Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/Q5QFBo1rRbXAX584g-2M9SpxnG0.roa
File: Q5QFBo1rRbXAX584g-2M9SpxnG0.roa (raw, json)
Hash identifier: Dx30sQ0GziO/sj12U/GrFAO2995DZCH120WrbjLLotc=
Subject key identifier: 43:94:05:06:8D:6B:45:B5:C0:5F:9F:38:83:ED:8C:F5:2A:71:9C:6D
Certificate issuer: /CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Certificate serial: 01856D93FAFC4FBE8658817E687A65C4886D
Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/Q5QFBo1rRbXAX584g-2M9SpxnG0.roa
Signing time: Sun 01 Jan 2023 13:44:52 +0000
ROA not before: Sun 01 Jan 2023 13:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62146
IP address blocks: 194.150.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:fa:fc:4f:be:86:58:81:7e:68:7a:65:c4:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Validity
Not Before: Jan 1 13:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=439405068d6b45b5c05f9f3883ed8cf52a719c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:91:34:e5:ec:c0:af:57:50:21:ae:88:7f:b2:
cb:d5:56:49:f7:1d:f2:c0:4b:d2:60:58:a9:61:8c:
43:44:20:99:ab:dd:36:2d:8f:87:e6:93:90:bf:31:
e0:1a:14:9f:c5:e4:e9:af:4e:12:85:10:dc:f6:dd:
37:89:d7:82:39:44:f0:4e:b0:d4:c6:be:5f:40:46:
95:c8:98:5f:58:dd:2d:37:ed:d0:34:0b:26:11:a9:
dd:0e:ee:47:df:72:6a:e0:d3:03:b8:cb:3f:90:1a:
c3:15:b8:09:b4:2f:27:d4:19:fe:0c:35:d6:4d:9f:
0b:3a:76:9b:aa:13:41:5b:12:bb:0b:fc:3e:5e:52:
1b:35:dd:bd:9e:c4:01:7c:8a:8a:d3:a8:95:72:7f:
07:0a:ae:ff:f2:6d:f3:48:f4:24:9d:61:f5:7c:06:
fd:25:c8:90:f8:14:15:34:35:94:29:a7:17:f7:f7:
51:1e:b9:e3:a0:b7:c5:97:45:2c:76:89:d7:7a:74:
e5:2e:bf:fb:1c:04:38:e3:ba:33:7b:70:84:af:af:
0c:e3:f1:87:bf:77:f4:6f:94:d6:94:62:b6:67:14:
12:ef:12:6d:5c:e1:0d:5e:89:f0:37:c2:92:23:6a:
d8:47:41:6e:9e:b7:fc:93:66:de:dc:6a:ea:c9:2d:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:94:05:06:8D:6B:45:B5:C0:5F:9F:38:83:ED:8C:F5:2A:71:9C:6D
X509v3 Authority Key Identifier:
keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/Q5QFBo1rRbXAX584g-2M9SpxnG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:98:6e:e5:9c:e5:c1:ce:56:c7:df:50:f3:2e:62:13:f6:0d:
65:9a:a4:8b:5d:0a:55:29:04:87:e6:cd:79:a8:f9:05:21:cf:
4e:61:73:8e:f1:c1:98:45:be:2e:3f:aa:99:33:2f:07:be:b1:
2c:f7:4c:e2:d3:6c:74:b1:10:71:8e:1a:11:61:19:82:10:21:
69:77:a6:e2:fd:c9:a7:93:2d:19:72:52:b2:0c:10:7a:a2:76:
7d:62:ff:b0:36:10:d9:96:93:3a:81:c1:2f:b2:61:69:cf:64:
86:11:39:a5:16:c5:0a:06:e3:ea:98:82:3b:53:d2:d8:20:eb:
e1:cc:53:0f:80:6a:75:64:f9:9e:8e:39:cd:f9:48:ff:5c:cf:
62:b4:53:33:40:9b:f6:b8:b7:59:fe:8e:37:dd:b4:39:2f:b3:
20:5b:da:96:14:46:77:34:b0:78:9b:53:ed:8b:bf:e1:dc:93:
e5:76:e1:d1:96:74:62:27:d7:f9:2d:b7:12:1a:f0:5e:70:df:
9b:07:07:fd:14:fe:10:d4:4b:55:c7:ea:6b:aa:7f:58:4a:df:
83:a0:75:ee:5f:42:4a:db:45:03:78:4e:15:7e:68:dd:64:2f:
95:e6:62:1d:41:a4:e1:53:d4:ea:28:1c:32:62:6b:1a:0e:5c:
cc:f6:6b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:26 2024 by rpki-client on console-ams.rpki-client.org