Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/Qg42_hicH_4qMjumKXxwYNy65tI.roa
File: Qg42_hicH_4qMjumKXxwYNy65tI.roa (raw, json)
Hash identifier: XYsnKzziak24lQ9McS1YRSaa3MBfxZA9e1G9eTKbDQo=
Subject key identifier: 42:0E:36:FE:18:9C:1F:FE:2A:32:3B:A6:29:7C:70:60:DC:BA:E6:D2
Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial: 01856CF8550A2370BA04BC1F382A1D298AE2
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/Qg42_hicH_4qMjumKXxwYNy65tI.roa
Signing time: Sun 01 Jan 2023 10:54:51 +0000
ROA not before: Sun 01 Jan 2023 10:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210432
IP address blocks: 146.19.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:55:0a:23:70:ba:04:bc:1f:38:2a:1d:29:8a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
Validity
Not Before: Jan 1 10:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=420e36fe189c1ffe2a323ba6297c7060dcbae6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:8f:f1:c2:e0:4a:b2:ff:51:be:39:e6:de:
be:2f:47:8c:b9:5f:54:3f:37:57:c8:14:2d:55:d8:
9f:61:9b:b5:66:b0:1a:1d:de:28:bc:77:ae:67:1b:
ef:c2:da:fc:45:b7:c7:af:c7:0f:31:26:07:a4:8d:
db:45:90:74:c7:f8:38:88:78:71:b2:df:5a:9d:90:
45:03:67:ff:38:da:41:1a:91:e8:86:2d:38:9f:df:
af:e7:f7:04:af:fb:33:26:6e:0f:7a:fa:e2:a5:54:
dc:80:4e:8b:12:77:8c:1c:ec:d0:8b:dc:58:00:6f:
d4:29:f7:98:1a:04:33:7f:32:91:5f:7e:63:da:6d:
0e:ac:df:06:ca:8d:7b:55:1e:bc:10:e3:ef:b9:91:
58:f1:ac:9b:6b:d9:81:b2:5a:6f:d2:f0:0d:08:52:
b9:3d:ae:cd:f3:c0:d8:93:f6:7c:f3:fc:8c:95:fc:
6f:0a:29:0a:7e:7c:b8:3a:76:7e:cc:2d:87:4e:53:
7a:15:aa:e1:e2:b2:e8:47:1d:2c:52:b0:32:8f:3a:
2a:ff:17:62:55:a3:7b:0b:60:85:0d:f0:37:da:d6:
8f:cf:69:22:04:9a:86:c7:13:89:84:cb:a4:d5:09:
38:10:14:16:c4:fb:19:aa:bd:bf:27:65:98:d9:bd:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:36:FE:18:9C:1F:FE:2A:32:3B:A6:29:7C:70:60:DC:BA:E6:D2
X509v3 Authority Key Identifier:
keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/Qg42_hicH_4qMjumKXxwYNy65tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.239.0/24
Signature Algorithm: sha256WithRSAEncryption
36:44:fa:0d:94:72:68:5d:98:95:78:48:21:e8:49:1b:23:a4:
94:72:f9:80:80:10:b1:2d:17:dd:f2:73:2c:1a:94:c9:b5:a6:
bc:c2:eb:53:92:f1:39:db:a4:a7:70:0d:be:24:e0:49:be:ea:
41:14:52:30:79:6e:6a:56:08:69:28:3a:84:18:a5:1a:02:a8:
ad:74:60:3b:78:9a:28:aa:76:2f:44:46:7c:43:da:3a:f3:2d:
73:87:ac:99:42:eb:a4:13:85:52:54:02:bc:42:84:b9:1f:cd:
44:4c:24:fa:b8:62:68:d0:2e:ef:dd:12:50:e5:5c:30:f4:67:
f9:8a:65:5c:6e:9a:02:1d:59:e7:2f:78:a7:8c:2e:5f:7c:36:
d4:58:32:fe:23:a2:fe:d5:39:fc:4f:10:62:9f:72:f0:97:72:
5b:c4:3c:9b:21:23:46:04:28:00:32:6b:2a:96:d8:6f:94:ee:
38:d6:2a:cf:ea:a0:10:b6:6f:c5:ab:b6:5f:37:b2:06:65:2e:
63:a5:4c:ff:dd:9c:c3:2c:ed:bb:c2:e7:ce:4d:3d:d4:5c:75:
25:f7:1d:a8:fc:ab:f2:27:7f:a3:8e:15:ba:a4:14:32:cb:a4:
d6:ae:ce:83:0c:0b:6c:3e:b7:2b:eb:6d:a5:e8:39:9e:7f:ad:
9e:28:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:58 2024 by rpki-client on console-ams.rpki-client.org