Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/QnD3k0O8rqlz_1276caPEFCOJbk.roa
File: QnD3k0O8rqlz_1276caPEFCOJbk.roa (raw, json)
Hash identifier: U0J5pSHYRA6ErP+0JyAehegqr/CiZlgKnIBUExXab28=
Subject key identifier: 42:70:F7:93:43:BC:AE:A9:73:FF:5D:BB:E9:C6:8F:10:50:8E:25:B9
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 01917F7A3C6865652C0290AA4711A359D91B
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/QnD3k0O8rqlz_1276caPEFCOJbk.roa
Signing time: Fri 23 Aug 2024 13:43:22 +0000
ROA not before: Fri 23 Aug 2024 13:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 195.160.148.0/24 maxlen: 24
195.160.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7f:7a:3c:68:65:65:2c:02:90:aa:47:11:a3:59:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Aug 23 13:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4270f79343bcaea973ff5dbbe9c68f10508e25b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2b:aa:f4:10:b3:30:65:68:da:cc:a0:89:3f:
f4:0f:82:64:c0:fe:5a:ea:fc:a9:50:3b:48:88:03:
24:37:d3:63:38:0d:d8:60:29:a2:92:2c:18:18:6b:
a0:70:63:3b:19:cb:89:e9:1d:8e:74:59:f4:99:1d:
9c:61:36:6e:79:f3:bc:b9:2e:59:38:cb:10:d2:9b:
ff:7f:c6:83:cb:f9:5e:f7:73:95:a8:e3:4f:ed:47:
12:cc:06:82:41:d8:81:0d:31:f1:30:9d:82:fa:0e:
34:c0:d1:19:4b:e0:41:4d:f8:f7:f4:39:5c:e1:4c:
f3:d2:5b:1f:59:f3:47:8a:95:98:f6:1c:33:3e:62:
6e:bd:09:8b:9b:74:75:db:a9:4d:a2:54:a4:4b:cd:
5e:0b:4b:2f:04:db:21:23:48:f4:e6:3f:37:65:79:
f1:54:d5:ad:7e:d8:c8:81:59:ed:6d:b8:8c:60:44:
48:ab:3d:7c:81:0b:7d:f4:65:9e:7f:06:25:5c:06:
26:64:18:de:e5:32:33:01:91:25:04:e8:63:d1:a0:
66:b8:6d:e0:3b:0b:89:ad:22:51:d8:ad:fb:bb:5b:
93:60:fc:f9:e5:e1:04:c6:39:2a:6a:9f:1b:ee:5f:
1a:4d:fd:d4:87:5a:b9:fb:1e:58:22:0a:9a:db:9e:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:F7:93:43:BC:AE:A9:73:FF:5D:BB:E9:C6:8F:10:50:8E:25:B9
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/QnD3k0O8rqlz_1276caPEFCOJbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.148.0/23
Signature Algorithm: sha256WithRSAEncryption
50:5e:8d:dd:94:fd:cb:84:5d:50:5c:ba:31:fc:41:d2:bb:56:
f6:ad:17:80:f1:28:a5:70:73:51:bb:f7:5d:1f:c7:7e:9b:2d:
b2:fd:b9:3a:03:79:2f:7c:46:b9:3d:44:93:2e:dd:cd:2f:56:
72:29:b4:e5:84:42:c6:db:4a:db:42:a5:dc:20:e1:66:04:10:
b6:ea:0f:b8:32:9c:af:01:f3:e8:88:ab:c3:99:c2:3a:60:16:
3d:d4:e1:52:9d:f7:aa:9a:87:8c:c9:42:83:8d:91:5a:c8:69:
9a:f3:6d:42:8a:28:3d:01:1a:94:72:27:76:cf:d2:a6:76:f9:
01:b6:d3:52:7e:c2:05:e6:96:80:09:af:02:17:05:62:72:f7:
3a:4c:f7:0f:d4:eb:e0:f6:ab:db:d5:22:02:01:7c:eb:3f:df:
1c:3c:e4:f3:65:63:8e:de:cb:fc:2b:74:79:c8:3f:f4:ab:d4:
70:ca:25:e6:d1:49:b9:e2:8b:b4:dc:e8:05:1d:c3:c2:d7:42:
da:00:47:e0:3c:94:07:58:1a:3a:75:7c:ff:66:7c:0b:e7:39:
9b:21:25:34:9d:73:16:50:3e:1d:4f:e3:53:34:5d:37:d8:3a:
18:f5:99:2d:d6:c9:8a:92:53:76:26:bc:64:34:49:26:b4:fb:
46:86:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:27 2025 by rpki-client