxP+Bqa8LBGfUEE2T5DFTNyYHCfY9Py7LcM5RagASTio4b78M6pLABWW
yoRi2Xo9He4Lq8EC+gruzKAg95udf4OWg1P1HFXtKbUW39Z17Xk3sgT2L9OKctF0
QznXPI2xrYCoknUX76Xw1R6VWsib3YprXc1soVE4cZ1J5Cct49yUDLAyLp4/PWJq
RSF1mBXxWC+s2NdjAQLl7aHHzjKXsGFCqnsFxAK4hG/y8OQVg+TESZVWptCJhkzb
ufA9VOOfW4i/0cgqp8tRfAbhWArIi7IDYDs6bXfx4XinulCACiLQVKW5YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEI/A8pGRg5IhQYNlF67vinQjcKSMB8GA1UdIwQY
MBaAFElueWlGN+4FV54YBMFNhR44KhTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1c1NWFVWTM3Z1ZYbmhnRXdVMkZIamdxRk1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMzVkMjgtOGFjMS00NTlhLTkxMjkt
M2Y3MDM5MzQ1Mjg5LzEvUWo4RHlrWkdEa2lGQmcyVVhydS1LZENOd3BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kMzVkMjgtOGFjMS00NTlhLTkxMjktM2Y3MDM5MzQ1Mjg5
LzEvU1c1NWFVWTM3Z1ZYbmhnRXdVMkZIamdxRk1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHwiMA0G
CSqGSIb3DQEBCwUAA4IBAQBR+ge2nLLcHCKTnk682bQcGEWTsQRN0+/9gN39u3rb
3Q6ikT12NmdJzkH37tW31RR8r/+mZYmL9H2Z3qEYe+NpZMZYLCwvT5u79mHs6/uo
OOqw9YNFLtUMETXySnKZbVCFd404bVEPhZxy3qoWx1DFMxaYjha2BD6Rdu7JQA4a
C2c0fsGRMnRRgdd2ekBmTDKLFxoaoDVr7YahQ0KZtiDbrbpjqDveGDPj3wm0uYLM
x45PwgZxsIz2g3mG9AGA9OCpmrVBvjM0mKZ41vjJNp1iG6Ifqdf7FSXq3xO98sSG
HJaxX9FjRrvApRuIv4GD5R+4dfs0pHQc2Cg6XyzfT9mq
-----END CERTIFICATE-----
Generated at Sun Jan 21 19:56:23 2024 by rpki-client on console-ams.rpki-client.org