Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/q1SQdPAH5YtfsdhlXAbJriI3NaM.roa
File: q1SQdPAH5YtfsdhlXAbJriI3NaM.roa (raw, json)
Hash identifier: 6i7fL2Y/o9tk2QL4x/cWKuWZ+PerH/VdsZfwSuPiGzY=
Subject key identifier: AB:54:90:74:F0:07:E5:8B:5F:B1:D8:65:5C:06:C9:AE:22:37:35:A3
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 018B6223D05DF8DAC1DBC423B4F36A04F379
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/q1SQdPAH5YtfsdhlXAbJriI3NaM.roa
Signing time: Tue 24 Oct 2023 14:43:16 +0000
ROA not before: Tue 24 Oct 2023 14:43:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 80.67.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:23:d0:5d:f8:da:c1:db:c4:23:b4:f3:6a:04:f3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: Oct 24 14:43:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab549074f007e58b5fb1d8655c06c9ae223735a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ee:11:59:d5:d1:43:4d:57:f8:96:1a:1f:72:
f8:69:e8:80:78:12:03:21:1b:cd:db:39:8c:35:93:
20:79:f1:74:6b:1c:b5:86:3b:bd:c2:6d:37:6b:64:
da:e3:b1:d3:fa:1c:2a:76:c0:89:b5:74:aa:11:ff:
01:0c:52:79:e0:87:30:79:e0:e6:b0:40:5d:94:de:
ff:98:bf:e7:c9:c4:47:19:cc:77:34:92:5c:b5:e7:
0f:66:8a:f6:a6:83:7a:b9:f4:25:43:c9:a3:14:3c:
e6:a1:20:95:72:56:c3:d3:fa:f8:dc:04:8f:fc:ef:
35:9c:99:cd:8e:a7:19:d7:3b:d0:bd:7e:e9:db:4e:
a7:5b:e3:db:4d:07:ca:50:45:bd:a4:60:f2:ed:dc:
a2:f7:6e:76:f4:fc:60:a7:41:cc:03:0b:ce:ad:f1:
83:89:59:85:d4:b8:44:7a:98:99:8e:b7:a6:80:3e:
f2:a5:8d:97:01:b7:07:59:4c:e1:90:29:6a:2b:eb:
d3:b5:90:3c:61:c0:c8:40:71:99:dd:d2:ba:0e:e1:
87:41:a0:28:e4:42:b9:d0:3a:68:89:6a:c6:23:62:
d8:df:23:1c:99:10:e3:9d:7a:63:b2:e4:4b:97:1e:
8d:83:ee:db:c3:40:3d:e1:44:9b:72:00:38:e9:ca:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:54:90:74:F0:07:E5:8B:5F:B1:D8:65:5C:06:C9:AE:22:37:35:A3
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/q1SQdPAH5YtfsdhlXAbJriI3NaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
98:13:2d:36:16:cd:3e:a2:eb:1f:87:d7:79:db:55:0c:60:a5:
43:90:5f:1a:79:a3:90:92:a7:11:6f:42:4a:12:f0:b0:da:3d:
d0:39:98:1f:3d:ac:46:e5:e7:2c:ac:4c:61:02:24:81:5a:3d:
ed:55:7e:be:53:42:1b:c0:05:dd:c0:32:c2:2b:b9:2f:85:67:
f0:06:d2:43:a4:27:3d:a8:86:6c:d4:46:b7:71:8f:e0:c3:71:
59:0d:1d:e9:6f:d9:46:89:ea:bc:cc:3a:12:f1:ee:75:51:23:
8e:7d:0d:dd:b0:c6:e3:d0:f8:38:5f:22:79:92:36:c4:4d:97:
c4:b8:df:9c:25:97:09:77:4a:59:71:60:4e:32:b8:42:0f:4e:
10:f8:d6:0f:9f:da:51:3c:32:23:1d:66:f1:15:a4:41:10:87:
1a:6f:fd:d9:ac:65:bd:68:91:2d:67:52:a6:f1:34:e8:63:a8:
3c:31:8b:d7:9d:0c:b5:2f:f9:73:d9:b1:42:51:b3:ef:9f:06:
52:45:a0:ed:84:d4:87:33:19:41:81:52:61:68:7e:f8:ff:8d:
f4:cd:28:38:e4:72:60:32:60:af:76:af:24:be:29:3d:d6:e8:
21:a1:f9:1e:4a:a5:e2:32:42:82:89:94:3e:91:c5:e4:43:4c:
5b:58:5c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:46 2024 by rpki-client on console-fra.rpki-client.org