Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/qW-W591fVC408gOA_SA0flLQR14.roa
File: qW-W591fVC408gOA_SA0flLQR14.roa (raw, json)
Hash identifier: S4kLGa76xLzQvhC3M+3S6SdhnFNB6l6vVq5oWwjwc2M=
Subject key identifier: A9:6F:96:E7:DD:5F:54:2E:34:F2:03:80:FD:20:34:7E:52:D0:47:5E
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 018572559DF88721A1CD3B3FFB311853B748
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/qW-W591fVC408gOA_SA0flLQR14.roa
Signing time: Mon 02 Jan 2023 11:54:51 +0000
ROA not before: Mon 02 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205847
IP address blocks: 193.36.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 14:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:9d:f8:87:21:a1:cd:3b:3f:fb:31:18:53:b7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: Jan 2 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a96f96e7dd5f542e34f20380fd20347e52d0475e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:50:01:30:5b:e2:15:78:0d:5d:ee:a4:73:
3c:a2:cd:c6:15:60:f4:6f:7a:e4:35:5e:1d:eb:9e:
4a:98:b8:8e:52:22:36:d4:7d:35:c8:e6:78:e0:9f:
1e:5d:7e:e4:ef:e9:54:01:f4:97:78:71:25:a7:90:
b1:44:c2:8f:3e:e1:e6:e8:77:39:fd:99:f7:27:55:
13:ac:63:e1:7e:7e:1b:35:80:af:3a:9e:ea:c8:6d:
ad:8f:ad:80:51:b6:59:e6:31:7e:a3:37:d3:d6:e7:
13:1e:21:6e:d1:77:4c:e8:63:79:43:58:e0:b3:ad:
4d:84:94:11:70:91:a6:54:26:c1:be:f7:c5:a9:38:
44:72:86:30:4c:5f:63:b9:50:dc:e3:11:53:41:ed:
ab:8c:0e:c6:c9:7d:2b:47:08:a1:7c:33:32:53:1d:
a4:fb:6e:43:78:db:19:28:d4:41:a5:f9:aa:0a:9f:
1e:a2:66:67:ce:76:19:70:9e:3d:29:a8:ce:bb:db:
12:87:7d:4c:9c:e3:39:26:12:9b:1f:36:a0:b1:00:
5a:1e:04:69:0f:1c:dd:a5:9f:ab:ad:20:4e:06:5f:
ce:37:86:a2:b3:91:5e:00:a5:ba:0c:1f:bf:e0:b4:
ee:79:ee:6d:3d:a2:28:6a:ef:d7:8d:0b:9a:b1:8c:
32:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6F:96:E7:DD:5F:54:2E:34:F2:03:80:FD:20:34:7E:52:D0:47:5E
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/qW-W591fVC408gOA_SA0flLQR14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:09:1d:6b:2c:8c:7f:b6:98:b1:c0:f0:8a:c9:17:80:87:da:
b5:50:23:86:58:82:69:1d:f7:c5:22:2b:05:36:72:2c:97:22:
dc:1b:cc:a9:b5:13:86:95:80:ca:d2:51:40:93:92:85:f8:c8:
f5:e4:0b:60:3e:47:10:39:44:c3:88:2f:78:c4:3c:27:40:6f:
d9:04:29:2c:6c:ca:03:85:56:c5:7c:2d:b1:2a:b9:06:02:f7:
62:34:31:a7:e6:e8:a3:a3:9c:c2:fc:b9:c8:25:7c:93:44:28:
07:b6:b9:4c:03:7b:8a:66:4d:0a:2b:94:9b:f8:87:48:a3:c9:
32:35:b6:5f:de:f3:be:09:52:74:3e:87:90:7d:66:60:9e:18:
5b:bf:c4:a0:3c:39:e6:a1:a3:da:59:54:65:d0:50:b8:b8:77:
11:61:6e:7d:dd:fe:99:0c:c2:71:b6:ab:f4:ec:da:d2:1e:ba:
a6:2a:c8:8f:fc:7a:e1:c6:7c:39:fc:aa:50:ed:2e:6a:cb:1a:
b8:67:d7:87:24:5f:88:ae:fb:0d:4c:6f:9e:45:b3:51:f2:9e:
d4:9f:85:13:35:71:dd:e7:8c:e1:ac:69:3c:12:30:af:cf:1b:
6e:73:a9:3a:18:c1:ac:a5:24:ff:95:a6:98:a2:74:ab:93:45:
94:19:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:10 2024 by rpki-client on console-ams.rpki-client.org