Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Qxcty3x4SFJApUF2VSh1UrnNFWM.roa
File: Qxcty3x4SFJApUF2VSh1UrnNFWM.roa (raw, json)
Hash identifier: K+0DpJ5g3SziJeEDzY9C2HE2I84S3FKnMTuCQzIhOHo=
Subject key identifier: 43:17:2D:CB:7C:78:48:52:40:A5:41:76:55:28:75:52:B9:CD:15:63
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01877473A606FAE08C5D5126226411C69485
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Qxcty3x4SFJApUF2VSh1UrnNFWM.roa
Signing time: Wed 12 Apr 2023 07:52:28 +0000
ROA not before: Wed 12 Apr 2023 07:52:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 45.90.17.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 16:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:73:a6:06:fa:e0:8c:5d:51:26:22:64:11:c6:94:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 12 07:52:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43172dcb7c78485240a5417655287552b9cd1563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:92:9a:5f:ef:d1:d8:d2:ba:78:de:b1:18:
6b:5d:7a:81:6e:5a:3c:c4:1a:f3:be:aa:5a:a4:2b:
a9:58:b3:56:9e:b7:5e:43:38:80:45:69:28:0f:bc:
eb:b5:da:83:4a:a4:17:ca:22:8b:93:94:8b:4f:e2:
04:2f:a6:8b:c7:8e:77:4d:01:00:5d:ab:bc:60:0e:
e0:83:1b:ea:60:d0:31:dd:d1:07:ec:4d:22:bd:a8:
8a:43:84:a4:d7:69:df:60:e1:e7:37:20:77:ce:25:
e3:66:e4:5f:72:9d:36:9b:45:57:be:ad:65:d6:44:
42:38:12:8f:f9:4f:0e:1e:a9:90:49:24:f9:89:9b:
49:6e:d1:8e:80:6e:13:23:62:66:eb:36:99:81:76:
64:41:1e:94:2d:84:11:93:80:14:f0:6e:1d:91:1e:
fe:98:bc:23:16:fa:b3:d4:f0:59:d2:1c:bd:c6:ca:
26:bf:21:a5:fd:9e:f1:72:c9:3a:d3:73:0f:ba:4a:
ab:0e:ff:27:32:ba:bf:dc:ee:21:77:be:e8:e7:89:
de:7e:5f:2c:c5:e6:62:bb:b3:cd:5e:23:8b:bc:5c:
73:c7:31:f6:f4:ae:63:94:b8:8b:be:20:29:4e:20:
1b:1c:57:da:6a:df:a2:13:ee:ee:92:c5:c1:a1:41:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:2D:CB:7C:78:48:52:40:A5:41:76:55:28:75:52:B9:CD:15:63
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Qxcty3x4SFJApUF2VSh1UrnNFWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:87:d9:4b:ac:f1:85:5e:2e:67:9c:d6:96:ae:03:49:fe:97:
4f:ce:72:bf:73:c2:17:7b:a1:ea:a6:83:d5:a1:a1:9c:32:ac:
e5:ba:ea:f7:5a:dd:20:e9:01:56:a1:4d:52:ac:92:8e:1e:91:
59:9b:3c:88:94:d8:20:61:f1:39:bb:32:c6:a2:b6:5a:aa:c0:
1e:9f:56:d0:83:3e:4c:3c:5a:3f:22:2e:8d:e4:9a:45:c0:b1:
57:e8:7f:20:3c:5e:92:2e:5a:c1:57:6a:bd:42:61:de:1d:8d:
4b:ef:11:40:18:23:45:c0:2e:a9:f8:b2:28:d9:4f:f6:88:42:
e4:da:fc:52:af:b5:75:09:46:2d:18:fc:99:8e:c6:95:42:72:
0b:b8:fe:05:e8:ea:7a:a5:80:39:b5:55:97:a0:5f:57:a8:57:
6c:48:19:1c:3e:3c:9a:52:69:97:f1:66:f3:f9:e9:21:fc:0a:
3f:d5:65:2c:4a:d6:a7:c3:2c:1e:df:dc:fe:78:07:27:14:bf:
6a:19:b8:e0:1e:7b:12:ca:8c:dc:18:72:47:da:1c:dd:3b:0c:
6b:ba:13:6c:f7:53:ca:fc:dc:a6:2c:3f:86:46:f9:fe:e9:a0:
56:1a:88:56:f5:d1:21:78:9e:97:b4:e7:fa:02:b1:9c:ac:65:
dd:86:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org