Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/qFErq1Dw_DqF8WICIBkrQtXYjM8.roa
File: qFErq1Dw_DqF8WICIBkrQtXYjM8.roa (raw, json)
Hash identifier: vcL18SR2HMvJnma7tIJiV2xq25/uQ8K0pLkiQB9BMkg=
Subject key identifier: A8:51:2B:AB:50:F0:FC:3A:85:F1:62:02:20:19:2B:42:D5:D8:8C:CF
Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial: 01856FA70D3CBEB055A30264969971D4CC1A
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/qFErq1Dw_DqF8WICIBkrQtXYjM8.roa
Signing time: Sun 01 Jan 2023 23:24:56 +0000
ROA not before: Sun 01 Jan 2023 23:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198812
IP address blocks: 91.239.147.0/24 maxlen: 24
2001:67c:1240::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:0d:3c:be:b0:55:a3:02:64:96:99:71:d4:cc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Validity
Not Before: Jan 1 23:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8512bab50f0fc3a85f1620220192b42d5d88ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:35:eb:4f:b8:9c:3e:9a:cf:03:88:d9:6e:
9c:22:f3:c0:4c:a8:5a:a9:97:da:76:27:9d:46:03:
fc:d2:62:33:01:17:9d:e5:68:d7:07:b6:97:15:4a:
8e:04:9e:81:51:96:81:cc:68:5a:c4:d2:b1:01:01:
d3:fe:54:85:83:13:3c:b3:5b:ee:5c:2d:f2:a7:c5:
b4:85:c2:40:9d:37:51:6b:b3:f1:a0:9a:10:75:58:
88:d6:77:5d:be:a8:61:5e:59:97:65:bc:98:40:17:
5b:53:fe:e8:d4:f3:ff:ec:1c:e2:f0:ec:35:f0:77:
0e:7b:c1:9b:25:da:26:b1:5f:36:9b:93:4c:7e:61:
6b:c9:3e:40:08:ca:25:07:3e:65:74:5f:f4:cd:c6:
b4:d1:15:59:a1:05:ad:27:20:36:6e:4d:74:87:ff:
10:e5:de:af:d3:36:f8:c1:d5:e5:ba:7a:5c:79:7c:
e2:db:18:ce:37:99:f3:1c:3d:b9:a1:d7:b4:af:0a:
f3:ff:63:a5:91:55:9f:05:2c:28:16:88:47:8b:26:
04:69:77:ba:9b:55:66:80:db:c4:0f:18:78:29:8d:
aa:11:e4:51:04:9b:7b:55:df:b0:f2:44:c0:aa:74:
8f:82:f3:74:4b:aa:84:72:4c:5e:9e:97:d8:bc:ed:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:51:2B:AB:50:F0:FC:3A:85:F1:62:02:20:19:2B:42:D5:D8:8C:CF
X509v3 Authority Key Identifier:
keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/qFErq1Dw_DqF8WICIBkrQtXYjM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.147.0/24
IPv6:
2001:67c:1240::/48
Signature Algorithm: sha256WithRSAEncryption
7a:bb:d4:4a:ae:fb:ca:16:b1:cd:97:78:f2:cd:c5:d9:77:fe:
de:24:aa:57:e4:ae:67:a1:ee:63:fd:13:79:a5:3c:1e:5c:07:
42:1f:bf:c0:25:63:95:9a:03:1f:2c:ef:f4:7f:6d:45:84:df:
a4:1f:f1:8f:d6:4a:29:33:01:82:52:39:e9:94:69:1c:3b:06:
10:08:db:cc:e4:3f:de:f9:cc:aa:b2:6e:75:26:71:71:52:17:
b6:ee:c8:ca:ae:c6:fb:42:65:e8:7c:e4:4d:61:b6:51:92:17:
ed:0f:aa:dc:30:1d:70:b5:ad:26:d4:4d:f3:9c:70:96:c6:8c:
a6:56:10:a1:60:14:c8:a2:eb:f4:e4:66:87:1a:d0:46:c8:32:
1c:32:4f:b3:70:0b:d9:7a:f2:2b:6f:bc:3c:a0:68:bd:ac:0f:
25:ee:8c:a6:94:86:61:ee:f3:fd:e5:dc:e1:42:96:22:db:ce:
93:77:a6:fd:1c:7c:90:f9:5c:b1:86:7c:19:53:30:92:14:df:
5b:a5:58:2b:10:68:37:53:a4:62:2a:07:2a:18:fa:80:d3:00:
aa:af:22:2f:2f:2e:68:19:29:c6:bc:b5:2d:4b:57:7d:da:c7:
93:b8:cf:f2:29:62:1d:6e:b0:7e:01:70:f9:0e:0f:fb:cf:8f:
58:84:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:45 2024 by rpki-client on console-fra.rpki-client.org