Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/rQZupZHuU6IaWm146H1jW0Z9xHI.roa
File: rQZupZHuU6IaWm146H1jW0Z9xHI.roa (raw, json)
Hash identifier: rbZ0cwSk02T453y+vi0ls1bLoQAMvD/2TTHLPDZLcp8=
Subject key identifier: AD:06:6E:A5:91:EE:53:A2:1A:5A:6D:78:E8:7D:63:5B:46:7D:C4:72
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01908EC2F0B4BD2AD12ED5FD99048919E786
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/rQZupZHuU6IaWm146H1jW0Z9xHI.roa
Signing time: Sun 07 Jul 2024 19:54:18 +0000
ROA not before: Sun 07 Jul 2024 19:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62048
IP address blocks: 185.49.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 10:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8e:c2:f0:b4:bd:2a:d1:2e:d5:fd:99:04:89:19:e7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jul 7 19:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad066ea591ee53a21a5a6d78e87d635b467dc472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:c3:f3:73:71:4d:e0:27:4b:cb:18:f4:81:
5f:24:58:49:05:b3:d1:6b:d4:ec:7e:4b:bb:bd:c5:
a4:17:46:f4:8d:cc:b1:f6:ad:73:f5:bb:29:f7:20:
56:f9:d8:79:ce:d2:03:78:1f:04:63:0f:37:b6:d3:
fe:ad:2d:35:01:7d:b2:2e:98:5a:1e:ae:ba:f6:92:
2f:37:43:d6:5f:e4:49:59:97:5b:1e:54:cd:1e:f1:
69:30:e8:c9:ff:89:df:ec:c2:a7:ad:10:eb:79:df:
1f:ef:67:c7:89:fa:c9:43:92:bd:81:df:ae:a9:24:
d8:b4:23:b9:8e:6d:2d:f8:36:05:24:44:6b:c5:1a:
fd:a6:97:12:15:dc:01:5b:36:a7:02:ad:4b:be:2e:
de:53:5c:c7:e8:84:9f:d9:9e:5f:72:f1:53:24:9c:
71:54:18:52:a7:d5:37:f3:34:69:8c:4f:f5:3d:20:
85:40:ef:a8:eb:4e:3a:a6:9a:64:88:8f:0d:55:f2:
af:46:c0:90:7d:38:54:03:9b:96:8e:82:db:12:92:
fd:b7:2e:6f:e9:38:37:d8:50:0c:c5:aa:68:7e:57:
5a:e5:42:06:d3:6f:eb:ca:ef:de:1c:98:e0:2a:ba:
4f:c5:56:19:1c:8f:f9:d8:51:b9:af:73:7e:e4:f5:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:06:6E:A5:91:EE:53:A2:1A:5A:6D:78:E8:7D:63:5B:46:7D:C4:72
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/rQZupZHuU6IaWm146H1jW0Z9xHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.104.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9c:05:ae:62:6b:f4:46:52:88:c2:3f:d6:67:d3:9f:02:7e:
59:97:0d:41:1b:c3:e5:3a:49:d7:6d:4c:05:0f:1b:e1:71:34:
db:26:78:ba:c7:85:17:9c:1c:a6:18:fa:1f:ca:e2:f9:d2:75:
dd:f5:54:8f:ac:c5:6e:7a:6c:36:37:e7:f6:ca:49:fe:fa:d5:
60:64:e7:e0:a0:a6:b5:04:09:84:4f:88:1a:76:22:c1:76:d1:
32:e5:d4:67:3b:33:7b:25:5b:5c:81:88:b4:c1:2d:19:02:a0:
28:11:a1:26:18:4b:ef:e6:c4:ff:f3:6a:5f:e1:57:13:d8:da:
86:01:6d:e6:f6:96:60:50:fc:c4:f0:2e:a6:c6:1e:ea:03:93:
eb:b5:bf:d5:e5:7f:5c:4f:17:00:60:0d:aa:3a:60:af:e8:5f:
0c:42:ae:45:6f:49:4d:53:05:e9:35:ea:d6:db:a8:41:f8:37:
fe:ed:67:57:11:9c:54:e4:c9:23:54:e2:49:c3:6e:c6:ea:01:
1f:08:56:79:6d:e8:a3:69:e6:48:c0:5b:e7:ca:88:c1:ae:93:
01:99:67:f2:23:97:8f:67:07:54:f3:7c:57:10:27:17:f0:56:
c2:3d:4f:c7:80:59:04:e7:0c:60:3c:42:17:c7:0a:e6:3c:7d:
fd:d5:37:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 12:50:09 2024 by rpki-client on console-fra.rpki-client.org