Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/qXaZTnLju31zaxZLLhXTtfLioVg.roa
File: qXaZTnLju31zaxZLLhXTtfLioVg.roa (raw, json)
Hash identifier: EftWgqztknC/K2U+PBs4cVMt25QYLtDT1Jh0Elm1Vqw=
Subject key identifier: A9:76:99:4E:72:E3:BB:7D:73:6B:16:4B:2E:15:D3:B5:F2:E2:A1:58
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0185725EC0A105960534E0E5B4EC14015752
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/qXaZTnLju31zaxZLLhXTtfLioVg.roa
Signing time: Mon 02 Jan 2023 12:04:50 +0000
ROA not before: Mon 02 Jan 2023 12:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 64.137.32.0/24 maxlen: 24
64.137.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:5e:c0:a1:05:96:05:34:e0:e5:b4:ec:14:01:57:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 12:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a976994e72e3bb7d736b164b2e15d3b5f2e2a158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:5a:b9:75:7b:17:66:3d:7a:05:83:d3:08:
95:d5:9f:ee:00:99:5c:33:56:a6:2e:f0:3c:b9:3e:
6a:47:be:81:af:09:c1:24:b5:d8:b7:84:f3:59:b1:
f7:9b:bd:d1:85:c5:18:a2:ad:96:e6:ab:54:f6:cc:
82:a7:42:34:f3:03:2b:44:9a:34:10:f8:92:2d:23:
ce:43:89:ac:9d:b5:6d:1e:9e:f3:a3:0f:f5:33:43:
f7:2c:f3:d0:af:88:8e:71:cd:ae:f6:0e:9c:0f:05:
a4:c2:32:bd:42:fe:02:12:47:9b:72:ac:a1:17:a6:
d1:45:8f:94:ac:6d:65:9d:34:df:34:cd:99:8b:a2:
de:0e:24:4e:c5:1a:f3:71:d9:1a:46:7f:03:a6:b4:
9e:b0:17:4b:46:f0:3e:8e:6a:6d:7d:f7:ea:71:c8:
08:64:ed:bf:fb:d8:9c:17:a2:85:fe:f2:42:f1:15:
5e:64:06:bb:6a:ed:97:52:43:6c:88:e8:73:39:89:
38:f6:5b:ac:e9:b9:d2:37:2a:39:cd:e9:5c:fa:e8:
36:0a:95:1f:98:cd:17:a3:da:41:a8:57:63:00:2d:
c7:7c:06:30:6f:f3:da:4f:6c:62:bf:3d:8b:a8:cc:
b8:dc:d2:0b:96:2a:55:a5:b3:8d:b8:65:fb:e7:70:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:99:4E:72:E3:BB:7D:73:6B:16:4B:2E:15:D3:B5:F2:E2:A1:58
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/qXaZTnLju31zaxZLLhXTtfLioVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.32.0/24
64.137.116.0/24
Signature Algorithm: sha256WithRSAEncryption
39:71:6d:85:1a:ec:12:f5:c6:68:91:81:0f:9d:94:be:ba:1a:
61:21:8f:3c:4c:16:5f:05:72:47:c9:26:a3:04:f4:8f:e4:e7:
fe:7c:83:28:fa:a4:97:d7:c0:87:0e:48:a6:cc:02:6f:f2:a1:
44:ec:77:c9:c1:0e:29:9b:13:cd:b6:eb:21:b8:82:77:42:d8:
45:9a:a2:b8:77:9d:43:c8:37:b9:df:37:e6:c6:da:79:b7:75:
62:10:24:17:d0:84:55:6c:d0:f1:3b:ca:b2:e9:f8:26:33:b5:
b3:c3:9c:87:c0:f3:7d:66:91:b5:51:23:82:f4:02:99:fb:a0:
31:3f:26:ca:13:0f:dd:b8:e3:53:0b:65:ec:d7:ad:00:2a:fa:
45:88:29:59:b9:de:5e:06:bd:c4:ff:da:c1:e0:74:d4:17:56:
9b:14:3f:ae:51:ef:dc:47:80:7e:6e:65:b7:b0:5c:75:0e:c2:
b7:a6:db:09:8d:7b:6d:05:f3:5d:17:7a:cc:91:1b:2f:1a:04:
02:73:90:c6:dc:5f:87:14:f6:9a:a0:28:50:f6:fc:e5:1f:cc:
35:ec:4c:3f:c0:68:23:a2:cb:85:e9:90:44:15:5d:19:85:3c:
0a:24:1d:c3:25:6a:57:83:73:4d:25:b9:d5:6c:67:83:d2:92:
b6:4e:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-fra.rpki-client.org