Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/QBu90I2f5dztLM_tYU7d7Q6YzsA.roa
File: QBu90I2f5dztLM_tYU7d7Q6YzsA.roa (raw, json)
Hash identifier: 9iVIABEDMqK2epYKPB5ouGve2hW6PVAE3hexAl283FA=
Subject key identifier: 40:1B:BD:D0:8D:9F:E5:DC:ED:2C:CF:ED:61:4E:DD:ED:0E:98:CE:C0
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0188AA9158024316821B16C268150890CD1A
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/QBu90I2f5dztLM_tYU7d7Q6YzsA.roa
Signing time: Sun 11 Jun 2023 13:07:11 +0000
ROA not before: Sun 11 Jun 2023 13:07:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 31.193.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 06 Jul 2023 10:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:aa:91:58:02:43:16:82:1b:16:c2:68:15:08:90:cd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jun 11 13:07:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=401bbdd08d9fe5dced2ccfed614edded0e98cec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:57:19:a0:56:94:a7:e2:9e:99:16:b0:7d:
3b:60:71:2c:96:16:67:2d:71:86:dc:78:5c:55:b9:
93:79:2d:bc:35:c6:8c:b0:f3:57:ef:ee:a7:f8:fe:
b5:ba:2d:74:2e:38:c6:9c:4a:29:33:3d:93:3d:49:
a0:81:90:da:6a:1d:1b:d6:81:78:23:3d:81:60:90:
da:6e:0f:79:fa:95:53:cc:92:a3:2a:13:12:1e:fc:
1a:24:a6:4b:64:b0:f0:3a:f2:80:6d:ed:b9:4c:6c:
60:42:43:26:d1:fb:eb:de:9f:09:fc:72:60:c1:74:
57:03:52:cf:e0:16:87:8a:18:9f:89:84:b3:c8:39:
f1:61:b9:19:96:7f:3a:15:6e:ee:1c:a7:23:e6:5c:
3a:dc:18:c3:6f:56:8e:d8:c2:32:69:2a:04:0b:37:
fe:13:1c:9f:e0:f5:1a:e9:2f:fc:a5:3d:6d:3e:a3:
cd:86:09:a8:db:f6:0e:1c:74:5d:ab:65:61:6e:ef:
10:49:47:6c:eb:7d:83:d6:87:ed:94:a6:65:b0:7a:
0f:dd:7b:1e:04:3a:03:c4:bc:51:a1:f5:ed:a8:33:
61:5d:c5:5c:a4:e5:8a:f4:26:6b:5c:1d:7a:b1:c4:
fb:bc:a6:ce:7f:89:19:5e:c1:10:b0:43:f5:2b:40:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:BD:D0:8D:9F:E5:DC:ED:2C:CF:ED:61:4E:DD:ED:0E:98:CE:C0
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/QBu90I2f5dztLM_tYU7d7Q6YzsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/22
Signature Algorithm: sha256WithRSAEncryption
22:65:1e:32:59:1a:48:4d:80:15:a3:95:a2:25:4a:28:d3:2c:
53:b2:e1:8e:b5:60:53:60:a7:e6:f5:34:c8:51:ab:79:71:5c:
9f:67:bc:8d:53:15:60:58:63:6e:af:c4:61:d1:fd:c2:ce:ac:
41:28:69:2e:ba:38:1e:57:c9:a0:20:4e:47:d5:8c:8b:a1:26:
54:1e:2e:a3:64:aa:b0:6e:b8:de:80:ab:50:5b:0e:02:8f:16:
5d:c4:54:ac:48:3a:78:cb:d7:fd:8d:c5:8f:c5:b5:97:5e:29:
7b:3d:18:b5:83:37:44:40:76:67:10:7d:db:04:d6:5f:46:67:
f4:dc:7c:99:2f:e7:e5:c5:ee:8d:0f:38:b5:91:90:c7:25:74:
ee:67:7f:81:e2:f2:8a:0b:1d:ce:41:e9:4a:19:a6:a6:43:dc:
f8:75:45:4e:0e:1d:2f:06:91:38:cb:33:92:c4:89:6b:22:92:
2d:12:41:b9:ba:a3:05:0b:97:64:9d:0d:05:27:aa:05:73:99:
92:1a:be:73:16:74:4b:82:c8:53:6b:ae:8d:81:f5:05:09:d4:
ec:b2:75:5d:93:a1:7a:87:4f:6f:18:09:f8:bb:b0:4a:e8:d6:
c5:4d:8a:13:61:cf:29:64:dd:e8:28:54:10:5e:50:57:17:66:
79:ef:9a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:37 2024 by rpki-client on console-fra.rpki-client.org