Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/qIp3Uxi9-KpZvycdkL7lj_ugl94.roa
File: qIp3Uxi9-KpZvycdkL7lj_ugl94.roa (raw, json)
Hash identifier: sCVTx7XqiR67+L7Xu+eD02QTdJyGeQHD2RkkLFKzt50=
Subject key identifier: A8:8A:77:53:18:BD:F8:AA:59:BF:27:1D:90:BE:E5:8F:FB:A0:97:DE
Certificate issuer: /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial: 01920520CCF63D01B4D45F87713C8BF158F0
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/qIp3Uxi9-KpZvycdkL7lj_ugl94.roa
Signing time: Wed 18 Sep 2024 12:34:48 +0000
ROA not before: Wed 18 Sep 2024 12:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.171.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:20:cc:f6:3d:01:b4:d4:5f:87:71:3c:8b:f1:58:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
Validity
Not Before: Sep 18 12:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a88a775318bdf8aa59bf271d90bee58ffba097de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:f8:4c:69:1e:15:21:aa:6f:0b:2b:35:18:
6f:b7:81:44:09:3d:1b:97:95:ac:46:76:66:29:48:
3e:75:67:b5:80:a3:d0:03:a1:a2:20:55:10:92:9b:
6d:8f:20:57:77:92:e7:6f:9a:c0:6c:48:8b:d9:74:
2e:63:ec:5c:ae:2a:88:ed:4c:cf:c3:ce:54:76:8d:
1c:c9:66:92:d8:cd:ac:46:87:81:db:77:49:a8:96:
83:72:3f:18:a7:22:d0:21:ed:03:e5:86:75:ac:26:
5b:46:06:8b:43:0e:75:d4:c9:0d:af:59:79:c6:c5:
b0:a5:74:39:e7:de:e9:90:47:a2:62:1c:23:ff:d0:
8c:44:5c:f5:e4:ab:5f:20:c7:40:d2:62:b4:0c:30:
8c:eb:21:1c:11:04:85:c3:91:61:64:7b:6c:f7:ff:
e2:fd:0b:e6:4d:66:be:8e:32:64:c6:00:3c:e4:ff:
39:ee:e0:53:a8:61:b6:1e:f7:a7:7a:47:95:82:15:
cc:48:a0:c7:b2:ce:73:19:05:a0:be:9c:ec:73:41:
06:5e:7b:4f:f2:2b:7a:f3:69:fa:83:bd:5e:c6:b6:
2d:07:23:42:00:90:c9:24:0d:99:05:46:ec:a6:76:
9d:00:d3:3e:bf:a4:de:d2:8b:3a:9d:15:41:e8:0e:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8A:77:53:18:BD:F8:AA:59:BF:27:1D:90:BE:E5:8F:FB:A0:97:DE
X509v3 Authority Key Identifier:
keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/qIp3Uxi9-KpZvycdkL7lj_ugl94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.160.0/24
Signature Algorithm: sha256WithRSAEncryption
86:26:71:5f:7e:e8:90:fd:41:a3:91:fd:f7:d0:1e:c7:f8:18:
fc:25:c8:40:2a:49:2e:4e:aa:48:ee:02:fc:3c:8e:1a:0d:ab:
15:96:36:62:93:9f:f7:a3:d2:cb:e0:8f:06:55:2e:e6:52:b6:
da:f0:b7:6c:ba:8a:0c:53:89:90:2f:5e:24:ea:81:56:a5:0b:
d8:a9:30:b2:a9:1e:5e:e6:33:66:e5:dc:3d:f2:45:1f:0a:66:
04:aa:b4:f8:16:9c:19:9d:9c:ba:d8:9b:14:43:4c:c3:12:13:
56:f7:79:74:13:c3:63:d9:b5:d1:27:3f:eb:91:df:35:3e:bf:
23:a2:88:fb:e9:66:34:07:38:8a:75:d3:62:30:2e:04:0e:ac:
6c:ef:3d:c6:20:5e:26:0e:a9:f0:da:8a:7b:a7:a6:dd:46:70:
80:1b:63:fd:2f:68:40:43:b8:11:06:75:98:65:3e:4e:78:22:
d2:dd:92:13:a4:ef:e8:c5:8f:19:32:79:a9:e5:38:77:c1:2f:
d7:92:b4:87:6e:a7:1c:c9:ef:54:f6:f3:9c:f4:3f:31:f6:b5:
64:f0:d6:09:18:56:27:de:03:21:42:47:64:f2:a3:a5:1b:db:
c9:14:8d:45:f7:a3:54:1d:9e:bb:b8:ea:ea:81:99:ea:5b:61:
9c:0f:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 17:14:23 2024 by rpki-client on console-ams.rpki-client.org