Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/QEFPOSWmaWRoC6gP3wqi7pbM5gk.roa
File: QEFPOSWmaWRoC6gP3wqi7pbM5gk.roa (raw, json)
Hash identifier: /4EZtnk7stPvGnGMsG9RGu5nVMyHCXKG20LQz31Q9Kk=
Subject key identifier: 40:41:4F:39:25:A6:69:64:68:0B:A8:0F:DF:0A:A2:EE:96:CC:E6:09
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 018570FBD8FBEE29DC79F298BF4CB7F388FF
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/QEFPOSWmaWRoC6gP3wqi7pbM5gk.roa
Signing time: Mon 02 Jan 2023 05:37:11 +0000
ROA not before: Mon 02 Jan 2023 05:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15827
IP address blocks: 193.41.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:d8:fb:ee:29:dc:79:f2:98:bf:4c:b7:f3:88:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Jan 2 05:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40414f3925a66964680ba80fdf0aa2ee96cce609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:a1:9c:df:b6:eb:d8:cb:6d:54:10:5b:22:
d7:01:92:a9:b0:5e:30:a7:c6:3c:1e:5e:23:d8:52:
a7:0b:8e:34:54:15:b5:02:58:a5:a6:ac:62:da:6a:
0e:b5:dc:f8:b0:bd:13:de:d9:a9:31:93:07:4a:ab:
e3:f8:72:48:20:6f:d8:a0:4d:d6:32:c4:c2:3f:f1:
27:77:2a:8c:8d:aa:56:88:56:f8:7c:0f:cd:4b:1f:
26:dc:cd:7b:95:0c:9d:26:e3:b5:af:ae:bd:b1:0c:
7f:64:1b:d2:98:a4:bb:86:8c:60:97:e2:de:ba:44:
1e:f5:2f:b7:8e:f6:af:af:ca:f0:ef:49:4c:bf:e4:
2e:5c:33:6b:8d:68:bd:4d:6d:ba:d5:c6:1a:4e:36:
f3:fd:c7:af:6f:70:8f:1a:89:d5:de:0e:d0:a0:4a:
d4:4e:21:b4:bf:12:3b:29:43:29:8c:98:4e:38:7f:
dd:28:c6:1f:de:b6:d1:1e:f3:74:34:99:c2:a4:16:
f8:a9:f1:37:57:9b:a7:37:5a:44:bc:b7:bf:6b:c6:
0f:9b:dc:95:ad:09:7c:51:14:a5:1c:4d:dd:63:67:
11:35:4b:23:cd:a9:6b:96:21:2f:eb:f3:86:ee:14:
b9:17:0d:a9:68:f0:95:7a:a1:1e:f3:78:4b:81:43:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:41:4F:39:25:A6:69:64:68:0B:A8:0F:DF:0A:A2:EE:96:CC:E6:09
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/QEFPOSWmaWRoC6gP3wqi7pbM5gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.45.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f8:b9:65:51:78:20:fd:f5:3c:df:4a:da:f6:7e:c2:41:b2:
71:58:5d:bc:29:c8:8d:f6:bc:53:82:bd:86:48:7b:93:61:8d:
e4:38:ab:4c:16:13:0e:50:0e:fa:70:bf:05:ea:6a:c4:b1:bf:
21:7c:5d:11:a7:4b:0d:d9:8c:31:c2:f1:91:01:9f:64:81:e6:
29:af:a9:ce:44:ce:ed:7c:96:50:14:f4:4b:dd:fe:57:d1:fe:
76:7f:ef:0f:ba:35:59:c4:2b:a6:2f:7a:61:12:d7:c3:16:89:
6c:f6:b1:09:52:82:f0:ba:cf:40:6b:1a:fd:68:1c:1f:44:2b:
e6:3d:05:41:96:dd:e2:01:91:0e:9b:70:b8:03:78:08:ee:4d:
bd:2d:ee:80:63:e3:1b:a5:81:c8:6f:7a:fb:b3:3c:f0:c7:5e:
67:a2:28:68:3f:12:9d:a5:e9:02:02:d2:86:2f:b7:6f:28:07:
2b:23:92:05:1c:f2:ad:72:e1:9a:a3:e4:2b:8c:5d:cd:70:40:
df:5a:7f:f9:af:f4:af:ee:d3:2e:87:2e:78:33:bb:dd:6f:ad:
2d:5f:95:67:ec:e6:23:88:20:39:e4:56:d3:9a:3c:b6:a6:e9:
5f:6c:4a:6a:db:92:7f:b5:57:ec:9f:75:ee:3a:ef:36:ea:f1:
84:2d:e1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:04 2024 by rpki-client on console-ams.rpki-client.org