Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qpOwARne_-asBQloWQmhvdImHio.roa
File: qpOwARne_-asBQloWQmhvdImHio.roa (raw, json)
Hash identifier: Du80BSyM7+7flxKzSFYxqszwT8xIZYzjBovzcrAOneo=
Subject key identifier: AA:93:B0:01:19:DE:FF:E6:AC:05:09:68:59:09:A1:BD:D2:26:1E:2A
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF85BFB764CF873F81EB74CBA4FFF01
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qpOwARne_-asBQloWQmhvdImHio.roa
Signing time: Sun 01 Jan 2023 10:54:53 +0000
ROA not before: Sun 01 Jan 2023 10:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 269070
IP address blocks: 130.185.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:5b:fb:76:4c:f8:73:f8:1e:b7:4c:ba:4f:ff:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa93b00119deffe6ac0509685909a1bdd2261e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:65:2a:df:cb:fa:bd:cb:4d:5e:d7:bd:47:
9a:cf:f1:7a:23:3e:f2:a0:fe:a1:5c:9a:f3:2c:b1:
e0:e9:51:b6:b5:50:2c:79:5c:b7:cb:e5:f6:cc:a3:
0c:50:11:d6:cd:35:5e:ef:ae:8f:e5:04:83:18:33:
9e:b7:80:36:2d:dc:9c:f6:28:a6:5a:45:30:b8:c9:
0e:4b:da:d0:03:84:4a:70:74:fa:45:c8:11:97:b2:
f2:6d:6a:a4:7b:4d:46:17:20:28:82:ac:c8:7d:21:
1a:3f:d2:f5:b5:4e:4c:54:fa:53:fc:32:b8:03:8a:
17:f4:12:cb:0d:6c:f3:68:0c:e2:f5:e0:9c:b5:e1:
13:db:cb:70:a7:42:13:14:47:bd:06:04:d6:4d:05:
df:59:9a:86:2a:ce:79:5f:a5:a4:8b:91:09:e2:9c:
46:a2:31:a9:73:3c:e4:70:f4:c7:d5:7a:89:98:63:
7f:50:bc:8f:fb:72:26:35:13:44:bb:63:2d:d2:de:
a6:10:14:02:0b:2c:90:08:d9:08:c1:35:aa:a0:33:
8d:38:a6:21:f5:a9:93:46:e7:5e:ac:39:8a:be:6c:
6c:80:75:04:7c:bd:35:1e:4e:52:7a:21:f0:4b:0e:
5e:38:87:dc:58:e6:57:56:86:00:69:b9:01:8a:f4:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:93:B0:01:19:DE:FF:E6:AC:05:09:68:59:09:A1:BD:D2:26:1E:2A
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/qpOwARne_-asBQloWQmhvdImHio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:71:ac:3e:89:4c:bd:64:8b:00:51:ae:41:0e:9f:59:82:bf:
48:4f:40:41:83:14:10:33:17:67:3a:ef:3a:a7:47:41:08:2c:
af:b3:0e:ac:e2:48:0d:16:dc:c3:98:79:15:d0:25:15:f4:bc:
e1:91:96:6b:c4:e4:ee:d8:28:54:77:2f:a8:67:5b:74:9e:46:
3d:90:2c:2e:47:b6:71:6d:ee:05:a6:3e:73:9a:51:40:d8:ad:
dd:79:48:9a:0d:7e:69:ca:6a:e7:11:56:d3:00:a4:05:f1:a5:
42:12:39:3b:73:b5:d5:82:f6:bb:41:21:4f:34:3b:b5:6c:c8:
8c:98:d6:1e:4a:50:39:e0:f4:03:6d:c1:5f:92:38:64:29:b4:
25:9d:c9:4c:3d:26:b4:78:bf:60:12:3d:24:45:30:cf:73:9b:
37:09:63:60:0e:b4:7d:2f:a9:d3:4f:a9:a7:71:cb:a3:21:b9:
c1:7c:68:76:38:c4:8b:98:a6:33:92:b0:78:e3:79:4e:6d:c9:
73:fe:d6:1e:7d:18:51:3b:5f:0d:ba:f6:0b:5e:26:28:68:93:
56:ac:94:ed:13:36:bf:dc:40:15:9a:d6:9d:86:da:03:cc:71:
40:c4:6f:e0:aa:41:ab:f4:e1:0d:6f:83:00:9d:20:bb:25:da:
71:b2:03:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:12 2024 by rpki-client on console-ams.rpki-client.org