Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/qtq9lIxpeQg2YyILcZDJYTE_xLQ.roa
File: qtq9lIxpeQg2YyILcZDJYTE_xLQ.roa (raw, json)
Hash identifier: NhgCImTWhn3mdhiPCRhzQ4VNw5AkgLk0vR1IcJK2jUw=
Subject key identifier: AA:DA:BD:94:8C:69:79:08:36:63:22:0B:71:90:C9:61:31:3F:C4:B4
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 018571D7C68109A318A9AE5A0E2D8605B41A
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/qtq9lIxpeQg2YyILcZDJYTE_xLQ.roa
Signing time: Mon 02 Jan 2023 09:37:24 +0000
ROA not before: Mon 02 Jan 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 5.83.48.0/21 maxlen: 21
153.92.122.0/23 maxlen: 23
153.92.120.0/23 maxlen: 23
5.83.64.0/19 maxlen: 19
185.67.104.0/23 maxlen: 23
212.85.246.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c6:81:09:a3:18:a9:ae:5a:0e:2d:86:05:b4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Jan 2 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aadabd948c6979083663220b7190c961313fc4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:02:82:f0:40:fa:b3:4a:23:b7:a9:b2:e1:
75:27:e8:86:6e:8c:71:35:b8:b3:ef:b7:0c:f5:4b:
67:13:c4:c1:42:ac:bc:2e:74:2c:c6:df:a5:7b:bd:
63:b8:a9:01:08:5c:d3:76:54:27:5c:33:a5:32:cb:
d4:15:10:a6:89:13:11:08:bc:25:a9:5f:f7:98:01:
3a:5d:f9:43:3b:a5:06:75:d9:95:05:b1:e9:67:86:
85:65:78:5f:96:de:e9:77:a7:2f:01:85:aa:06:4d:
43:29:7a:da:88:7c:0a:0a:93:a9:83:25:e8:5f:42:
67:2d:d2:bf:02:9c:45:b5:87:d7:4c:8f:85:02:44:
00:57:31:1d:3b:a7:24:74:4a:89:f0:ae:e0:42:11:
6e:19:f7:10:c4:ef:82:e5:f2:0a:35:37:19:b5:ff:
45:68:5d:03:ab:1d:a8:c5:88:57:f3:9b:76:df:34:
77:fb:cc:51:b0:dc:34:06:46:77:67:b7:1f:9b:9d:
9d:54:6f:94:91:4f:8b:09:7a:52:7f:27:0b:3f:fc:
a5:ba:6a:74:a4:a1:aa:c5:0e:90:90:e4:61:d3:88:
c1:f1:f0:7a:96:ef:97:04:36:df:b8:e3:6f:6b:41:
d6:a4:aa:48:a9:4c:2d:99:e0:4c:7c:92:e5:ef:74:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DA:BD:94:8C:69:79:08:36:63:22:0B:71:90:C9:61:31:3F:C4:B4
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/qtq9lIxpeQg2YyILcZDJYTE_xLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.48.0/21
5.83.64.0/19
153.92.120.0/22
185.67.104.0/23
212.85.246.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:35:77:f8:8b:1c:25:2c:86:87:72:27:e8:11:fa:b3:21:94:
06:18:94:29:f9:b7:57:32:50:a5:0c:f4:b6:8c:45:08:0f:00:
e7:65:af:2d:89:de:12:55:33:3e:dd:da:62:a6:51:f4:87:50:
f5:75:d4:93:5e:09:f9:b0:ab:1f:62:1a:20:56:c6:63:8b:a0:
82:c0:ac:ea:50:3b:c1:10:bb:61:bf:da:40:d3:e5:96:ef:e1:
e3:2b:a7:83:e7:1b:eb:a7:ab:53:0b:c3:be:f5:f5:cc:0b:50:
b9:ec:2d:d7:f9:0d:a4:86:21:42:fa:63:c0:45:da:13:a8:81:
1a:79:64:a7:24:6f:4f:07:39:2a:2b:a3:95:20:8c:67:4d:8e:
22:1a:12:47:36:2b:82:e4:79:9d:9e:56:e5:74:cf:69:3f:51:
58:ad:9f:92:d7:b9:54:de:b4:40:b3:2b:12:a9:c2:23:34:1a:
1e:c4:54:5f:d8:7f:ae:d2:e1:8e:1f:03:57:bc:9b:19:63:19:
a2:c3:0d:86:97:fd:51:3b:1e:aa:23:b3:b7:5f:01:60:b3:e9:
42:e5:2b:14:17:64:d3:e3:85:20:f6:e9:4f:6e:a1:fa:ff:e7:
f4:cd:19:fe:f8:98:b8:30:91:a2:cc:89:ac:a0:57:85:21:0e:
15:87:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 07:39:11 2023 by rpki-client on console-ams.rpki-client.org