Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qCQYpa5LQTzanRjN3S5HMvU6zhI.roa
File: qCQYpa5LQTzanRjN3S5HMvU6zhI.roa (raw, json)
Hash identifier: sVCet3SszQANPn8fPQN2zvORwP2MBaYYOKRDHNt/e2c=
Subject key identifier: A8:24:18:A5:AE:4B:41:3C:DA:9D:18:CD:DD:2E:47:32:F5:3A:CE:12
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0189B5E03BD1EF2AC4B175C081211E195B0F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qCQYpa5LQTzanRjN3S5HMvU6zhI.roa
Signing time: Wed 02 Aug 2023 10:51:58 +0000
ROA not before: Wed 02 Aug 2023 10:51:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.132.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:e0:3b:d1:ef:2a:c4:b1:75:c0:81:21:1e:19:5b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 2 10:51:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a82418a5ae4b413cda9d18cddd2e4732f53ace12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:89:f8:32:50:d6:60:f9:f9:62:f8:39:54:
35:d1:e7:59:ea:56:a5:e2:87:e3:99:fc:32:c1:c6:
a1:b1:45:80:da:ef:0f:5a:5a:9e:e8:4d:96:70:b3:
4f:37:aa:4a:31:9a:f6:34:de:78:23:50:f7:0e:15:
cd:be:6a:a3:f3:4f:01:f1:ec:67:d3:60:05:05:ea:
a7:3f:ca:1b:98:d9:7e:48:a5:22:4c:90:4c:73:9d:
0f:7d:ca:b1:37:d5:2b:d3:0f:3a:e3:72:3d:c5:19:
bd:51:2d:b5:72:af:ff:cf:9d:21:b2:8d:d8:a7:c2:
c7:fc:f5:63:89:a9:82:b3:dc:d3:d1:3b:c9:39:76:
c5:ed:21:8e:3d:a5:3f:4f:d7:53:f8:56:a5:65:44:
4f:58:32:ac:84:fb:f6:04:b1:ca:e4:04:ea:47:6b:
9f:60:36:53:87:37:74:9b:2d:17:35:76:12:62:88:
78:57:05:3f:b3:86:b6:ee:01:15:e0:e9:dc:e2:9c:
1d:9b:10:77:01:7b:83:03:cc:27:0f:f8:3d:b7:7c:
3f:f4:e0:99:ca:4f:a9:34:8f:59:26:46:fa:be:8c:
48:39:6b:d6:25:b4:df:fd:91:3e:5e:66:b2:02:95:
5b:4e:64:2e:87:c1:ce:3d:41:4a:28:54:77:e8:18:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:24:18:A5:AE:4B:41:3C:DA:9D:18:CD:DD:2E:47:32:F5:3A:CE:12
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qCQYpa5LQTzanRjN3S5HMvU6zhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:44:aa:f5:13:b2:51:b1:c5:d0:b3:fe:bc:45:03:4d:96:e4:
6d:be:31:e3:b8:d6:bc:e6:8a:99:33:a7:2f:05:c2:b4:3c:5e:
fe:38:57:08:74:8b:98:f0:75:94:56:22:5e:78:70:bf:f0:cc:
49:a1:03:19:42:b6:b1:c6:f7:41:b4:cc:6c:b6:13:80:32:5e:
0f:72:e7:64:eb:cb:2a:e1:bd:99:28:8a:51:17:4b:67:b2:9d:
5a:57:85:01:75:db:d5:5e:5b:e9:09:7b:2f:58:f0:ce:c4:ec:
33:01:c2:18:43:ae:e7:a4:bd:b2:10:72:e7:5f:3d:da:7e:b3:
99:17:58:65:a1:57:e8:34:38:f9:f3:64:01:36:88:97:b2:85:
34:57:32:3e:0d:4e:67:bf:71:5d:82:c2:34:94:ce:b4:4f:c5:
d3:59:12:f1:a2:00:db:94:5d:b0:8b:58:dd:ab:24:67:f5:7a:
08:3f:8c:7a:f3:26:0e:15:f1:12:3d:d5:cc:8c:44:33:62:7f:
1a:73:97:46:52:fd:f2:36:7f:cf:43:7b:d0:26:16:ef:86:ef:
c9:f4:17:11:3e:78:73:61:82:a4:4d:b7:93:ca:f6:e1:2f:25:
ec:ec:ab:22:35:50:3c:33:8f:58:14:2c:78:2e:e3:57:df:c6:
bc:92:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:24 2024 by rpki-client on console-ams.rpki-client.org