Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qSliid-G66nKOBRo3k8cg1JQT5Q.roa
File: qSliid-G66nKOBRo3k8cg1JQT5Q.roa (raw, json)
Hash identifier: 0Ri22JiLra9SgDi3li0M3eocqisgKVKrPi8mYmp1ios=
Subject key identifier: A9:29:62:89:DF:86:EB:A9:CA:38:14:68:DE:4F:1C:83:52:50:4F:94
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0192041A0BFE0DB79CEAD8E0F0B8EC36F156
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qSliid-G66nKOBRo3k8cg1JQT5Q.roa
Signing time: Wed 18 Sep 2024 07:47:48 +0000
ROA not before: Wed 18 Sep 2024 07:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.180.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 16:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:1a:0b:fe:0d:b7:9c:ea:d8:e0:f0:b8:ec:36:f1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 18 07:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9296289df86eba9ca381468de4f1c8352504f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:80:17:f3:48:97:27:22:b3:3b:ac:d2:3e:
10:9a:c8:1c:26:fe:c7:78:d1:07:49:a6:e6:02:04:
94:bf:da:95:43:2e:64:ff:94:b5:b4:8c:f6:11:2f:
31:d9:47:b8:2e:20:7f:3d:2b:a7:fd:4f:64:13:e7:
be:c6:bc:fa:86:c7:4b:6c:c5:4c:68:13:7a:2f:e4:
78:61:36:cd:3b:36:0c:14:24:24:dc:9f:c9:72:26:
00:7a:42:be:09:63:ba:2d:27:0b:cc:52:c6:27:46:
ea:47:12:46:f6:27:2d:eb:7a:4b:d8:4a:86:4e:ae:
68:90:74:ca:c6:be:c5:1a:3b:62:19:7c:08:4b:d8:
ec:59:4b:b8:83:19:d5:c6:f6:4a:5c:7d:ba:b8:54:
b0:2e:80:cd:cb:de:31:72:ec:18:d2:62:9b:dc:b5:
4c:9b:44:27:72:d2:66:d7:0b:5f:ef:86:2e:9c:89:
85:54:78:c1:68:6b:ad:27:b2:ce:ce:20:20:8b:3d:
2c:05:b3:5f:89:22:f6:37:5c:3d:f4:a4:40:6b:db:
2a:ab:0c:20:d9:c0:75:a8:5f:4b:ed:d8:0d:8b:c3:
ea:4b:ed:bf:86:90:eb:c4:c0:4f:c2:21:57:76:75:
28:e9:f9:a8:35:c6:dd:c1:6e:d2:98:86:6d:82:d7:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:62:89:DF:86:EB:A9:CA:38:14:68:DE:4F:1C:83:52:50:4F:94
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qSliid-G66nKOBRo3k8cg1JQT5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:55:f9:d4:1e:2c:28:ec:7d:da:aa:4d:b2:db:03:42:b6:7c:
6b:16:ce:ac:68:c7:62:5d:7e:a9:ce:09:65:0e:0d:89:7c:b9:
ef:c1:ae:88:bd:e1:49:73:bb:91:75:53:75:cf:dc:3b:34:98:
fb:54:77:4c:fc:98:8e:bf:79:b9:c2:f7:0b:a9:e6:49:3e:dc:
cf:80:bc:d1:24:28:06:5d:63:80:89:67:66:42:17:99:0e:76:
49:17:0e:e7:1e:b2:8f:8c:f9:5a:ac:b2:c9:b5:15:e9:7a:9d:
64:de:59:9b:8e:ad:12:b3:07:f4:04:7b:b7:40:a0:49:8f:a2:
d7:f6:69:33:ae:14:8a:4a:cd:4b:4e:95:bf:a0:a4:27:22:b6:
c0:37:ce:4a:22:5b:fd:2f:5f:c4:7e:18:04:6e:20:c5:93:70:
af:d2:0b:cb:cf:b7:42:e7:21:79:b2:fe:0b:f5:56:da:94:65:
9b:d2:da:76:f9:38:16:60:f0:1f:d3:bf:60:f4:7f:83:4d:79:
84:0b:cf:ac:b1:e1:a9:b7:d9:78:8f:6e:81:09:9e:1d:73:1c:
8c:91:00:ba:1e:c3:a0:eb:b6:4f:3f:27:e0:fe:f6:06:29:9d:
a8:3f:d1:ef:40:38:23:bd:60:fc:99:fd:b9:80:b6:83:d0:cc:
7a:11:fb:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIEGgv+Dbec6tjg8LjsNvFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQwOTE4MDc0NzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTI5NjI4OWRmODZlYmE5Y2EzODE0NjhkZTRmMWM4MzUyNTA0Zjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvOAF/NIlyciszus0j4QmsgcJv7H
eNEHSabmAgSUv9qVQy5k/5S1tIz2ES8x2Ue4LiB/PSun/U9kE+e+xrz6hsdLbMVM
aBN6L+R4YTbNOzYMFCQk3J/JciYAekK+CWO6LScLzFLGJ0bqRxJG9ict63pL2EqG
Tq5okHTKxr7FGjtiGXwIS9jsWUu4gxnVxvZKXH26uFSwLoDNy94xcuwY0mKb3LVM
m0QnctJm1wtf74YunImFVHjBaGutJ7LOziAgiz0sBbNfiSL2N1w99KRAa9sqqwwg
2cB1qF9L7dgNi8PqS+2/hpDrxMBPwiFXdnUo6fmoNcbdwW7SmIZtgtfRhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKkpYonfhuupyjgUaN5PHINSUE+UMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvcVNsaWlkLUc2Nm5LT0JSbzNrOGNnMUpRVDVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbQhMA0G
CSqGSIb3DQEBCwUAA4IBAQAsVfnUHiwo7H3aqk2y2wNCtnxrFs6saMdiXX6pzgll
Dg2JfLnvwa6IveFJc7uRdVN1z9w7NJj7VHdM/JiOv3m5wvcLqeZJPtzPgLzRJCgG
XWOAiWdmQheZDnZJFw7nHrKPjPlarLLJtRXpep1k3lmbjq0Sswf0BHu3QKBJj6LX
9mkzrhSKSs1LTpW/oKQnIrbAN85KIlv9L1/EfhgEbiDFk3Cv0gvLz7dC5yF5sv4L
9VbalGWb0tp2+TgWYPAf079g9H+DTXmEC8+sseGpt9l4j26BCZ4dcxyMkQC6HsOg
67ZPPyfg/vYGKZ2oP9HvQDgjvWD8mf25gLaD0Mx6Efso
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:45 2025 by rpki-client