Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/QK-51fochtgCFG6e93f3VnAVjhs.roa
File: QK-51fochtgCFG6e93f3VnAVjhs.roa (raw, json)
Hash identifier: Sm7B7cgXLIdCnECm5cGbNiz2FfRXn1K862HSluhv0C0=
Subject key identifier: 40:AF:B9:D5:FA:1C:86:D8:02:14:6E:9E:F7:77:F7:56:70:15:8E:1B
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 01919AFD61FE3585C8561FB8D25A686C4FB3
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/QK-51fochtgCFG6e93f3VnAVjhs.roa
Signing time: Wed 28 Aug 2024 21:56:22 +0000
ROA not before: Wed 28 Aug 2024 21:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 145.243.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9a:fd:61:fe:35:85:c8:56:1f:b8:d2:5a:68:6c:4f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Aug 28 21:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40afb9d5fa1c86d802146e9ef777f75670158e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:48:f2:95:99:04:fb:37:45:b8:8b:0e:6b:
03:05:d9:6a:fa:97:61:62:27:1d:7e:6d:29:38:fe:
5a:57:aa:08:c6:8b:65:fd:00:a9:e6:23:d2:57:a9:
e2:a6:95:af:1c:01:bf:96:e0:86:93:09:67:b2:9a:
a0:00:79:1f:69:bb:a8:c9:b4:22:97:9d:55:57:53:
23:d3:98:84:aa:b1:fb:3f:38:c5:7d:7f:aa:eb:8b:
13:7f:57:ef:c5:ac:10:5b:fb:8e:b3:31:40:3e:18:
20:b5:31:4e:da:87:bd:59:c6:cc:2b:db:47:49:a5:
93:ab:95:af:0d:98:45:f0:3b:54:85:b9:32:40:56:
bd:6b:68:07:cb:cb:54:ca:8b:14:0f:3d:45:ab:3a:
59:de:1c:54:c3:7c:a8:b1:64:05:9b:f9:14:10:cf:
33:06:13:72:05:13:69:89:e6:fe:c1:90:7d:21:79:
29:52:4f:f0:69:45:ec:0e:a7:4c:1c:e9:41:97:9c:
5d:e7:ab:42:ee:4b:41:af:ca:f8:70:89:1e:00:39:
8c:80:33:0a:dc:9a:77:8c:db:8c:3d:10:0b:23:6f:
65:8e:33:78:81:45:d7:8d:ea:6e:96:78:58:b7:61:
39:fe:3a:62:78:16:1e:e5:a1:34:03:ff:db:e4:63:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AF:B9:D5:FA:1C:86:D8:02:14:6E:9E:F7:77:F7:56:70:15:8E:1B
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/QK-51fochtgCFG6e93f3VnAVjhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.243.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:14:31:dd:85:bb:11:3b:f0:d7:58:5e:1b:4e:5e:f3:0e:75:
96:af:fe:f6:3b:ef:c8:13:1f:b2:02:d7:3b:a5:d8:90:f1:fb:
0e:bc:92:a4:0e:40:48:6e:bf:6f:e9:ef:f8:10:d6:a7:03:2b:
0d:6f:94:34:cf:bb:56:41:44:2a:3a:2b:fa:70:76:b5:cf:f0:
14:4d:fc:3f:6a:32:20:0b:00:26:be:63:3f:8a:ae:99:e3:22:
2f:e6:02:02:5a:4d:4b:f6:12:be:24:6a:7c:12:ea:cf:be:19:
bb:f2:42:5b:35:d8:d4:4a:a6:1d:eb:f6:c0:75:08:b5:5a:9e:
a4:62:21:9e:57:22:ae:eb:cd:0e:67:8f:c5:09:ca:54:2f:d6:
39:01:fc:7a:3b:16:bb:48:7e:6d:6f:8d:6e:aa:dd:9d:6c:06:
73:7e:db:75:52:31:f9:c7:8d:c6:12:3e:a6:b1:0a:97:27:d4:
a7:f0:49:e3:32:c0:1b:90:32:93:17:89:0a:a6:73:aa:3e:66:
7e:e3:af:e4:af:92:2d:d5:28:2f:40:36:a1:f1:69:f6:cf:21:
94:82:a8:4a:06:fb:38:13:cd:55:8d:63:d6:44:25:3e:3b:a6:
82:2a:65:36:9c:cf:93:35:a7:44:1b:8b:27:40:05:a6:6e:69:
36:42:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:53 2025 by rpki-client