Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/qlas5BChoUGM8eukjJBCgQC0PiE.roa
File: qlas5BChoUGM8eukjJBCgQC0PiE.roa (raw, json)
Hash identifier: Gf79NaVM1usHwBprNP4IM9UGsUua4YjxRKCx8V9LZSg=
Subject key identifier: AA:56:AC:E4:10:A1:A1:41:8C:F1:EB:A4:8C:90:42:81:00:B4:3E:21
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0187FA01A75E5EDFF629E9BD900F77047E2B
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/qlas5BChoUGM8eukjJBCgQC0PiE.roa
Signing time: Mon 08 May 2023 06:17:05 +0000
ROA not before: Mon 08 May 2023 06:17:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
62.182.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:01:a7:5e:5e:df:f6:29:e9:bd:90:0f:77:04:7e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: May 8 06:17:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa56ace410a1a1418cf1eba48c90428100b43e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:23:80:df:03:53:5c:5e:d4:58:c7:0c:c9:
cb:d2:2b:f2:63:97:a8:b7:93:ff:fb:36:e8:3b:10:
f1:c3:01:1e:7b:24:c0:9d:7a:28:e4:c3:c5:35:11:
f4:39:da:ff:89:24:27:c5:48:7c:ea:2a:79:de:66:
d9:d4:e5:a1:11:b8:71:c0:62:60:12:e7:54:9a:37:
dd:de:54:47:f9:9f:db:16:81:95:00:4d:18:f4:02:
d6:4f:17:0a:9f:27:5e:41:67:7e:d0:38:70:b9:6a:
ff:e0:59:3e:1b:d3:24:ac:59:bc:70:52:ec:7f:30:
e4:ae:66:c5:75:44:d4:a7:af:ca:5e:4f:b8:69:11:
d6:3c:bf:3b:23:29:ef:ca:2c:16:35:7d:9f:f0:3c:
42:55:7b:80:af:89:80:90:c9:0b:47:6c:44:98:4d:
ae:ad:e8:1b:a3:54:34:ab:25:bf:0c:7f:56:bd:91:
aa:70:73:27:c2:49:01:21:88:ef:51:29:20:34:ad:
44:83:15:8f:90:e6:29:fe:9d:10:e5:a5:29:d1:8b:
c9:55:19:73:06:0d:56:0f:d0:3f:82:72:59:ee:61:
dc:fc:3a:dc:41:51:42:5c:c1:be:f0:47:26:91:7e:
9b:53:63:c5:97:6c:ca:3f:c2:39:84:d3:1a:4f:44:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:AC:E4:10:A1:A1:41:8C:F1:EB:A4:8C:90:42:81:00:B4:3E:21
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/qlas5BChoUGM8eukjJBCgQC0PiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
62.182.172.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e0:86:a5:7f:fc:bc:ff:2d:b8:61:dc:ba:4b:f8:d3:9b:13:
22:03:90:f2:1c:31:7b:28:79:42:1b:ee:e2:78:e4:46:b7:ea:
34:73:ae:02:d5:05:91:bf:33:86:9d:7c:5f:b4:81:4c:2c:99:
49:69:4d:4e:a7:a7:b8:88:7a:4a:9e:6e:18:c7:8c:d5:5b:91:
b2:5e:b3:88:23:fd:cf:17:5a:2b:ef:ca:1d:38:5e:8f:e4:ea:
8c:25:ec:6c:6d:20:e2:bb:0b:cc:f0:1a:ac:b4:55:b7:10:90:
fd:28:e3:12:52:41:5e:d4:71:77:70:d2:27:be:7c:88:f9:5f:
be:7e:27:56:a6:01:57:cf:58:1b:0b:76:d6:4c:3e:0c:d0:c5:
fb:55:2b:e4:6f:c6:82:ae:84:88:8c:81:c6:0e:3c:dc:89:7f:
89:a5:99:17:80:46:d5:c9:ff:46:3b:ec:d3:74:1f:32:d0:10:
b6:63:00:21:70:1d:e2:eb:7c:b5:b5:3b:50:c1:36:bd:4f:74:
63:7c:a2:c8:c0:85:19:69:4a:32:6a:aa:cf:35:d5:c3:68:69:
12:3e:e8:c6:d6:ec:35:29:b3:d2:ae:40:a9:a8:1a:54:86:be:
77:27:e5:6d:e1:3d:89:1a:a4:22:5e:4e:cf:36:27:7a:26:56:
d8:6e:57:fd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYf6AadeXt/2Kem9kA93BH4rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGVkOTQyZTVjNzQyZTc3YmZiOWJlYjk1NGY4NzI1MzRm
NTI4NDgwHhcNMjMwNTA4MDYxNzA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTU2YWNlNDEwYTFhMTQxOGNmMWViYTQ4YzkwNDI4MTAwYjQzZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBwjgN8DU1xe1FjHDMnL0ivyY5eo
t5P/+zboOxDxwwEeeyTAnXoo5MPFNRH0Odr/iSQnxUh86ip53mbZ1OWhEbhxwGJg
EudUmjfd3lRH+Z/bFoGVAE0Y9ALWTxcKnydeQWd+0DhwuWr/4Fk+G9MkrFm8cFLs
fzDkrmbFdUTUp6/KXk+4aRHWPL87IynvyiwWNX2f8DxCVXuAr4mAkMkLR2xEmE2u
regbo1Q0qyW/DH9WvZGqcHMnwkkBIYjvUSkgNK1EgxWPkOYp/p0Q5aUp0YvJVRlz
Bg1WD9A/gnJZ7mHc/DrcQVFCXMG+8EcmkX6bU2PFl2zKP8I5hNMaT0SdxQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKpWrOQQoaFBjPHrpIyQQoEAtD4hMB8GA1UdIwQY
MBaAFDxO2ULlx0Lne/ub65VPhyU09ShIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2Et
NzczNDRiY2M5MTkxLzEvcWxhczVCQ2hvVUdNOGV1a2pKQkNnUUMwUGlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2EtNzczNDRiY2M5MTkx
LzEvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPraqAwQA
PrasMA0GCSqGSIb3DQEBCwUAA4IBAQBo4Ialf/y8/y24Ydy6S/jTmxMiA5DyHDF7
KHlCG+7ieORGt+o0c64C1QWRvzOGnXxftIFMLJlJaU1Op6e4iHpKnm4Yx4zVW5Gy
XrOII/3PF1or78odOF6P5OqMJexsbSDiuwvM8BqstFW3EJD9KOMSUkFe1HF3cNIn
vnyI+V++fidWpgFXz1gbC3bWTD4M0MX7VSvkb8aCroSIjIHGDjzciX+JpZkXgEbV
yf9GO+zTdB8y0BC2YwAhcB3i63y1tTtQwTa9T3RjfKLIwIUZaUoyaqrPNdXDaGkS
PujG1uw1KbPSrkCpqBpUhr53J+Vt4T2JGqQiXk7PNid6JlbYblf9
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org