Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/QtPKVE3n_-q5X6jS8uMZjK5_Sq4.roa
File: QtPKVE3n_-q5X6jS8uMZjK5_Sq4.roa (raw, json)
Hash identifier: kOjJgPnmC1z4MHxGcI9F0F8pFoXrDwfxj/0kE2WIryw=
Subject key identifier: 42:D3:CA:54:4D:E7:FF:EA:B9:5F:A8:D2:F2:E3:19:8C:AE:7F:4A:AE
Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial: 0185719561D4EA4A7B68D78F8A16A8E51CC8
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/QtPKVE3n_-q5X6jS8uMZjK5_Sq4.roa
Signing time: Mon 02 Jan 2023 08:24:53 +0000
ROA not before: Mon 02 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200424
IP address blocks: 45.92.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jan 2023 10:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:61:d4:ea:4a:7b:68:d7:8f:8a:16:a8:e5:1c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Validity
Not Before: Jan 2 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42d3ca544de7ffeab95fa8d2f2e3198cae7f4aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:52:e4:75:ea:80:3e:a2:58:43:a6:3d:75:
db:53:ca:ca:93:0d:64:10:48:80:42:dc:46:5b:69:
68:09:f4:05:14:fa:1b:63:cb:6b:7d:19:4a:b0:3c:
72:72:a6:16:a4:ba:40:6e:0e:2b:a3:97:13:a8:51:
a3:17:43:0f:62:ce:f5:88:40:8e:d3:27:8f:0d:d1:
a6:7a:84:51:76:19:d5:4e:56:56:78:3c:27:f4:25:
6f:2e:95:78:e6:57:d1:32:f6:07:4d:cd:86:07:c1:
db:d2:2f:cf:b5:77:cd:e7:f3:49:a8:b1:b2:7b:72:
11:73:6a:5b:b2:0d:d5:68:77:71:11:45:14:9f:d3:
72:ca:c9:48:93:2e:6f:6c:a1:c6:a2:05:ae:7e:59:
c8:34:01:01:a4:6c:7c:e9:73:e0:7e:0f:4d:7c:b6:
b2:79:d3:2f:03:a7:6f:c6:57:e9:0c:5d:1e:7a:99:
20:ab:80:f8:f3:67:59:82:e6:84:4e:c5:5b:5e:d0:
74:77:70:a6:34:0a:21:5e:ae:18:9e:9f:48:23:41:
a8:28:f9:c0:f7:3b:7a:8b:74:52:2e:f3:b8:29:07:
5c:de:a5:e9:34:db:fd:dc:12:50:5c:aa:ae:c5:75:
1f:a4:43:51:6e:e9:33:51:1a:7d:6c:81:a8:fb:86:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D3:CA:54:4D:E7:FF:EA:B9:5F:A8:D2:F2:E3:19:8C:AE:7F:4A:AE
X509v3 Authority Key Identifier:
keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/QtPKVE3n_-q5X6jS8uMZjK5_Sq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.56.0/22
Signature Algorithm: sha256WithRSAEncryption
84:8e:ea:0f:39:72:d3:8e:19:f5:74:8e:5f:c8:9c:cf:99:2d:
72:95:e5:18:34:2a:05:0b:3c:27:50:b3:29:cf:8d:ba:49:5b:
5a:18:d6:36:0b:38:66:02:01:a3:b5:41:d0:a1:23:94:69:93:
c8:5b:aa:05:98:1e:7f:ff:54:e8:2e:6a:24:42:43:c0:f4:fc:
c2:78:4b:53:2a:01:7c:d9:e0:c7:64:b2:2a:d5:bd:98:65:4d:
2e:66:c0:36:24:6d:cb:f8:9b:ee:be:c6:cb:4a:d8:f3:68:10:
be:2d:4b:48:3b:4f:bf:e1:9c:8a:df:5e:7e:64:8f:de:85:ac:
88:5a:f8:2f:fa:3e:25:db:de:f6:07:ae:58:93:f2:7a:e1:04:
92:96:35:6b:63:ef:a1:ce:de:10:d9:e6:79:b5:1d:33:47:b7:
eb:af:4f:63:12:1c:1c:e1:b9:f8:b2:39:e1:dc:ef:5d:87:06:
97:cd:a4:c9:c9:16:ca:4e:84:ac:dc:f8:4c:f5:d7:56:9a:c9:
6b:e2:c0:ff:d4:14:74:41:1a:26:ba:dd:bd:75:71:86:5f:2a:
26:b1:b7:54:9f:f4:ba:6d:6f:b6:82:a5:e3:f6:3a:74:10:79:
0d:5d:ba:d5:ca:08:b4:b1:58:58:a0:19:2f:8b:ea:ba:bf:09:
dd:66:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:26 2024 by rpki-client on console-fra.rpki-client.org