Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q9PxA_qoDG2f0EXTPiILV6Otu24.roa
File: q9PxA_qoDG2f0EXTPiILV6Otu24.roa (raw, json)
Hash identifier: snxl/pATnQ6er5IktXXbSSjeWXAuJsGaLMMsdN3gHN0=
Subject key identifier: AB:D3:F1:03:FA:A8:0C:6D:9F:D0:45:D3:3E:22:0B:57:A3:AD:BB:6E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018BDCCD917EDEA16B59298F1FBDE3F12A3D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q9PxA_qoDG2f0EXTPiILV6Otu24.roa
Signing time: Fri 17 Nov 2023 10:22:21 +0000
ROA not before: Fri 17 Nov 2023 10:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 2.57.241.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Dec 2023 08:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:cd:91:7e:de:a1:6b:59:29:8f:1f:bd:e3:f1:2a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 17 10:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abd3f103faa80c6d9fd045d33e220b57a3adbb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:23:bf:1e:bf:9a:77:86:e8:c7:37:de:4a:
07:3c:8e:af:fb:aa:b3:3f:80:7b:ef:b0:37:fc:8c:
60:d2:91:ca:67:61:e7:58:35:ff:a2:05:1b:3a:c4:
0b:2d:9f:c7:bd:db:d4:ca:c1:0e:e1:ae:2a:f8:c7:
c9:71:f3:93:6f:c0:49:12:1d:68:31:9b:79:ed:9f:
67:0b:74:84:f9:6b:4e:04:29:21:99:cf:e6:59:4a:
89:00:dc:24:09:0a:09:9d:d1:de:85:5b:5e:e6:b1:
1c:35:13:0b:86:4f:73:a0:01:86:80:d6:4e:90:97:
5b:b3:82:02:a3:5e:60:e3:89:66:9f:77:26:ec:0e:
4d:11:7d:2f:b8:4f:f8:e0:5a:26:d3:b3:ad:25:0a:
c9:67:5d:47:b4:7c:5d:ec:ea:c8:df:03:8c:5c:6b:
e7:f5:3d:ed:14:0d:bd:aa:07:22:22:ef:53:0b:62:
84:d6:77:49:d6:8d:89:c8:0d:2b:3d:3e:dd:98:12:
e7:b7:66:88:f2:ee:02:32:85:2a:a2:13:f7:91:76:
6b:9a:ee:33:41:71:00:c7:69:55:60:b0:ad:8f:24:
41:53:1b:e0:50:24:25:a1:39:df:52:1c:74:3c:c2:
a7:cd:16:66:f9:fa:25:4f:28:6c:c7:a2:e0:b8:ea:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:F1:03:FA:A8:0C:6D:9F:D0:45:D3:3E:22:0B:57:A3:AD:BB:6E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/q9PxA_qoDG2f0EXTPiILV6Otu24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
62.192.152.0/24
Signature Algorithm: sha256WithRSAEncryption
43:91:54:dc:ca:5d:53:65:88:b2:51:75:2e:0e:bc:93:b9:c5:
96:de:af:68:a6:59:aa:cb:c2:03:1a:65:4b:19:ad:c1:c1:47:
5b:cf:9f:4f:9e:46:53:6b:d5:31:f8:54:aa:0c:d5:3f:e9:6d:
7e:81:1a:c3:c7:3d:4d:7d:d5:f9:c1:98:fa:2f:e3:57:33:38:
bb:6e:61:f1:f8:66:f8:1e:5e:6e:3b:65:74:07:85:f1:4b:e4:
e0:e9:45:37:d0:05:c1:17:e6:dd:5a:a2:bd:2b:af:f7:2d:07:
7f:61:7a:8d:a2:db:12:a6:db:b6:60:e4:92:0f:a3:ca:9e:bd:
71:cd:ce:54:03:48:bf:4d:4e:69:29:7e:ad:9f:fd:c7:9a:35:
ef:68:d0:65:f9:1b:76:f0:53:12:99:ad:cb:7c:13:ef:9e:c0:
7b:39:d1:26:a5:41:b2:bc:85:56:29:ce:75:a9:ac:31:77:31:
57:fb:08:40:1c:37:60:63:3f:4a:fc:81:1a:e0:a6:7a:fa:74:
7f:c3:ef:b7:28:59:a5:43:b1:e3:3f:9e:4d:6f:e6:f2:36:08:
f6:ed:ef:57:67:05:06:9d:87:d6:7b:91:71:c7:9b:76:df:c1:
4c:1c:e9:6e:93:8e:35:72:92:a1:96:9b:9b:2f:e1:0e:66:3b:
30:8a:f0:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYvczZF+3qFrWSmPH73j8So9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMxMTE3MTAyMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmQzZjEwM2ZhYTgwYzZkOWZkMDQ1ZDMzZTIyMGI1N2EzYWRiYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrIjvx6/mneG6Mc33koHPI6v+6qz
P4B777A3/Ixg0pHKZ2HnWDX/ogUbOsQLLZ/HvdvUysEO4a4q+MfJcfOTb8BJEh1o
MZt57Z9nC3SE+WtOBCkhmc/mWUqJANwkCQoJndHehVte5rEcNRMLhk9zoAGGgNZO
kJdbs4ICo15g44lmn3cm7A5NEX0vuE/44Fom07OtJQrJZ11HtHxd7OrI3wOMXGvn
9T3tFA29qgciIu9TC2KE1ndJ1o2JyA0rPT7dmBLnt2aI8u4CMoUqohP3kXZrmu4z
QXEAx2lVYLCtjyRBUxvgUCQloTnfUhx0PMKnzRZm+folTyhsx6LguOqBewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKvT8QP6qAxtn9BF0z4iC1ejrbtuMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvcTlQeEFfcW9ERzJmMEVYVFBpSUxWNk90dTI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjnxAwQA
PsCYMA0GCSqGSIb3DQEBCwUAA4IBAQBDkVTcyl1TZYiyUXUuDryTucWW3q9oplmq
y8IDGmVLGa3BwUdbz59PnkZTa9Ux+FSqDNU/6W1+gRrDxz1NfdX5wZj6L+NXMzi7
bmHx+Gb4Hl5uO2V0B4XxS+Tg6UU30AXBF+bdWqK9K6/3LQd/YXqNotsSptu2YOSS
D6PKnr1xzc5UA0i/TU5pKX6tn/3HmjXvaNBl+Rt28FMSma3LfBPvnsB7OdEmpUGy
vIVWKc51qawxdzFX+whAHDdgYz9K/IEa4KZ6+nR/w++3KFmlQ7HjP55Nb+byNgj2
7e9XZwUGnYfWe5Fxx5t238FMHOluk441cpKhlpubL+EOZjswivBH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org