Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/QiifFciIdKTphmxe1IuyGxskBdU.roa
File: QiifFciIdKTphmxe1IuyGxskBdU.roa (raw, json)
Hash identifier: YpdMAW61rO2WrTVarT1W5KpdGd1zmV/u6b6PsXWUtsE=
Subject key identifier: 42:28:9F:15:C8:88:74:A4:E9:86:6C:5E:D4:8B:B2:1B:1B:24:05:D5
Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial: 018DE520CC7F5C7F04F092964486E272EA34
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/QiifFciIdKTphmxe1IuyGxskBdU.roa
Signing time: Mon 26 Feb 2024 11:15:48 +0000
ROA not before: Mon 26 Feb 2024 11:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 62.3.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 16:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:20:cc:7f:5c:7f:04:f0:92:96:44:86:e2:72:ea:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Validity
Not Before: Feb 26 11:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42289f15c88874a4e9866c5ed48bb21b1b2405d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:b4:43:50:a4:7e:96:21:ec:44:aa:54:38:
c1:8a:d3:e2:83:28:e3:de:25:67:10:2f:a3:4a:a7:
b2:23:18:09:db:ba:ee:4d:af:9c:c1:92:7e:5e:08:
9f:05:6e:65:bd:22:8d:a4:48:8a:f2:a2:f2:5f:9c:
be:77:8b:f2:20:8c:50:8c:f4:10:c1:2a:a9:06:cb:
06:a8:f8:8c:d5:26:2a:85:b5:09:7d:ff:64:4d:91:
ef:c0:c5:f1:f1:5d:97:c8:03:c0:5b:7a:45:24:a0:
ea:42:80:3e:2f:48:3b:41:fd:39:07:70:77:65:c7:
ef:f2:7f:30:f4:e8:04:cb:57:03:e8:d0:bb:72:1f:
92:3b:2d:e5:d4:8b:98:92:f5:9c:67:50:34:6a:ab:
81:86:ec:12:00:f2:c5:75:60:73:80:18:90:a4:b6:
49:f3:51:bb:0b:d2:aa:02:31:07:00:3c:16:47:57:
95:c9:5e:fe:b9:1b:57:b5:62:b5:f6:5e:81:5d:0c:
db:33:bc:23:41:ce:c3:6e:23:92:ce:db:42:05:4f:
70:a7:5e:ff:09:60:8e:db:57:fb:2c:fe:91:96:b0:
9e:1e:96:8a:03:96:d8:90:45:4b:f4:60:fb:60:95:
f8:53:bc:9c:f7:ff:4c:a5:39:df:ee:33:65:6f:42:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:28:9F:15:C8:88:74:A4:E9:86:6C:5E:D4:8B:B2:1B:1B:24:05:D5
X509v3 Authority Key Identifier:
keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/QiifFciIdKTphmxe1IuyGxskBdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e4:42:5f:9c:7b:68:99:63:f3:7d:59:47:0c:01:c2:08:cb:
a2:cb:ea:79:77:ad:6f:4e:48:ba:45:38:70:0f:62:10:ee:7d:
21:a9:25:08:70:1e:73:18:60:a8:f4:15:4b:df:07:61:d8:dd:
c6:14:c9:b3:2f:14:43:de:c8:6e:35:7f:e0:88:3c:9b:c6:67:
63:cd:ea:66:e7:84:ac:2b:50:af:ee:fc:ff:90:a1:b1:cd:5a:
13:f1:fa:53:e6:ce:d7:53:36:24:eb:56:9c:d8:07:45:b4:76:
54:5e:df:b1:ce:2b:54:13:41:8e:67:e3:48:61:92:fb:a9:e6:
5a:61:31:1b:34:41:21:8a:f2:a4:b1:c0:cb:4f:2b:9f:d0:82:
5c:1f:5f:55:1c:a5:29:00:e5:da:0b:5f:40:74:31:15:ea:53:
12:7c:bc:a3:78:9b:10:0a:38:0d:38:9b:7f:0a:99:80:3b:d7:
58:10:1d:9c:75:85:ab:a0:d8:fe:ef:11:cf:ab:88:d9:93:0f:
64:a9:5c:80:69:9d:93:0a:c1:58:52:8c:52:38:5c:7c:5d:ed:
a4:7d:c5:b2:3d:f5:8f:c1:20:1e:04:b1:b0:60:bd:45:de:8e:
c4:41:76:5c:f5:58:98:e7:80:f0:9b:35:16:81:be:6d:8a:c1:
6c:1a:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:48 2024 by rpki-client on console-fra.rpki-client.org