Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/qo1lOcwYZCl9IDinA7_hcu2V3AU.roa
File: qo1lOcwYZCl9IDinA7_hcu2V3AU.roa (raw, json)
Hash identifier: YlajDM3QjkgB99nAfrP8sGamfET2ggwORcimJimj+Jc=
Subject key identifier: AA:8D:65:39:CC:18:64:29:7D:20:38:A7:03:BF:E1:72:ED:95:DC:05
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01856D2F3A6D2B75E38AB826DE90276B1924
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/qo1lOcwYZCl9IDinA7_hcu2V3AU.roa
Signing time: Sun 01 Jan 2023 11:54:49 +0000
ROA not before: Sun 01 Jan 2023 11:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201308
IP address blocks: 84.239.46.0/24 maxlen: 24
2a02:2160:7113::/48 maxlen: 48
2a02:2160:7111::/48 maxlen: 48
2a02:2160:7112::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:3a:6d:2b:75:e3:8a:b8:26:de:90:27:6b:19:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jan 1 11:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa8d6539cc1864297d2038a703bfe172ed95dc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:f4:16:36:07:26:93:82:6b:b4:1e:8e:5f:
d8:d1:4e:08:d3:64:63:c0:19:5d:06:51:e3:87:a5:
64:9a:c8:f7:89:f1:93:7e:09:07:20:fa:85:4f:4b:
bb:7c:99:8d:d6:e7:7d:5c:21:ad:12:5f:e8:71:8a:
a0:91:61:46:a6:32:6a:31:4b:04:db:fb:4d:e9:8c:
23:88:84:97:66:60:22:9e:f9:b4:53:5c:ec:01:f8:
ee:78:c9:8f:5c:5a:6a:41:d2:d5:7b:0c:ab:53:62:
e3:13:3c:b2:49:06:56:be:e8:46:dc:6e:5f:00:fe:
fa:f9:f9:23:02:45:50:d0:b2:21:05:d8:b7:f2:4b:
81:4e:a9:ac:fc:68:90:a6:1a:c1:b9:d8:88:82:ae:
ce:d9:17:cd:fd:c9:c9:37:a7:bf:e0:66:f8:bf:ec:
5c:08:16:b1:97:1c:93:5d:cb:4c:88:c0:77:33:d6:
d4:ea:1e:6d:9e:b7:5c:cf:d8:bb:97:f3:1e:8b:ae:
af:45:ec:14:4f:a9:9a:bf:de:fb:3a:20:43:03:18:
3e:8f:a1:16:10:8a:d0:91:91:5f:18:36:78:9c:aa:
07:c8:c8:fd:a5:08:d6:1b:fa:4e:da:ce:15:3b:5c:
6b:f6:6b:d0:bd:07:77:0d:72:d9:c3:45:f0:bd:d6:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8D:65:39:CC:18:64:29:7D:20:38:A7:03:BF:E1:72:ED:95:DC:05
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/qo1lOcwYZCl9IDinA7_hcu2V3AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.46.0/24
IPv6:
2a02:2160:7111::-2a02:2160:7113:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:27:46:9b:11:92:74:7c:4e:50:94:81:9c:44:5f:fa:df:e3:
57:21:fb:76:06:2b:56:d8:79:00:b6:b6:aa:86:cc:9a:60:a0:
c0:b7:cd:96:38:35:c1:ed:c0:98:1b:38:02:73:74:e9:39:fe:
b4:d1:ab:b2:0f:ac:e8:18:d7:40:d4:40:54:1c:4c:cd:2f:d4:
13:cd:5f:04:74:1f:2c:18:19:ee:8d:4f:6f:00:7c:b4:c2:5d:
53:64:59:78:98:b4:e9:bd:e4:bf:f2:1f:6e:d1:de:70:1d:0b:
5c:ca:e2:15:f6:ad:1a:d6:eb:7b:1c:2b:56:a4:13:6d:6a:96:
76:25:dc:9c:b4:61:80:34:b1:1c:42:ac:5f:ea:53:ef:08:3f:
a7:ab:85:2a:ea:b9:86:e2:46:af:37:ff:08:53:59:56:df:80:
8b:34:a9:9e:28:f1:fc:a8:c5:aa:3e:3b:e4:41:c2:ed:fe:3d:
60:d9:44:81:5e:84:0b:94:25:35:25:b0:24:86:c5:8f:55:65:
be:df:ba:98:49:c3:e0:c6:74:fd:df:4d:f3:f4:d0:72:f7:45:
6f:0d:ae:8c:f9:bf:32:07:53:3d:4a:8d:81:18:f0:04:fa:04:
29:f6:c4:73:ff:c5:ce:4e:05:b0:77:63:76:3a:75:21:73:ec:
2f:b5:80:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:02 2024 by rpki-client on console-fra.rpki-client.org