Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/RQayvT2xQhwJMTqIAIqcwGkLFXA.roa
File: RQayvT2xQhwJMTqIAIqcwGkLFXA.roa (raw, json)
Hash identifier: VaML4/jQk6orURkCStnGnG1lKUQbHpvGpHyKA56qyq4=
Subject key identifier: 45:06:B2:BD:3D:B1:42:1C:09:31:3A:88:00:8A:9C:C0:69:0B:15:70
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 01929AFABDEBA45BA86C199B8C50195DFBDA
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/RQayvT2xQhwJMTqIAIqcwGkLFXA.roa
Signing time: Thu 17 Oct 2024 14:56:16 +0000
ROA not before: Thu 17 Oct 2024 14:56:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47474
IP address blocks: 193.110.240.0/21 maxlen: 21
193.110.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 15:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:fa:bd:eb:a4:5b:a8:6c:19:9b:8c:50:19:5d:fb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Oct 17 14:56:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4506b2bd3db1421c09313a88008a9cc0690b1570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:0a:05:92:7c:84:28:ea:62:b5:7d:e4:f0:
91:77:9b:bc:f2:89:72:b2:cf:18:a6:f7:99:40:c5:
e8:64:67:39:f9:23:21:e3:b1:59:5d:6a:b4:3d:6d:
88:6f:ef:b0:1c:ed:05:f9:76:41:33:ad:31:42:41:
61:47:b8:57:7f:32:5a:aa:f6:8c:3c:8a:36:8e:d3:
9e:91:5b:d2:b9:93:04:cc:71:85:ee:f2:7a:43:54:
b8:83:e5:6e:a4:af:b0:86:18:c3:34:22:20:6e:ae:
f0:28:00:a1:9a:89:7d:20:60:79:bf:40:16:e2:6c:
9c:fb:9e:cb:65:9f:53:eb:79:93:0d:ed:4d:9f:11:
fb:54:c5:97:dc:d6:09:f6:4b:c9:c2:40:22:50:66:
9f:74:18:8b:43:35:70:b8:56:ed:02:02:78:ab:cc:
74:5f:23:d8:a6:ea:a4:61:1e:81:49:ab:c3:0a:32:
59:29:60:ed:d6:4c:37:5e:a0:61:b0:25:33:5a:a5:
d1:e7:fe:14:ab:af:31:56:13:b6:9d:00:ad:4d:da:
93:e0:af:9a:d1:e7:88:a8:76:b1:0e:c9:72:80:dc:
93:e2:e8:83:cc:97:7d:02:54:3f:04:ac:18:db:bf:
e3:8f:9e:d9:bb:13:a3:11:96:1a:7b:13:0b:94:b8:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:B2:BD:3D:B1:42:1C:09:31:3A:88:00:8A:9C:C0:69:0B:15:70
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/RQayvT2xQhwJMTqIAIqcwGkLFXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.240.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:86:66:b0:a3:1a:47:e1:17:9c:22:2a:ec:7a:23:a8:22:75:
2e:94:5d:26:43:8f:bd:28:5c:02:25:bf:96:7d:0a:f4:f7:12:
8c:66:8f:80:4d:8a:ff:76:a2:f8:da:53:75:a1:a4:1b:4b:47:
4b:4a:ed:2a:7d:35:e9:50:f6:2c:36:31:69:1e:85:36:e7:22:
73:52:f2:f0:f9:62:4c:7d:4f:b9:7b:90:6e:9e:7d:f5:e0:50:
e4:f5:2f:0d:27:3c:08:b8:10:9b:76:00:29:9c:be:af:be:bf:
38:05:01:1e:5b:04:ce:52:81:38:3a:ef:8b:c9:fe:20:2e:c2:
b2:b4:04:7d:39:ec:e5:89:a9:31:4f:3e:5b:aa:89:60:02:1b:
c5:00:ba:f3:d4:46:96:d0:52:df:e8:84:d3:72:db:a6:ae:34:
c9:ac:1c:f3:ad:dd:a8:57:be:4d:59:b2:d7:f2:3f:0a:5b:87:
9c:24:72:a2:33:70:dd:b3:66:7e:54:18:4d:69:44:ab:b7:a8:
a2:d6:ae:3a:5a:37:16:fa:13:8c:0b:b0:cc:75:dc:dd:af:b1:
e4:c2:5d:bb:62:d9:39:d6:a6:3c:21:00:7f:47:0f:fa:94:6b:
7a:32:24:54:0b:7f:06:4c:95:ad:08:92:84:0c:2f:cc:2e:bc:
f0:a0:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:10 2024 by rpki-client on console-ams.rpki-client.org