Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/qRSSMyYRUDZemlvecZzSKQgtQmM.roa
File: qRSSMyYRUDZemlvecZzSKQgtQmM.roa (raw, json)
Hash identifier: /3sJp2gTRrx/Ewg28f7rm9fSrAgWaZUptzxv1RQiQsA=
Subject key identifier: A9:14:92:33:26:11:50:36:5E:9A:5B:DE:71:9C:D2:29:08:2D:42:63
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01856C1390ED5C9DA431E9E47E94AC8894F3
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/qRSSMyYRUDZemlvecZzSKQgtQmM.roa
Signing time: Sun 01 Jan 2023 06:44:59 +0000
ROA not before: Sun 01 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34573
IP address blocks: 78.140.35.0/24 maxlen: 24
78.140.34.0/24 maxlen: 24
78.140.33.0/24 maxlen: 24
78.140.32.0/20 maxlen: 20
78.140.32.0/24 maxlen: 24
78.140.38.0/24 maxlen: 24
78.140.37.0/24 maxlen: 24
78.140.36.0/24 maxlen: 24
78.140.42.0/24 maxlen: 24
78.140.41.0/24 maxlen: 24
78.140.40.0/24 maxlen: 24
78.140.39.0/24 maxlen: 24
78.140.44.0/24 maxlen: 24
78.140.43.0/24 maxlen: 24
78.140.47.0/24 maxlen: 24
78.140.46.0/24 maxlen: 24
78.140.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:90:ed:5c:9d:a4:31:e9:e4:7e:94:ac:88:94:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 1 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9149233261150365e9a5bde719cd229082d4263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:4f:a8:98:f1:89:ca:29:db:43:a2:ad:53:
8f:0e:a0:6e:62:cb:cd:d1:ea:bb:af:c0:f7:01:8a:
08:ae:15:e3:ff:38:9a:2a:e1:6b:ff:11:f5:0b:80:
88:a2:87:62:61:5a:bd:cb:b1:9e:05:f3:b9:3b:07:
41:13:e1:02:31:ad:6c:ee:d5:56:b4:27:20:c1:1a:
29:37:fe:ba:5b:86:8e:f1:b2:6d:af:ae:0b:31:e2:
64:af:04:a6:b5:c3:46:26:14:d1:a5:f6:20:6a:65:
46:43:72:24:83:d2:0f:d3:29:ee:b8:3b:b8:b7:80:
a3:c3:9b:0b:26:6a:e1:c7:89:7a:29:1f:8d:7a:39:
1c:20:f7:bc:ab:97:6e:59:4a:5a:4a:bf:30:2d:5a:
f6:52:c8:90:5e:ef:84:b7:a8:b3:3f:a2:62:9b:57:
60:83:67:83:b3:bd:b0:4b:f4:fc:61:6a:20:5b:d1:
40:c8:21:13:36:a3:d7:fb:cd:cf:26:42:7f:71:81:
57:e0:7e:ba:da:dc:23:c9:95:f2:8f:eb:a3:47:31:
67:36:c1:40:6e:e5:09:cf:f4:bf:8a:21:61:7b:68:
b1:be:da:17:f3:f6:ce:aa:d1:07:fe:cf:1a:e2:85:
35:3b:93:16:1a:6d:11:67:57:ed:99:43:6b:7e:31:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:14:92:33:26:11:50:36:5E:9A:5B:DE:71:9C:D2:29:08:2D:42:63
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/qRSSMyYRUDZemlvecZzSKQgtQmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.140.32.0/20
Signature Algorithm: sha256WithRSAEncryption
66:66:1b:b7:a1:31:63:2d:e6:2b:08:ae:ac:7e:3f:10:db:14:
ef:51:97:f4:a0:cf:d8:fd:37:79:86:5d:da:2f:ac:10:07:29:
14:ad:94:75:94:34:bf:8c:e3:ed:17:aa:a8:16:85:83:ee:2a:
5e:39:90:a2:03:53:3b:d2:6d:32:39:b2:fd:80:0a:9d:ff:05:
59:48:ec:a2:66:b5:e5:c2:93:ac:b7:bc:74:6c:98:f6:ea:6a:
2c:48:83:d9:a9:99:64:74:cb:20:81:e6:48:77:15:e2:39:5f:
34:70:b3:96:f4:74:c4:e8:35:ca:8a:76:9a:b6:9a:bd:02:21:
cd:6e:dd:2f:fc:f6:8f:60:23:48:04:e8:33:d0:1d:c8:a9:0e:
da:65:fc:39:e2:79:0f:bd:09:8e:31:7f:b4:30:06:8f:f3:e2:
ca:ef:ad:98:8e:0c:49:26:51:9f:31:23:30:54:ed:0c:83:0c:
3b:5b:d6:9c:6a:b6:ee:64:58:6c:4b:e6:68:67:a1:6a:80:cb:
02:49:4d:77:22:05:a0:ac:6b:a4:d4:b7:fd:b0:fb:73:8e:4e:
40:47:9b:d0:55:af:5b:5a:8a:84:56:cb:5f:fe:87:fe:a1:1a:
1f:76:57:c1:2c:ea:0f:15:94:41:18:fe:c3:fa:a7:fc:92:5e:
10:41:eb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:56 2024 by rpki-client on console-ams.rpki-client.org