Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/qlth3_rrWRxljMbxhALGf7L3PZ0.roa
File: qlth3_rrWRxljMbxhALGf7L3PZ0.roa (raw, json)
Hash identifier: C+rOr2JHVbEq6eTf56MzGs1oGgJhGBMRhZDDzL0/N/U=
Subject key identifier: AA:5B:61:DF:FA:EB:59:1C:65:8C:C6:F1:84:02:C6:7F:B2:F7:3D:9D
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 018AEF403FC1AEAB5FC530A379E2FB23758A
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/qlth3_rrWRxljMbxhALGf7L3PZ0.roa
Signing time: Mon 02 Oct 2023 07:17:59 +0000
ROA not before: Mon 02 Oct 2023 07:17:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60880
IP address blocks: 192.83.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:40:3f:c1:ae:ab:5f:c5:30:a3:79:e2:fb:23:75:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Oct 2 07:17:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa5b61dffaeb591c658cc6f18402c67fb2f73d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:fe:91:f2:cf:18:27:24:7b:fc:c7:ed:57:
ca:5f:c1:1b:4e:da:87:70:57:39:e1:8f:4a:15:f6:
19:e3:ca:18:ba:90:62:fc:51:e0:13:c0:95:5f:a3:
a8:97:88:87:8b:84:18:b9:52:cf:d5:1c:1a:33:0b:
e7:e2:6d:ab:53:68:e5:53:e0:78:00:e9:89:01:49:
43:22:04:ac:6a:e7:44:e7:8c:3d:c9:b0:b9:00:90:
b5:d8:59:5b:b9:25:bf:3c:95:52:49:64:dd:11:d4:
51:46:e6:65:55:e5:6d:4e:54:67:86:a6:07:71:02:
e2:1d:b8:27:9f:28:e8:8d:9c:73:d6:00:94:a5:55:
40:2f:f0:7c:d2:31:71:96:ee:f0:b2:18:25:e0:b2:
28:ad:63:fe:6c:73:bd:81:c7:76:6f:0d:1e:92:ce:
56:e3:bb:da:06:95:35:ba:bf:ad:8f:a6:74:69:57:
51:a9:a4:92:aa:c9:2f:ae:5a:21:ec:c4:72:fa:f2:
60:1c:f4:e4:30:aa:ab:96:1d:f2:3e:ca:11:2e:04:
60:6e:af:fd:35:20:f8:17:0d:40:54:55:f2:07:ae:
68:39:ca:e7:7b:ff:d2:7e:d9:5b:c6:97:7d:fd:e3:
96:7b:c8:1b:69:e0:6a:45:69:b0:72:44:6e:7a:72:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5B:61:DF:FA:EB:59:1C:65:8C:C6:F1:84:02:C6:7F:B2:F7:3D:9D
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/qlth3_rrWRxljMbxhALGf7L3PZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.83.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:66:fe:29:a1:6e:27:46:a6:31:71:c0:a3:7c:2f:77:f0:62:
f2:25:4c:59:cb:01:14:d2:7f:71:29:6a:ee:ea:7d:58:3a:34:
41:f6:0f:01:d5:b6:6b:92:7f:fc:9a:92:e3:58:4f:e4:93:c4:
7a:e4:49:cf:92:a3:75:5d:c8:bb:c6:b5:79:9c:45:c6:18:d5:
ad:8b:85:ce:42:b4:06:3f:37:da:09:ba:90:74:7a:61:ca:11:
d2:d8:e2:40:fb:fa:76:b5:52:b3:cf:78:a1:ae:5d:bd:be:ac:
b5:9d:ba:fa:97:94:c8:b4:74:c4:b7:d9:4a:95:cf:7a:1a:0a:
36:09:5d:7f:60:f2:60:64:dd:e7:b7:b9:f3:31:01:4d:e4:4d:
b1:6b:3e:29:c8:f2:a4:fa:6e:e4:0a:13:a5:17:1e:b2:1a:cc:
e2:03:b5:9b:c1:d9:a6:07:e4:c6:a6:d1:f2:d4:90:fb:a8:0d:
02:d5:b4:49:70:d8:08:89:c9:9c:59:cd:c9:78:27:0a:14:f6:
87:e0:f1:3a:94:44:a3:88:63:f9:63:5a:2b:ac:13:fb:ed:76:
a3:9f:14:e6:57:5c:3a:28:2d:8e:88:c2:d0:27:62:5d:d4:d4:
c8:75:ac:7b:fb:69:50:92:8e:d4:79:a0:4c:09:a2:ae:5e:d2:
a1:91:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 19:51:27 2023 by rpki-client on console-fra.rpki-client.org