Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/qmmm5d7zSWZSWtZ5DW-zqCoG3JA.roa
File: qmmm5d7zSWZSWtZ5DW-zqCoG3JA.roa (raw, json)
Hash identifier: w6WrAdSia72QjIWKtAXyMSEPoLwar+VeCwmbN0A1rkw=
Subject key identifier: AA:69:A6:E5:DE:F3:49:66:52:5A:D6:79:0D:6F:B3:A8:2A:06:DC:90
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018B8116CA0117E2AB16F2AA6EA4E57871AE
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/qmmm5d7zSWZSWtZ5DW-zqCoG3JA.roa
Signing time: Mon 30 Oct 2023 14:57:16 +0000
ROA not before: Mon 30 Oct 2023 14:57:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57428
IP address blocks: 5.144.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:16:ca:01:17:e2:ab:16:f2:aa:6e:a4:e5:78:71:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Oct 30 14:57:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa69a6e5def34966525ad6790d6fb3a82a06dc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:82:6e:c3:92:e0:d0:6a:d2:34:b3:c0:33:
e6:55:67:df:8e:01:94:65:03:26:de:c7:40:01:dc:
d9:54:0c:90:5b:3a:1e:cb:50:5f:76:3d:69:d3:67:
65:93:5a:48:c2:12:d3:53:9f:c6:61:0b:0b:a1:72:
b7:52:4c:ed:7f:ca:76:f3:c5:38:4b:c3:c1:9c:16:
73:f0:79:f8:6e:96:f4:99:26:78:f1:59:2d:1c:3f:
0d:fa:15:7c:69:77:b6:a7:dd:a2:1c:6c:81:13:9f:
87:12:47:24:10:2a:4b:63:44:69:2a:f2:f8:49:1e:
83:2e:e5:c4:af:51:9b:94:c1:b2:b0:eb:a6:d7:14:
9d:77:41:4b:e0:46:c0:f7:c8:ac:f3:d8:65:d5:87:
69:f9:2c:9d:c0:66:8e:27:97:19:49:ca:9c:2e:5b:
68:fd:63:0f:1b:aa:cb:b8:b7:77:5f:23:e4:3e:6e:
9c:f9:63:59:0b:01:6d:55:40:51:2a:86:52:19:ee:
a2:84:fe:e8:26:c9:36:46:5c:92:55:b7:95:27:4d:
c9:a5:03:bf:3a:88:37:19:66:e9:a7:98:25:6c:75:
0f:27:7b:cf:be:06:77:f9:11:58:37:e5:ef:c0:1b:
4b:d8:fb:56:d7:83:c5:7f:f8:7f:23:93:a8:45:d0:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:69:A6:E5:DE:F3:49:66:52:5A:D6:79:0D:6F:B3:A8:2A:06:DC:90
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/qmmm5d7zSWZSWtZ5DW-zqCoG3JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5e:9c:22:25:6c:f1:d2:62:95:15:27:28:aa:29:b8:34:bf:
85:bc:33:79:17:10:98:ae:de:db:f3:53:e2:08:7f:f8:5d:71:
61:a0:96:56:0c:2d:7d:31:11:76:f5:01:f5:38:6f:dd:3a:95:
ce:85:ba:9b:63:2f:72:f2:c5:a0:bd:16:9b:fa:26:67:75:90:
1f:c9:c8:86:e4:59:7b:5c:c5:fb:2e:35:cc:2c:81:ec:5d:57:
46:73:df:58:a2:d9:f8:0a:24:5a:d1:c1:f1:bf:78:55:1c:fb:
bd:5e:32:8a:00:23:20:9a:db:be:bc:b8:b1:a6:fd:82:e6:d2:
44:63:29:4c:23:2a:3d:47:74:81:1d:bc:02:20:b0:49:2f:a2:
97:3f:35:11:1b:29:ba:93:c2:56:08:0f:38:3d:6c:7e:db:d4:
ad:80:5a:a3:5f:e9:0d:a3:b4:52:ea:a3:51:88:2c:d7:da:f1:
a9:c0:73:75:c1:d9:8a:85:5f:65:b0:b8:a8:2d:15:67:03:64:
13:be:7b:39:ce:f8:11:74:89:a0:e8:1b:a3:ff:25:33:17:bb:
ab:fb:24:48:03:2c:14:f3:e5:8c:45:9e:0b:98:69:f3:ef:74:
75:de:24:2d:af:c0:75:43:9b:0e:e4:12:49:b0:7a:06:da:f3:
59:6a:ac:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 13:50:54 2023 by rpki-client on console-fra.rpki-client.org