Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/qqjGURwJA2NR5t0pi6-DjD4RidY.roa
File: qqjGURwJA2NR5t0pi6-DjD4RidY.roa (raw, json)
Hash identifier: QyPYLl332jwTDF391bAdg74ExjFktkK7PTT+hAUouyE=
Subject key identifier: AA:A8:C6:51:1C:09:03:63:51:E6:DD:29:8B:AF:83:8C:3E:11:89:D6
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 018810B667311B363739586B17F23025DA13
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/qqjGURwJA2NR5t0pi6-DjD4RidY.roa
Signing time: Fri 12 May 2023 16:06:09 +0000
ROA not before: Fri 12 May 2023 16:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29884
IP address blocks: 57.250.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:b6:67:31:1b:36:37:39:58:6b:17:f2:30:25:da:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: May 12 16:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaa8c6511c09036351e6dd298baf838c3e1189d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:25:36:2d:db:40:5a:5b:6c:07:62:1a:95:
80:3b:8c:bd:ba:a3:17:58:d9:6c:fe:12:28:1b:e8:
81:76:bf:51:21:a0:bd:42:9c:db:3f:30:59:21:fa:
bd:49:c3:d7:73:ab:e9:20:e6:21:45:c8:d0:99:26:
e4:ea:32:f7:7e:4f:50:51:b4:22:22:6b:a5:a4:06:
d2:9f:90:f3:d0:cb:4f:39:9d:58:cd:21:0d:a0:f1:
c5:2c:45:35:6b:57:14:4c:6e:a6:bc:61:a7:f0:8a:
22:ff:79:66:bf:b0:48:56:4a:bb:a4:7f:7a:75:ee:
d7:a1:42:34:71:e9:37:4a:ad:dd:ea:8f:4f:8e:e2:
e6:64:36:c2:cb:51:74:8a:91:94:f2:dc:08:d1:cc:
47:d6:b4:c9:73:5b:d0:e1:bc:3d:b4:3e:24:04:b4:
f3:02:08:8c:af:30:34:a2:5b:06:3a:f9:a3:de:39:
6e:b3:eb:a4:ac:99:0f:5b:d9:a9:d2:43:0b:53:f3:
b0:11:9a:73:6a:31:00:81:a3:2e:8b:b1:1a:eb:4b:
c6:8d:fc:40:c5:8e:99:61:f7:d1:72:2f:4d:c4:34:
f8:f6:a9:30:8c:0f:27:db:ff:33:13:08:2b:8e:49:
88:c1:38:9a:02:ef:10:24:13:9a:14:c7:e9:8f:ee:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A8:C6:51:1C:09:03:63:51:E6:DD:29:8B:AF:83:8C:3E:11:89:D6
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/qqjGURwJA2NR5t0pi6-DjD4RidY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.56.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ee:3d:18:a2:18:40:8a:57:ea:8c:fe:07:67:8a:1c:ff:24:
7c:16:37:2e:94:a2:3f:43:cf:e9:52:8f:af:4c:77:1b:17:89:
79:32:8e:78:3c:b6:9d:1a:5e:e8:e7:9b:17:87:a9:cb:23:53:
ac:81:a2:cf:f9:fa:ba:d3:e7:3d:f8:6d:6a:c9:22:17:3e:59:
3d:76:93:b5:81:01:d6:0d:0c:56:9d:34:86:4b:01:8a:47:5b:
8e:cc:cc:f4:6b:f3:92:a1:5e:81:df:8b:13:1e:f8:e2:85:df:
dc:21:27:60:fb:a5:20:6d:82:d4:27:48:81:5b:30:c3:8b:15:
53:87:4d:aa:47:0e:4a:6e:75:70:b9:b8:9b:ca:1a:ed:a3:66:
f4:b6:cc:44:1a:5d:d4:88:f1:69:7b:8a:27:74:d9:95:74:94:
eb:66:15:32:d9:37:03:4b:89:76:98:34:61:bc:a4:29:16:b1:
e0:94:d1:2c:06:95:70:e0:00:33:7d:6e:30:d6:79:c9:8b:6d:
e9:5e:47:57:2d:2b:c2:69:fb:08:57:92:b5:f1:98:29:64:55:
53:f2:b3:37:d0:94:f0:64:23:bf:12:12:2d:04:e6:4a:33:43:
f3:f4:96:3b:de:50:ad:12:e1:3e:ad:82:10:7b:84:91:e2:08:
e5:ea:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org