Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/QSkumQx1mw-AR34yseFUfzrJzxI.roa
File: QSkumQx1mw-AR34yseFUfzrJzxI.roa (raw, json)
Hash identifier: oZCLDCbf/1dC7URYoYs4mKRRPIBy17KRSDQfaaGUsP0=
Subject key identifier: 41:29:2E:99:0C:75:9B:0F:80:47:7E:32:B1:E1:54:7F:3A:C9:CF:12
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01898D12ABB3EDF57AFBBAEC7AF83BDF8795
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/QSkumQx1mw-AR34yseFUfzrJzxI.roa
Signing time: Tue 25 Jul 2023 12:42:38 +0000
ROA not before: Tue 25 Jul 2023 12:42:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54548
IP address blocks: 157.97.104.0/24 maxlen: 24
157.97.105.0/24 maxlen: 24
217.160.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 14:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:12:ab:b3:ed:f5:7a:fb:ba:ec:7a:f8:3b:df:87:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Jul 25 12:42:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41292e990c759b0f80477e32b1e1547f3ac9cf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:9c:d6:4a:32:16:6d:e7:9f:e1:a9:47:a1:
6e:7a:56:9f:e3:00:6e:71:51:31:55:84:c8:21:02:
24:a9:46:9f:06:97:84:02:f0:04:4f:d6:00:19:dd:
cf:e0:e1:29:b8:7d:6f:1f:c1:59:ae:2e:e7:bb:ee:
de:58:1d:cf:c5:c6:49:84:6f:03:19:49:f4:27:69:
95:7e:5c:22:d7:de:6b:44:75:ae:64:b2:65:23:db:
7f:a1:4a:aa:ac:9d:f5:a0:33:bd:60:f8:8e:ab:b2:
33:31:7d:51:0e:30:00:76:34:45:e8:d8:89:ea:d9:
02:3d:9a:98:56:3f:ea:0f:49:00:55:e9:83:a6:4c:
35:00:f2:3d:5a:0e:f6:c8:95:18:e1:01:34:84:02:
99:9d:8d:02:2f:99:2e:3d:ce:5d:cf:be:7c:d9:b6:
30:a2:88:98:18:ef:2d:ed:4e:1f:1e:b2:c6:34:88:
df:ae:b5:a4:34:30:f3:ff:53:d5:de:79:e6:0c:19:
b0:f6:2b:7a:33:35:a2:7c:f3:e8:cb:9f:4c:27:a0:
07:16:f0:06:43:22:c2:60:a2:84:15:c4:88:6f:d0:
de:e7:99:b6:6f:f8:e2:30:ef:38:1d:ac:c3:d3:2f:
b3:21:20:d2:9a:2a:8c:d0:4b:51:5c:13:4d:57:bc:
4a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:29:2E:99:0C:75:9B:0F:80:47:7E:32:B1:E1:54:7F:3A:C9:CF:12
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/QSkumQx1mw-AR34yseFUfzrJzxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.104.0/23
217.160.150.0/23
Signature Algorithm: sha256WithRSAEncryption
23:53:1d:b6:11:dc:8d:53:0b:47:fa:10:72:99:7c:c2:6f:7b:
e8:a3:16:aa:94:ac:9b:29:fc:6e:d4:73:40:4d:fe:ca:de:4a:
d6:e9:51:29:4f:1a:6b:4e:cf:ab:3b:77:7f:a4:54:33:1e:d9:
b8:00:f4:3d:59:70:b5:cc:21:16:7e:55:c8:9f:79:e9:e4:c4:
80:62:8c:58:34:62:4f:2c:48:54:57:31:5b:67:d0:79:03:ae:
b2:ce:9c:c4:06:88:f1:97:14:9f:fc:60:f6:1e:46:49:ed:3e:
3e:e6:bc:94:ea:35:c7:89:01:c3:64:b1:9a:99:ff:11:b9:2d:
ce:a1:72:41:47:8c:3b:9f:c8:c5:8c:10:cd:ec:ff:7b:41:53:
21:5c:e3:3e:45:e8:99:37:53:f3:53:ce:39:64:86:b4:7b:6a:
73:88:c9:23:95:5d:48:fb:63:62:f1:fb:57:3a:62:1e:2a:4e:
61:1d:df:dd:86:2f:74:d0:b1:b3:07:c8:aa:c8:92:6f:d9:22:
d4:24:a1:16:67:8a:d9:87:50:8b:ea:c7:04:dd:28:73:fb:66:
62:d4:cf:a8:a3:0b:2f:06:5d:18:4a:c2:fc:de:98:4e:65:54:
59:6e:50:62:19:da:cd:fb:a9:45:19:47:3b:eb:b5:a2:c4:da:
df:07:e8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:21 2024 by rpki-client on console-fra.rpki-client.org