Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/Qs6fjgv9mlE0CpJvkvbMRxwUW_g.roa
File: Qs6fjgv9mlE0CpJvkvbMRxwUW_g.roa (raw, json)
Hash identifier: aorYhMfPrOZpXq31ySdSVc8rqW9XOGWmlUdkQx86iEU=
Subject key identifier: 42:CE:9F:8E:0B:FD:9A:51:34:0A:92:6F:92:F6:CC:47:1C:14:5B:F8
Certificate issuer: /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial: 018C6E0ABAD28564AEC7F2371FF26F00E750
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/Qs6fjgv9mlE0CpJvkvbMRxwUW_g.roa
Signing time: Fri 15 Dec 2023 15:14:06 +0000
ROA not before: Fri 15 Dec 2023 15:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29226
IP address blocks: 193.105.93.0/24 maxlen: 24
91.240.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:0a:ba:d2:85:64:ae:c7:f2:37:1f:f2:6f:00:e7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Validity
Not Before: Dec 15 15:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42ce9f8e0bfd9a51340a926f92f6cc471c145bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:4c:87:e9:a1:0b:d7:2a:46:fb:b8:5a:21:
e4:75:ac:0a:40:a7:50:5e:18:4c:b5:69:81:15:ab:
70:06:31:bb:7e:ce:df:32:6b:c5:50:eb:43:b7:71:
0a:5c:a7:0e:cf:9b:66:07:e8:46:a7:81:1d:4e:2b:
d8:8a:41:1c:90:07:14:68:bc:ce:be:74:bb:90:77:
24:c3:4d:22:5c:34:d4:bf:67:55:f5:36:36:c4:05:
8c:f1:c3:24:9e:cd:7e:53:74:7d:2d:35:3b:99:b3:
a2:5d:f0:0d:f5:ff:dd:13:b8:4f:b5:0e:87:21:1e:
2b:f2:76:b9:d9:f2:5e:9f:d4:c9:49:b6:22:51:a0:
f0:1c:b1:50:22:d5:bf:25:ac:ca:58:fd:54:9d:57:
33:5c:12:d3:8f:1b:74:52:1f:07:71:96:02:de:9f:
83:35:bf:9d:a7:75:09:a5:d5:23:74:c4:91:01:42:
32:06:eb:c1:a9:62:88:db:58:fe:6d:5b:81:a0:20:
27:02:09:72:e0:22:80:e9:ca:af:d3:bf:2d:90:79:
21:bb:4e:70:bb:7c:ef:18:b9:24:65:8a:46:dd:84:
cb:d8:e1:26:43:ba:d7:b8:c0:33:64:e7:9c:15:7d:
ec:98:1e:fc:7c:42:6b:22:78:4b:46:67:77:97:b0:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:9F:8E:0B:FD:9A:51:34:0A:92:6F:92:F6:CC:47:1C:14:5B:F8
X509v3 Authority Key Identifier:
keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/Qs6fjgv9mlE0CpJvkvbMRxwUW_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.242.0/24
193.105.93.0/24
Signature Algorithm: sha256WithRSAEncryption
98:62:4a:20:05:3f:6b:e8:13:e7:e5:78:8b:6a:b7:1f:48:bb:
a2:a7:ac:ba:94:9e:31:53:c8:3c:99:a2:db:68:f8:98:fe:b5:
0a:12:e5:0b:3d:93:78:c1:92:00:56:69:c5:04:f2:de:9b:34:
75:44:c8:59:ed:09:d4:79:0c:0a:33:d4:29:c8:cd:8d:d2:99:
04:10:d6:aa:ef:ea:80:33:2c:c3:cb:c4:2d:fc:33:8e:f0:0e:
f3:87:91:94:03:3b:45:5c:3d:d1:43:75:d0:7c:27:6d:5a:6d:
98:0e:ec:7f:a6:fc:25:3d:33:d6:4d:07:6a:f2:59:ce:22:54:
a9:5b:03:f4:99:7b:b4:30:56:85:78:62:8b:cc:bb:6f:ee:7b:
56:1d:31:77:1e:0a:33:21:66:83:78:fb:5b:b5:27:05:47:e2:
b2:bc:f5:d7:04:22:bd:73:a2:52:71:03:5d:cb:2c:aa:91:39:
82:4b:45:f8:cf:e5:9c:94:0b:0f:68:fb:2c:0e:13:52:03:ab:
d4:70:5c:6c:25:23:48:02:2e:f5:b0:7a:c4:8f:fd:74:81:54:
1b:6d:98:b1:af:b5:76:54:61:89:e9:82:a4:7b:f4:69:ec:c1:
b3:2f:aa:56:e9:64:92:a7:78:e2:40:e7:5f:ec:8e:f9:21:ef:
eb:6b:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org