Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/qYRmdKqHWCrFPf6knCiqMDulD4U.roa
File: qYRmdKqHWCrFPf6knCiqMDulD4U.roa (raw, json)
Hash identifier: Gj2fc90VWdQjSrWjekEMaakmcSzIXLfoModJcUi7L98=
Subject key identifier: A9:84:66:74:AA:87:58:2A:C5:3D:FE:A4:9C:28:AA:30:3B:A5:0F:85
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 018623CE0491837456EAED708EE3C61DF898
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/qYRmdKqHWCrFPf6knCiqMDulD4U.roa
Signing time: Sun 05 Feb 2023 22:59:09 +0000
ROA not before: Sun 05 Feb 2023 22:59:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49239
IP address blocks: 193.17.179.0/24 maxlen: 24
193.17.70.0/24 maxlen: 24
193.17.193.0/24 maxlen: 24
193.17.220.0/24 maxlen: 24
2a0f:7540::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 Feb 2023 18:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:23:ce:04:91:83:74:56:ea:ed:70:8e:e3:c6:1d:f8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Feb 5 22:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9846674aa87582ac53dfea49c28aa303ba50f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:50:61:fd:99:eb:94:e0:29:3a:09:29:10:
ee:ec:8f:5d:99:e4:b2:ef:94:53:18:67:58:6a:26:
77:76:70:7c:26:46:a1:69:0c:56:4f:e0:c2:06:96:
98:d6:f4:b7:dd:8c:2e:9b:a4:af:6a:f1:bc:38:0a:
41:b4:1d:a2:58:74:dc:1d:e0:3d:ca:fa:c3:e0:ef:
28:6a:f2:81:86:5a:11:63:5e:16:01:19:12:32:14:
c0:0f:d7:b7:6c:f6:63:64:49:4d:11:b8:7b:7c:ce:
92:16:29:17:b2:b6:db:36:a1:0f:e2:21:3f:87:b7:
dd:74:e6:be:26:b2:7f:f4:20:f5:a2:73:0f:64:4d:
26:2d:a1:fe:6f:91:c7:7e:2b:75:85:80:9c:50:c5:
1c:4c:71:d6:7d:ce:2e:54:e3:0b:a9:9a:0a:68:71:
0f:65:85:e8:5a:40:a4:18:9d:c8:e1:fd:e5:3d:45:
8b:1f:89:e6:eb:1c:4a:46:6c:39:05:73:d2:8c:79:
fa:ee:c5:64:53:db:19:ce:00:47:e2:fa:f7:dd:15:
18:25:20:04:79:60:29:25:bd:4d:7e:03:4a:6a:2d:
b6:cb:f4:cc:b4:74:2c:a6:80:cc:57:18:06:eb:82:
59:50:0d:97:bf:67:bc:40:a7:96:d6:44:79:d8:8d:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:66:74:AA:87:58:2A:C5:3D:FE:A4:9C:28:AA:30:3B:A5:0F:85
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/qYRmdKqHWCrFPf6knCiqMDulD4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.70.0/24
193.17.179.0/24
193.17.193.0/24
193.17.220.0/24
IPv6:
2a0f:7540::/48
Signature Algorithm: sha256WithRSAEncryption
5e:9f:db:35:85:81:95:a5:67:08:e2:d7:a7:a5:1f:31:28:ff:
e1:89:77:1a:8b:a8:d4:e6:44:77:62:a9:bb:e9:46:8e:e8:97:
14:67:e0:54:4e:56:cc:eb:41:d6:c1:c4:90:74:0e:9c:ef:da:
42:0e:c6:b5:6d:1d:02:4e:61:32:8f:d4:77:d0:6b:bc:15:e9:
85:a3:f3:b8:ec:54:2c:9f:54:ec:5a:b8:e4:f5:d4:f8:c2:00:
1f:6f:3a:9f:f0:66:ba:cf:f9:74:0f:e3:bd:26:a1:9f:61:fb:
fa:f7:fd:4f:fe:20:a5:8d:f9:2b:88:e7:90:3a:cf:95:d6:0d:
69:a5:1b:80:40:88:cf:41:3a:44:61:e4:d0:bd:6e:0d:56:6a:
26:68:8b:ef:de:c9:43:1d:82:9c:fd:f8:b2:03:b2:e5:38:a4:
a2:0f:56:7b:fa:c7:d9:02:41:86:32:85:02:c3:f2:97:4f:dd:
7e:98:2f:4e:42:3e:2f:bd:86:aa:44:d6:80:2d:f9:bc:d5:a1:
aa:b2:18:fb:62:9e:62:9f:b6:ba:78:e6:dc:5e:7c:db:41:46:
36:47:fa:45:11:02:52:65:e5:0b:81:d0:70:ca:a8:6d:2f:9e:
a7:dc:bf:a7:7d:ef:f8:5c:e9:48:fe:9e:fa:bb:93:5a:e6:2a:
40:ca:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:15 2024 by rpki-client on console-ams.rpki-client.org