Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/q1sf7BCtxqN_Mcrtcmr7_QinFTU.roa
File: q1sf7BCtxqN_Mcrtcmr7_QinFTU.roa (raw, json)
Hash identifier: q0NJnM7Nr6TmtmouuakL/LTcUx/eCG13RUC5FShI67I=
Subject key identifier: AB:5B:1F:EC:10:AD:C6:A3:7F:31:CA:ED:72:6A:FB:FD:08:A7:15:35
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018C7D3750AA47F4D3DA6DA59D07687D1C81
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/q1sf7BCtxqN_Mcrtcmr7_QinFTU.roa
Signing time: Mon 18 Dec 2023 13:57:06 +0000
ROA not before: Mon 18 Dec 2023 13:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198100
IP address blocks: 45.149.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:37:50:aa:47:f4:d3:da:6d:a5:9d:07:68:7d:1c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Dec 18 13:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab5b1fec10adc6a37f31caed726afbfd08a71535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:d7:08:d9:f2:b6:2a:7f:d9:53:fd:0b:10:
49:e0:1f:b7:6f:de:ca:5c:56:f9:e0:a4:ae:b8:62:
87:7c:b2:86:f9:b9:c7:07:d6:5f:42:ca:2c:37:46:
e1:fa:de:13:64:01:cf:ae:10:8a:6f:f7:ad:f0:f0:
b1:f4:d2:e6:df:2d:9c:6b:21:d9:38:03:c8:e0:66:
fd:d0:2f:7a:66:1b:f0:da:7e:76:ab:be:62:80:9b:
cc:0e:2d:cc:2d:23:32:06:fe:da:f2:ad:ad:3d:d4:
5a:ea:7d:3a:68:6d:d6:9b:e5:c8:e5:d9:ab:ea:c6:
2f:4f:ac:4c:84:99:13:58:61:85:8f:33:7b:9d:c5:
de:7d:19:94:69:ab:0b:c2:9b:2d:2d:1c:23:de:cb:
ff:b0:e8:51:a2:8b:33:58:b5:1a:90:85:08:92:e2:
e3:af:77:59:2d:b0:eb:23:a2:23:fc:db:b0:63:06:
fd:93:5d:b4:3c:10:8f:eb:ff:4e:21:9e:44:44:c0:
68:ea:bb:c5:0a:e4:d1:5f:fd:15:25:83:dc:f5:69:
cc:e2:9d:0c:75:45:4e:15:73:df:a9:93:09:e8:49:
a8:a7:16:a6:f8:27:15:99:33:62:19:4f:44:3d:9b:
bf:f1:7d:7d:31:00:c4:63:ca:e1:9a:b8:a3:78:f1:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5B:1F:EC:10:AD:C6:A3:7F:31:CA:ED:72:6A:FB:FD:08:A7:15:35
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/q1sf7BCtxqN_Mcrtcmr7_QinFTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/24
Signature Algorithm: sha256WithRSAEncryption
73:77:10:51:2e:1e:f0:6e:00:5c:e0:b7:e7:2b:1e:86:8f:35:
74:fb:e1:83:82:c6:e1:f6:23:01:87:54:b5:3a:e4:5a:70:bc:
a8:b2:7a:44:2c:14:93:fd:b8:35:fb:1b:ac:54:9a:ff:03:fa:
84:96:d3:c6:9b:c3:a0:47:1b:7a:3e:c8:5a:5c:6f:28:18:06:
a3:fd:e0:ad:f2:b6:86:0f:36:e1:bb:44:f6:15:e8:18:5a:28:
cb:c5:a3:f9:5c:ae:79:9a:c6:09:01:0b:1a:c9:6a:47:aa:a9:
d4:be:ab:32:08:3d:ac:a5:28:85:9d:fa:fd:4c:73:66:29:97:
ee:92:49:11:ed:96:e0:7e:56:40:d0:aa:f8:57:8a:6d:9f:74:
24:0e:3a:16:66:e1:bf:01:ff:f5:ab:4f:4e:94:77:4b:16:5d:
e0:28:3a:ab:74:30:cf:93:ec:c1:83:ab:7f:42:f7:a0:a0:cb:
b4:3d:39:34:1e:07:c4:a0:46:8d:3f:46:57:a5:fb:ad:19:38:
27:80:65:c0:8f:22:f6:69:d0:97:80:9f:bc:cd:d8:de:b5:83:
89:33:2c:45:9d:ed:f0:ed:1f:7d:12:98:aa:ab:db:41:a2:fa:
46:95:57:f8:0f:f0:99:91:64:75:5a:ae:e7:ff:42:a8:33:53:
76:d5:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:17 2024 by rpki-client on console-fra.rpki-client.org