Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/q-XPfciLMIA0GSBN3T5ml-Vzx6Q.roa
File: q-XPfciLMIA0GSBN3T5ml-Vzx6Q.roa (raw, json)
Hash identifier: o4vfojgg75KHuJvCZqmeMqqQMnAAbGd7/LjXPlbxXZM=
Subject key identifier: AB:E5:CF:7D:C8:8B:30:80:34:19:20:4D:DD:3E:66:97:E5:73:C7:A4
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0185B22FFFAD0E59CA139494B03565751527
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/q-XPfciLMIA0GSBN3T5ml-Vzx6Q.roa
Signing time: Sat 14 Jan 2023 21:29:28 +0000
ROA not before: Sat 14 Jan 2023 21:29:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212416
IP address blocks: 62.182.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b2:2f:ff:ad:0e:59:ca:13:94:94:b0:35:65:75:15:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 14 21:29:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abe5cf7dc88b30803419204ddd3e6697e573c7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:c1:40:b9:df:44:3b:d2:4e:c9:0d:47:9f:
99:b4:0d:bf:42:f9:1e:5f:40:5c:61:57:82:83:a3:
fe:f2:d5:24:49:6a:b9:c2:e6:22:02:0d:2d:5f:bb:
97:95:60:f1:ea:b7:cc:db:aa:fe:8a:b7:21:4f:b6:
9a:d5:a2:f2:03:58:f4:04:e2:49:04:69:5b:99:03:
cf:53:4a:99:55:1c:fe:f8:5e:65:78:c3:2e:7b:f2:
8c:f5:6f:af:09:76:4d:46:05:71:04:c3:27:1f:de:
a9:c3:92:45:78:1f:de:b9:50:5b:c0:f7:cc:af:ad:
eb:91:89:0c:b8:64:7c:e8:7f:51:2b:37:23:85:f3:
3a:4b:cf:ba:06:8c:56:6c:05:bf:6d:fc:d1:b6:44:
f1:56:35:eb:d5:82:7f:6f:fb:3c:7a:b9:fe:86:7b:
23:c8:a9:e0:6f:a4:3a:eb:13:90:58:d5:fc:bc:3a:
ae:99:68:80:0b:e6:7b:5f:8b:53:61:26:1f:73:14:
fc:42:c1:c7:42:9c:b7:fe:db:82:06:47:16:af:91:
de:94:b5:1c:04:3f:4b:96:55:f4:04:4c:ab:42:8b:
34:40:1d:cd:2f:e8:4d:5a:f5:8c:ee:fe:e3:b7:b9:
94:69:03:64:07:c5:69:52:00:2d:36:bc:fa:d9:1e:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E5:CF:7D:C8:8B:30:80:34:19:20:4D:DD:3E:66:97:E5:73:C7:A4
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/q-XPfciLMIA0GSBN3T5ml-Vzx6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.168.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4c:7c:c2:a1:35:6e:63:74:28:50:32:75:ce:f3:e9:db:e2:
1b:95:ef:37:8b:73:79:14:8b:3c:ff:80:4e:c0:ee:68:fd:63:
d9:37:fe:50:67:22:e7:22:6e:05:9a:8a:35:5b:41:2a:08:50:
3e:fd:88:fd:7d:04:1c:85:0d:3d:6c:97:06:a2:12:d9:8b:be:
a0:e1:05:f3:48:71:6a:bf:2a:9d:7b:2f:4c:2a:83:26:6b:ca:
b0:da:ab:31:6b:2d:47:6f:9a:bd:c6:3b:5c:7d:b7:62:b0:b1:
9d:37:c1:92:73:dc:09:77:2c:ef:de:4d:4a:2b:cf:2f:9d:3b:
2f:4b:bd:5d:73:90:25:fe:37:bf:a5:6c:1f:f1:36:0e:55:fd:
4b:b4:e1:bd:26:06:b2:53:95:c2:4e:71:de:bc:29:1c:d7:0e:
c6:6c:b1:52:22:7b:b0:30:58:bb:c1:31:1c:29:71:a8:48:a4:
3f:14:96:35:97:2c:8e:43:57:6f:d1:50:bf:54:93:74:f2:22:
37:5a:b9:34:a5:b6:cb:25:10:d2:64:32:0a:15:0a:89:8b:7b:
c8:ec:7e:f9:81:d2:c6:57:27:0d:31:0d:67:e8:3b:23:1a:0d:
28:85:16:8d:91:26:c7:19:a0:2a:bb:29:de:72:02:2e:99:bb:
a3:82:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 08:07:33 2023 by rpki-client on console-ams.rpki-client.org