Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/QAePIcjQMISqvfKUOXJFK5EMi4U.roa
File: QAePIcjQMISqvfKUOXJFK5EMi4U.roa (raw, json)
Hash identifier: lsm1ckwB7OrgZiuzLBbIznLH4pb0SRhV1Lb6eNytrkY=
Subject key identifier: 40:07:8F:21:C8:D0:30:84:AA:BD:F2:94:39:72:45:2B:91:0C:8B:85
Certificate issuer: /CN=35df1cdb6d457f1adb33ebbde019ea5b21dfb42c
Certificate serial: 018964C05C9B17D411D4E61E26AC50D87C02
Authority key identifier: 35:DF:1C:DB:6D:45:7F:1A:DB:33:EB:BD:E0:19:EA:5B:21:DF:B4:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd8c221FfxrbM-u94BnqWyHftCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/QAePIcjQMISqvfKUOXJFK5EMi4U.roa
Signing time: Mon 17 Jul 2023 16:47:55 +0000
ROA not before: Mon 17 Jul 2023 16:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 91.213.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5c:9b:17:d4:11:d4:e6:1e:26:ac:50:d8:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35df1cdb6d457f1adb33ebbde019ea5b21dfb42c
Validity
Not Before: Jul 17 16:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40078f21c8d03084aabdf2943972452b910c8b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:4f:7f:54:03:2b:50:84:2d:08:f8:6f:38:
24:ab:d3:27:df:f5:f7:e2:6f:9f:9f:86:01:c0:96:
3f:31:ab:98:d1:79:72:0f:ce:01:ed:b2:41:62:22:
3f:8b:59:61:91:c0:8c:bc:b4:15:b0:6f:35:ea:ab:
ed:24:b9:69:84:52:6c:bc:0c:b1:22:71:9b:e0:0a:
ef:dc:2f:9f:d1:8d:9a:eb:3f:01:36:a4:6b:2f:79:
d5:e4:9a:f0:ca:d3:fd:7d:05:f4:b8:fc:fd:44:3e:
3a:26:40:a9:82:ea:84:1f:9e:46:5f:f5:43:90:89:
04:27:73:9d:cc:03:fb:a4:5a:20:24:f3:1e:b5:1d:
f8:06:f8:dc:f0:96:9c:02:79:96:63:1c:1f:09:51:
d6:e8:72:e0:8c:ad:57:45:88:31:35:17:90:08:37:
ba:71:49:90:ef:f3:78:fb:6e:42:7b:57:ee:dd:36:
9b:b2:6b:02:93:f1:47:2a:73:35:24:b8:d6:01:0f:
f9:00:32:f1:72:d0:b4:0b:30:87:20:1d:2c:1c:72:
24:c5:49:3f:6e:72:e3:c9:7a:fe:ec:f8:fd:f3:84:
55:0d:0e:20:dc:95:d8:57:6a:24:2f:59:71:7a:06:
80:55:c3:db:0c:8f:fb:b9:d9:7f:08:e9:38:2d:36:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:07:8F:21:C8:D0:30:84:AA:BD:F2:94:39:72:45:2B:91:0C:8B:85
X509v3 Authority Key Identifier:
keyid:35:DF:1C:DB:6D:45:7F:1A:DB:33:EB:BD:E0:19:EA:5B:21:DF:B4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd8c221FfxrbM-u94BnqWyHftCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/QAePIcjQMISqvfKUOXJFK5EMi4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.230.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:f7:34:40:03:38:2a:0c:2d:a3:b2:a8:04:5c:b2:29:24:10:
53:62:2d:ea:6e:60:83:21:70:a7:63:c4:a5:52:7c:31:14:15:
bc:e7:55:18:57:6f:14:ea:a5:b0:8e:03:8d:ab:33:94:f9:2c:
d4:6e:9a:d5:b8:06:b9:fb:25:03:31:3d:3c:4f:cd:13:f3:ac:
66:29:c7:80:9f:c9:d7:bc:d9:0e:86:37:1a:8f:b9:a5:80:d5:
f2:fc:f0:c5:94:0c:eb:cb:ce:78:c4:d0:c0:d2:45:b7:51:c5:
be:2b:4e:e8:6f:46:7d:fa:d7:af:ce:de:9c:6f:45:79:75:cd:
37:7e:ad:e4:fd:ed:93:3b:33:7a:46:d8:86:4d:d5:ba:51:af:
19:91:19:2a:88:a6:65:5a:42:63:88:17:d7:ad:9b:20:84:2b:
d1:48:79:c3:bc:87:7e:6c:d0:0e:15:c0:29:88:ed:50:05:0b:
36:1c:62:35:de:a0:61:88:c6:3c:76:c5:82:b8:86:50:b7:f5:
ec:e3:60:98:c8:b7:98:3f:54:a0:45:8c:1c:4d:32:b9:36:bb:
e0:16:a7:2c:42:12:80:e8:f0:86:e4:bb:1e:a0:3d:e9:d6:6f:
58:9f:d4:8f:ee:21:70:4d:be:4d:b7:e9:52:60:f8:94:38:74:
62:27:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:13 2024 by rpki-client on console-ams.rpki-client.org