Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QUPKBptV0h1yKSYXvVU2lLt6D7I.roa
File: QUPKBptV0h1yKSYXvVU2lLt6D7I.roa (raw, json)
Hash identifier: 7IYCwThgXTfg/384PLIsQMfTjiUg0X1mB+WhbLs4fzA=
Subject key identifier: 41:43:CA:06:9B:55:D2:1D:72:29:26:17:BD:55:36:94:BB:7A:0F:B2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01908251D30C5023328A4614609BB43EE505
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QUPKBptV0h1yKSYXvVU2lLt6D7I.roa
Signing time: Fri 05 Jul 2024 09:55:18 +0000
ROA not before: Fri 05 Jul 2024 09:55:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 91.186.216.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 21:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:51:d3:0c:50:23:32:8a:46:14:60:9b:b4:3e:e5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 5 09:55:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4143ca069b55d21d72292617bd553694bb7a0fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:19:f1:ef:19:8e:ef:12:3d:54:4a:e1:e2:
99:a7:f9:db:aa:3b:56:59:f3:6e:79:c9:1f:76:ed:
da:5d:34:27:4d:48:09:91:c9:73:1c:b5:84:46:a9:
4e:38:1f:08:ab:2e:53:0a:78:63:7f:a6:81:34:e9:
d1:99:06:eb:3c:50:ce:ee:09:97:38:08:0c:67:6a:
51:dd:78:a3:ad:5a:36:4a:c5:e3:d6:98:2f:40:6c:
c2:77:61:3c:6e:ba:6f:f0:c9:71:a4:22:38:7c:ba:
6c:d2:7d:73:86:fa:8f:01:9a:78:33:52:f6:4f:05:
30:12:fb:95:a0:64:f2:d6:04:ab:4c:09:f2:b1:fe:
32:37:5b:17:a8:85:e3:13:a5:19:23:44:16:83:93:
fa:e4:d0:b2:42:16:29:05:67:91:65:17:ce:dc:46:
3d:cf:1f:ea:8c:ad:34:b9:45:a9:a6:55:84:48:e4:
b7:b5:10:a5:69:52:57:e6:f0:e5:69:00:12:1e:c4:
01:f8:b6:09:58:4f:7b:32:be:94:fa:c6:3e:33:00:
bf:c5:19:6a:02:05:47:93:01:7d:e4:b8:cd:10:1b:
90:14:82:e5:6e:58:7c:94:2d:78:b2:d8:39:7b:dc:
e7:bb:09:3c:aa:d5:a8:95:b2:0c:41:e8:d7:8c:f0:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:43:CA:06:9B:55:D2:1D:72:29:26:17:BD:55:36:94:BB:7A:0F:B2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/QUPKBptV0h1yKSYXvVU2lLt6D7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.216.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:1a:f8:f8:ea:99:68:0d:9e:39:4a:3a:16:5c:fe:ff:cf:17:
1e:07:36:08:fd:ce:85:3b:16:4c:c4:da:b7:48:d4:04:98:5d:
b6:0f:1e:42:0a:40:08:09:25:03:17:89:5c:39:93:75:68:3f:
ee:d5:5b:6e:49:c1:f4:4e:d7:22:fe:f4:07:71:6c:75:62:cf:
3f:18:72:3c:3d:e3:69:88:92:c4:6f:87:c7:36:2c:c9:7e:dd:
5c:4b:b4:87:c5:31:47:bb:29:f6:83:18:9c:8c:ae:47:65:f4:
37:96:68:a4:e3:d1:11:f6:72:0e:c2:7d:55:d0:a1:b4:13:03:
ac:2e:ea:bd:4f:cc:15:a3:71:d5:40:07:75:ae:40:27:40:cd:
c1:d1:11:4e:05:71:b4:e6:5b:78:12:13:63:b0:2f:2a:12:eb:
c3:99:48:51:83:6a:2d:d7:7a:44:0a:63:53:81:52:23:97:1e:
13:17:8b:2f:19:9c:ea:c0:3f:21:ce:4e:83:ad:95:d5:d9:45:
c7:ca:7a:5b:e3:89:b7:fa:00:cb:64:cb:5f:7c:0e:c6:af:6a:
dc:26:78:b6:d2:40:97:f5:9e:dc:1a:5e:1f:98:c4:2a:2e:05:
80:4c:31:89:5f:1f:b0:ba:11:5a:42:35:65:5c:11:4c:f8:64:
5c:b7:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 00:01:15 2024 by rpki-client on console-ams.rpki-client.org