Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/QcUrbe8fbTbsM26iXlMk35RznFs.roa
File: QcUrbe8fbTbsM26iXlMk35RznFs.roa (raw, json)
Hash identifier: MOc7KxW/x6/XzNCbKmhH14tFMRT/E2DHbvMyLz0izqw=
Subject key identifier: 41:C5:2B:6D:EF:1F:6D:36:EC:33:6E:A2:5E:53:24:DF:94:73:9C:5B
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186CC02FE6D115E80634C7D59DA0349F9AF
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/QcUrbe8fbTbsM26iXlMk35RznFs.roa
Signing time: Fri 10 Mar 2023 14:53:13 +0000
ROA not before: Fri 10 Mar 2023 14:53:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201971
IP address blocks: 81.25.68.0/24 maxlen: 24
192.144.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 22:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:02:fe:6d:11:5e:80:63:4c:7d:59:da:03:49:f9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 10 14:53:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41c52b6def1f6d36ec336ea25e5324df94739c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:4d:67:d0:ed:0e:d6:cf:11:c1:ac:f8:68:
1c:58:a8:c3:cf:c8:d5:25:98:72:6e:79:36:3f:75:
91:94:57:1c:40:fb:90:98:59:a0:73:41:a7:e5:c9:
ab:93:19:1a:9f:f1:a4:d9:dc:ff:7c:1b:1f:09:16:
70:1e:a2:80:c0:49:15:37:be:2c:d0:22:43:2e:19:
cc:22:c9:07:97:43:58:a7:35:85:e9:15:88:77:eb:
e2:bd:09:5d:b1:cd:33:76:ee:1a:8a:8f:39:14:31:
9c:3c:62:91:75:11:27:2e:f4:a0:27:4d:f7:b9:ef:
c5:75:b6:ed:0b:94:2a:2e:db:ea:16:46:17:c5:76:
ad:a6:c3:27:ea:08:f2:c8:6e:f3:71:44:03:87:d4:
e6:d9:49:e5:9a:8f:f8:a9:2d:34:f5:40:49:14:2a:
08:fc:29:84:e5:cf:2e:55:1c:22:d6:7e:e0:0b:48:
36:f8:c2:0a:01:2d:ff:9d:80:5d:ba:31:7f:49:f5:
be:e2:71:7f:7f:5d:5f:22:e9:19:f4:f0:ff:72:01:
ca:ad:2f:4e:ed:87:b6:e9:bc:c3:51:01:12:be:23:
d5:c7:a2:1b:50:4b:2b:33:8a:c4:83:09:0d:b8:2e:
bf:23:be:35:63:86:c2:f0:db:60:5a:ca:a6:3c:1b:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C5:2B:6D:EF:1F:6D:36:EC:33:6E:A2:5E:53:24:DF:94:73:9C:5B
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/QcUrbe8fbTbsM26iXlMk35RznFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.68.0/24
192.144.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:11:58:19:b0:73:96:c9:5a:e3:75:32:2e:8e:0f:8a:1e:6a:
ab:02:e1:5b:bf:77:5b:c0:61:64:4b:a4:7b:2c:b4:b4:c1:1f:
26:e0:37:8d:d9:e4:0b:54:0b:b4:0a:ba:df:ba:ab:39:11:06:
21:a3:b3:98:60:64:6a:a5:d3:29:75:e8:91:c8:82:ab:83:1b:
cd:28:f8:cb:23:4c:01:50:77:ac:38:73:87:20:d5:62:21:13:
4e:fd:f7:85:68:e6:d7:0d:3e:ee:52:2f:f7:b1:4b:77:7b:7b:
63:11:ae:75:8e:23:48:d6:6e:93:9b:a5:e1:33:49:c9:a3:ec:
d3:7f:f1:87:2a:88:9c:77:0b:4b:f3:e6:44:37:a7:38:19:45:
16:d8:01:d3:2f:6a:08:0d:9a:01:a0:2f:8f:5e:9d:7c:5c:ab:
c1:f8:75:65:a4:87:d9:a5:7c:af:28:5c:96:26:23:97:64:be:
b6:1a:a4:df:61:c0:8f:6c:10:08:77:41:4b:df:02:02:6f:0a:
ea:aa:9d:cf:82:30:55:0a:35:42:20:6e:a8:7b:ff:7e:32:0a:
10:e2:b5:bd:de:10:bd:cb:7a:48:53:56:df:74:7e:78:7c:59:
19:c5:fb:59:59:3e:af:ca:ba:a3:f6:19:df:be:3b:5b:25:85:
33:0b:3c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org