Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/qxyKjWItylXzdIC49mx3DRMv5tQ.roa
File: qxyKjWItylXzdIC49mx3DRMv5tQ.roa (raw, json)
Hash identifier: 4cBYXRnBpR6oRLmPbVtYxSFKgXYjChXc4XrfPD8DmbA=
Subject key identifier: AB:1C:8A:8D:62:2D:CA:55:F3:74:80:B8:F6:6C:77:0D:13:2F:E6:D4
Certificate issuer: /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Certificate serial: 01902CDC9EB707A1E88C86E51BA12B9C6077
Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/qxyKjWItylXzdIC49mx3DRMv5tQ.roa
Signing time: Tue 18 Jun 2024 19:39:34 +0000
ROA not before: Tue 18 Jun 2024 19:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216061
IP address blocks: 193.9.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 19:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2c:dc:9e:b7:07:a1:e8:8c:86:e5:1b:a1:2b:9c:60:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Validity
Not Before: Jun 18 19:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab1c8a8d622dca55f37480b8f66c770d132fe6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:78:c5:48:cc:1d:df:12:6c:73:6e:6a:a8:
76:da:a9:50:3a:c0:fe:23:3a:e9:6b:ac:c5:bf:23:
3e:76:4f:ae:2a:5a:60:60:de:9e:e3:aa:54:04:aa:
87:2e:7e:6e:18:68:f6:68:57:a9:7f:98:51:8c:4f:
4f:38:4f:f3:83:4f:0d:28:9d:38:95:bc:a1:c1:27:
d9:83:2a:23:07:44:b5:54:30:23:b7:22:fa:3a:4a:
60:74:d5:69:67:2e:49:aa:7b:49:9b:92:b8:ec:f3:
d5:8e:86:79:91:5d:01:31:80:7a:ff:fd:3d:a6:2f:
6b:b3:c6:2b:a0:15:80:f1:08:fb:b4:ec:3d:87:69:
47:68:7f:32:fe:66:0c:e8:88:da:72:53:c0:ae:41:
c6:ec:46:9e:cd:7f:bf:10:69:9f:04:d2:2d:31:00:
63:4a:66:de:b8:a9:00:f2:1b:8c:70:e8:a2:2d:6a:
99:ea:9e:68:36:b4:c1:4d:da:cd:f6:07:34:91:97:
4b:2e:03:cf:c9:68:33:07:56:f7:6f:93:6d:c3:72:
ce:04:75:f5:d6:76:6e:ed:19:71:1f:c9:8c:98:11:
b5:db:ff:49:8b:80:e9:64:73:72:2c:00:22:97:64:
b6:81:f9:42:47:22:c7:fe:79:44:95:e0:68:df:70:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1C:8A:8D:62:2D:CA:55:F3:74:80:B8:F6:6C:77:0D:13:2F:E6:D4
X509v3 Authority Key Identifier:
keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/qxyKjWItylXzdIC49mx3DRMv5tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.16.0/24
Signature Algorithm: sha256WithRSAEncryption
61:22:56:98:a4:2b:d3:0f:1c:c2:72:60:3a:d4:68:88:f4:66:
bc:68:83:70:dd:8e:c1:66:5d:5b:a6:1d:c6:c9:8e:f9:52:42:
ac:a4:26:6f:26:ad:50:2a:5b:1d:d3:9b:37:70:28:95:86:24:
31:22:2b:b1:f1:2e:6b:68:bc:9d:45:73:b3:5e:fe:87:d9:9f:
5f:78:2f:b2:64:23:54:03:69:03:6c:0c:52:ab:7a:9d:a2:69:
f2:7a:6b:e0:71:94:e7:38:0a:eb:11:ff:cb:77:c6:8c:e7:f6:
c8:8a:7d:f8:63:2d:41:6d:74:88:8d:af:49:53:1b:92:71:67:
bf:85:05:d3:34:53:db:7e:f7:0d:a5:8f:54:9a:32:b0:3b:81:
68:e5:eb:b5:73:80:ca:31:8a:0a:fb:21:3a:92:a0:4c:0d:63:
8e:c7:ef:b6:aa:0b:97:fe:a8:23:73:b5:fc:b8:24:aa:dd:ef:
81:ce:35:ca:0e:a7:6d:97:92:2e:41:0c:8d:92:fd:e7:c1:6a:
ce:7e:2b:b6:2d:35:72:37:42:71:ed:c9:09:2b:f3:31:d1:23:
fc:75:3e:c4:b9:78:67:b4:59:e2:0d:bd:2c:6e:48:8c:79:26:
ee:88:3a:78:66:fc:40:27:35:a6:04:57:8f:2d:cf:03:ff:48:
3a:66:1a:9b
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 1 20:52:36 2024 by rpki-client on console-fra.rpki-client.org