Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QB_XLbNOmxhqbhTCmmN8EUm_PMo.roa
File: QB_XLbNOmxhqbhTCmmN8EUm_PMo.roa (raw, json)
Hash identifier: 1OhB6NVXaauCF3zhW07zzeMKS0rOM/il9XowwAlMYMk=
Subject key identifier: 40:1F:D7:2D:B3:4E:9B:18:6A:6E:14:C2:9A:63:7C:11:49:BF:3C:CA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018B53910AA69A3B4B315B89B3E67BA24D6C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QB_XLbNOmxhqbhTCmmN8EUm_PMo.roa
Signing time: Sat 21 Oct 2023 18:48:16 +0000
ROA not before: Sat 21 Oct 2023 18:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47392
IP address blocks: 188.240.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 17:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:53:91:0a:a6:9a:3b:4b:31:5b:89:b3:e6:7b:a2:4d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 21 18:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=401fd72db34e9b186a6e14c29a637c1149bf3cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c0:c7:27:35:e1:09:2b:69:89:ce:6b:bb:ec:
5f:b5:ba:c1:c9:a9:79:fc:72:44:00:9f:e1:bd:11:
d6:ce:29:d3:8d:f5:87:0b:ba:61:b3:88:ad:16:63:
18:ca:f1:ea:8c:3d:86:73:d1:a6:b1:7c:d6:f3:12:
ed:41:96:7b:1d:54:ce:a2:a0:a9:bc:02:e6:d0:e3:
64:4a:c0:c7:e4:1a:6e:66:97:a8:b4:ae:8e:df:a2:
00:00:dd:5e:17:fd:cb:63:85:7a:4c:a6:73:d9:62:
1d:9d:f0:30:e5:b5:2a:98:8d:b1:85:be:c3:12:f8:
14:fd:92:e6:31:41:e4:8f:d1:f6:4b:34:bf:ca:e0:
58:41:87:e6:7c:52:8f:a7:e0:37:4a:eb:a1:9d:35:
60:7e:e1:75:72:3a:32:3c:33:c6:2e:78:d6:e3:0f:
bb:06:40:68:d2:1b:a8:eb:c2:ec:17:7f:6a:a4:4c:
88:3c:bc:aa:fd:b7:f0:26:fc:54:4b:f1:ec:22:af:
45:ae:8f:63:fd:9f:db:74:a3:00:b6:8a:df:b8:90:
dd:fe:26:9c:30:15:a9:0c:86:91:9c:f9:d4:d6:00:
46:07:d0:22:14:7b:a3:e1:1a:6a:df:3a:b5:90:ca:
4e:ee:39:f5:9d:90:7c:43:b0:29:69:ad:16:76:f3:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1F:D7:2D:B3:4E:9B:18:6A:6E:14:C2:9A:63:7C:11:49:BF:3C:CA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QB_XLbNOmxhqbhTCmmN8EUm_PMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.233.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2f:90:6b:8f:1e:1f:bd:31:db:8b:fb:94:e2:ed:ef:21:f8:
93:67:1e:f2:d8:a8:56:c3:63:9e:1e:e5:ba:13:77:1f:27:fd:
af:33:2f:de:9f:fe:a1:c0:ae:2b:75:5d:2a:91:c5:e1:9e:76:
cd:d1:83:1e:73:ec:43:94:fc:06:70:e1:be:01:b6:0b:ad:6e:
3c:46:0b:da:aa:22:e6:61:03:3e:47:53:3a:6c:03:63:af:fe:
3e:7f:a8:10:35:6d:12:8a:bb:9f:0a:3b:39:5f:41:db:ab:17:
43:9e:13:0a:60:53:8b:af:c3:44:6c:4d:26:24:12:e1:e1:0a:
6e:2b:43:a6:3d:f8:13:4c:6e:ca:c6:71:f8:a8:64:1c:56:58:
7c:83:34:5a:64:a2:99:a3:f0:c2:f2:08:90:b5:22:34:7a:7c:
4a:53:d0:ae:11:6d:43:cc:c1:d7:3e:ad:63:90:d4:49:98:bb:
ae:d2:13:31:28:3e:38:7d:5e:cb:d6:45:5a:53:db:ce:cd:a3:
a4:2b:4d:5c:5e:8b:34:43:00:fd:d7:c2:83:28:1f:61:78:ae:
80:43:8c:3b:16:aa:f6:2f:56:7e:6f:91:c4:2a:02:fe:ca:88:
70:c3:2f:7a:17:a9:db:76:66:41:df:6d:ce:3d:2d:a5:cf:e0:
d3:a6:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:45 2024 by rpki-client on console-fra.rpki-client.org