Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/Qmm2JdxFIkYpUu4j6Iq2TvIVkgU.roa
File: Qmm2JdxFIkYpUu4j6Iq2TvIVkgU.roa (raw, json)
Hash identifier: e6RcDWVZWlne6r+4o4emHndft79QY8JXZrEdYbp4Tn4=
Subject key identifier: 42:69:B6:25:DC:45:22:46:29:52:EE:23:E8:8A:B6:4E:F2:15:92:05
Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial: 01857195442BEDB3F2364F0EECDC0C70041E
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/Qmm2JdxFIkYpUu4j6Iq2TvIVkgU.roa
Signing time: Mon 02 Jan 2023 08:24:45 +0000
ROA not before: Mon 02 Jan 2023 08:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57121
IP address blocks: 176.96.160.0/20 maxlen: 32
192.109.84.0/23 maxlen: 32
192.109.132.0/23 maxlen: 32
176.96.144.0/21 maxlen: 32
91.230.221.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:44:2b:ed:b3:f2:36:4f:0e:ec:dc:0c:70:04:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Validity
Not Before: Jan 2 08:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4269b625dc4522462952ee23e88ab64ef2159205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:fa:2e:1b:96:6b:60:ea:80:dd:a1:f1:b9:
6b:19:fa:eb:eb:ce:a9:0f:c1:dc:ff:08:ae:df:3d:
4d:41:a9:64:2a:9e:f8:66:51:e3:d4:cd:72:b2:be:
32:5e:c2:84:c6:16:f4:35:a5:e6:5d:9d:2a:6e:3b:
bd:87:30:b4:52:98:62:62:28:79:3c:8f:22:b5:cd:
c3:54:ca:24:d5:12:94:c3:a3:7c:3b:6e:be:d7:32:
c5:f9:2c:59:23:f1:0c:ce:bb:fa:57:54:96:f9:41:
fd:27:ee:a8:02:66:c9:9f:68:96:68:19:5e:00:8e:
03:30:d8:16:7e:a0:4c:97:11:53:0d:bc:9c:58:25:
30:88:ea:32:de:45:c1:c9:cc:be:68:4f:1f:73:6c:
a4:84:e2:6a:be:97:23:77:ee:f9:13:c4:de:80:9a:
3a:16:39:b7:6c:2c:02:23:f8:c4:d2:2d:ab:1a:db:
c3:96:78:5f:2a:b5:a6:1e:0a:e3:9a:77:46:41:8d:
b4:6b:1c:bd:e5:88:c9:34:50:a3:8f:31:73:2d:23:
ad:a5:e8:81:5c:e1:13:e9:63:29:1d:6d:2a:d0:25:
ed:f5:2f:4e:8b:b9:1e:03:1e:66:b3:c3:80:8a:d8:
53:b0:fc:ee:68:64:1c:a3:32:9c:06:ca:d5:c0:4c:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:B6:25:DC:45:22:46:29:52:EE:23:E8:8A:B6:4E:F2:15:92:05
X509v3 Authority Key Identifier:
keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/Qmm2JdxFIkYpUu4j6Iq2TvIVkgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.221.0/24
176.96.144.0/21
176.96.160.0/20
192.109.84.0/23
192.109.132.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:77:ef:e3:8c:39:00:a6:e2:bb:df:bc:c9:d8:bd:c1:3f:6a:
61:24:e8:bb:4f:d2:6e:ce:df:80:18:e3:e2:37:c9:9e:dd:86:
95:3c:65:11:5b:1f:90:00:04:0b:3e:ea:c4:9c:7a:18:9d:39:
e2:31:e2:85:7a:1e:29:d0:57:ab:2d:96:6f:39:cb:6b:92:dc:
b3:d3:6a:d3:43:95:6f:08:c0:7d:71:50:79:f1:48:e7:46:c4:
fb:6e:af:48:23:1f:fd:64:11:69:50:ab:62:06:7d:e5:2e:a0:
fa:b4:c3:79:ef:d2:cf:d9:43:aa:f6:6b:b3:2d:fe:af:a5:5d:
f4:8a:76:d3:b1:09:f1:40:79:6d:48:6d:77:7e:41:a5:2e:8d:
f2:d2:9a:60:d0:a3:92:26:f2:75:28:a9:3a:83:60:74:3f:16:
b2:80:74:f6:92:00:66:ba:21:d6:45:5a:04:fa:99:77:38:a9:
88:4b:ea:aa:b0:3f:dc:9f:c4:9b:f2:10:d9:44:0b:db:13:40:
31:62:51:5f:8b:27:4d:1d:3a:c5:f2:7d:c3:b7:06:84:1e:c2:
fc:3a:b6:8a:3b:fa:15:48:72:ad:dc:47:5a:43:8b:76:17:f4:
a3:86:ff:55:ae:90:2e:ed:f9:74:c6:3f:94:3b:09:b8:fc:d6:
0b:fe:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:44 2024 by rpki-client on console-ams.rpki-client.org