Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/qUKZKX63PiOpGWNPyD0JFTJfa0A.roa
File: qUKZKX63PiOpGWNPyD0JFTJfa0A.roa (raw, json)
Hash identifier: RnDEabb3CaXMpVVM1ExtNcDO+Q7BzPSaxkPYGizTkvA=
Subject key identifier: A9:42:99:29:7E:B7:3E:23:A9:19:63:4F:C8:3D:09:15:32:5F:6B:40
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 019104041F17F4AA62AB7E40B6D12F705F76
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/qUKZKX63PiOpGWNPyD0JFTJfa0A.roa
Signing time: Tue 30 Jul 2024 14:21:04 +0000
ROA not before: Tue 30 Jul 2024 14:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62164
IP address blocks: 193.150.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 05:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:04:1f:17:f4:aa:62:ab:7e:40:b6:d1:2f:70:5f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jul 30 14:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a94299297eb73e23a919634fc83d0915325f6b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:83:e4:b4:29:53:3d:25:4a:9d:5f:c5:f3:
46:51:91:3f:ce:9a:15:5f:a7:ab:69:4c:1e:ea:1b:
9c:46:3a:dd:2c:bd:f6:c2:0f:b1:b1:6f:40:74:7c:
72:ed:99:df:8b:23:27:42:f4:e1:28:89:ec:45:a9:
21:05:ec:c8:10:b6:e4:dc:c3:aa:84:e4:8a:92:e2:
64:40:1a:45:33:e7:81:87:f8:68:60:1c:57:06:cd:
00:c0:fd:8b:6b:2c:3e:69:69:70:1c:41:32:6c:e8:
a3:2e:00:0d:a1:49:cd:12:3f:9f:77:ef:c4:7c:17:
5e:26:db:7f:f5:fe:89:18:2f:18:6e:f4:bb:c4:75:
8e:7b:da:d2:9d:07:7a:ea:b5:90:9b:67:2a:a3:b1:
a9:2e:b7:a1:22:3d:71:05:35:69:f8:49:06:3d:8f:
a4:d5:3c:f9:ae:7f:0e:80:3d:4a:cf:b4:31:84:ed:
ea:2c:fc:56:c2:6c:2a:df:e6:19:26:76:ea:ef:49:
96:a4:58:43:1e:a8:6f:ca:e7:27:0b:ee:8a:d1:db:
71:63:eb:93:2c:00:a5:92:7d:21:88:6c:34:e8:85:
b1:3b:3d:11:eb:51:92:84:43:15:ad:11:bd:63:f0:
f9:d4:e2:3c:a5:f1:3a:1a:5d:95:bd:0a:29:54:fa:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:42:99:29:7E:B7:3E:23:A9:19:63:4F:C8:3D:09:15:32:5F:6B:40
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/qUKZKX63PiOpGWNPyD0JFTJfa0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.70.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e6:a8:dc:57:3d:1b:0e:66:de:05:ea:39:74:b2:28:5c:4c:
dc:69:54:91:02:5e:c9:f3:34:1b:a6:c0:0e:a8:9b:06:1c:9c:
a0:8f:76:b2:cd:cb:ac:0c:ce:07:56:e4:a3:19:b1:88:da:9e:
5a:08:b1:34:d5:29:02:b4:21:9b:c2:c1:2c:77:a9:6e:b1:c9:
fe:97:10:34:39:64:66:dd:19:22:7b:e2:8a:9a:05:06:88:c9:
e6:14:a2:94:cf:14:5b:98:cd:cc:10:9d:20:9f:77:80:90:33:
d3:73:8b:11:2a:da:ca:92:cf:43:9e:7b:7a:40:ed:6b:08:ae:
2e:a3:ad:e5:34:4a:bd:b7:88:5e:37:f2:88:64:93:0d:77:1b:
4c:f7:1b:7a:47:dc:14:4a:69:76:fd:69:3b:9d:61:2f:52:52:
7a:a0:31:9e:73:c3:b3:2b:a1:da:ba:e2:1a:15:9a:48:35:ea:
f4:d0:a5:f6:38:11:bf:2b:85:a7:11:b8:84:88:4c:9a:f8:bb:
a3:91:30:b6:6c:d0:81:c9:4f:27:40:d9:e9:fc:6f:35:f5:b9:
b6:46:9c:b4:51:e0:e8:e2:43:45:ae:99:77:19:b1:f4:65:82:
0c:8e:fe:8e:18:3b:2c:07:e8:a4:5c:53:68:1d:ed:63:58:40:
c3:cd:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:50 2025 by rpki-client