Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/QIVpau8Z7AMXkwtcm0jFxnXg8vs.roa
File: QIVpau8Z7AMXkwtcm0jFxnXg8vs.roa (raw, json)
Hash identifier: uCH03HV9OXfG0RFtuCxhaicPXlKqGGxMSMui/uOt35c=
Subject key identifier: 40:85:69:6A:EF:19:EC:03:17:93:0B:5C:9B:48:C5:C6:75:E0:F2:FB
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 01919CE29D4C67796B9208BC1CA32570766F
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/QIVpau8Z7AMXkwtcm0jFxnXg8vs.roa
Signing time: Thu 29 Aug 2024 06:46:22 +0000
ROA not before: Thu 29 Aug 2024 06:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3292
IP address blocks: 2.110.0.0/20 maxlen: 20
2.110.16.0/22 maxlen: 22
91.199.190.0/24 maxlen: 24
185.158.162.0/24 maxlen: 24
185.158.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 07:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9c:e2:9d:4c:67:79:6b:92:08:bc:1c:a3:25:70:76:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Aug 29 06:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4085696aef19ec0317930b5c9b48c5c675e0f2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:84:04:ca:a8:7d:eb:1e:a7:e1:78:fb:ed:c7:
64:04:17:d8:57:91:9c:0b:49:2c:a7:2e:d7:ce:86:
15:2a:ef:8f:e2:52:64:db:f6:a8:de:a2:e2:68:33:
cd:11:79:64:f5:64:75:d8:bc:36:da:ed:2e:53:e3:
89:b4:88:35:99:76:c5:c1:e0:6e:85:af:cc:d1:7a:
d2:d1:31:1c:7e:95:01:8d:f4:a1:7f:3b:8c:a6:18:
51:b1:8e:62:e4:aa:51:34:37:df:65:54:e0:ae:53:
82:a9:2e:54:53:cb:a2:27:f5:b0:fd:e0:15:1c:5e:
15:47:a3:75:3c:df:49:81:c4:f2:ba:d5:75:d7:f6:
64:e0:a7:9a:4a:4e:79:b0:40:7a:ba:ac:b8:66:cd:
3d:81:05:a2:e9:5d:8c:5a:06:de:cc:bc:4d:9e:bc:
36:63:e2:1c:0f:a8:48:a3:f0:a8:ae:df:84:66:8e:
ea:e7:07:77:bc:4f:cd:ca:81:ee:50:d3:46:a9:14:
1f:e2:4d:55:a0:7b:74:55:41:06:ed:83:09:9a:2e:
3a:68:44:6d:ea:dc:f9:07:c6:da:a8:f6:01:78:a5:
31:32:ee:3e:32:94:4c:ec:93:f5:d3:a7:24:8c:a8:
d6:ae:0c:27:cb:0d:65:23:96:45:24:44:cf:70:92:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:85:69:6A:EF:19:EC:03:17:93:0B:5C:9B:48:C5:C6:75:E0:F2:FB
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/QIVpau8Z7AMXkwtcm0jFxnXg8vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.110.0.0-2.110.19.255
91.199.190.0/24
185.158.162.0/23
Signature Algorithm: sha256WithRSAEncryption
32:5d:f6:17:5e:27:51:20:f6:ed:9f:0b:bc:76:c2:f2:5e:e0:
61:a9:ba:c1:2c:49:7c:38:25:1f:91:5f:7b:63:8e:c0:91:d6:
58:49:bf:ca:9a:5b:7b:8f:16:69:f2:ea:49:4c:8b:30:51:b2:
6f:c2:50:0a:10:59:24:57:02:a5:12:ec:bf:79:7a:29:5e:45:
b9:6d:e2:63:95:c4:92:5b:6b:2c:af:c9:3d:1f:f4:47:3b:ef:
ff:86:d6:51:3b:82:e3:5b:c0:fa:f2:79:5a:19:f7:0f:58:6a:
e2:e0:a6:42:c9:82:47:d9:78:b2:76:d8:5a:6e:49:e7:76:db:
6c:14:de:14:11:62:f6:c3:5e:14:55:6e:8a:7b:c2:7e:7c:7d:
71:27:bb:94:43:fe:14:49:d7:32:78:ce:9e:2c:4c:05:1d:ba:
a5:ca:ec:f1:c1:07:42:c6:ca:5e:2e:b2:8f:e7:c5:10:ef:41:
90:c0:46:72:b6:20:4d:05:e6:88:5d:05:b7:16:0e:86:96:96:
6e:70:76:11:a4:fb:9d:4f:51:45:a6:fb:4e:f2:3e:98:db:f5:
66:4b:98:8a:39:a0:cf:ba:93:f5:f6:e8:ea:4d:69:66:17:cb:
56:16:f8:fd:26:44:99:35:7f:50:e7:47:8f:c5:b9:af:1c:a8:
b4:50:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 09:40:51 2024 by rpki-client on console-ams.rpki-client.org