Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/qPm78bPTUDRcCJmErruS_NGZqus.roa
File: qPm78bPTUDRcCJmErruS_NGZqus.roa (raw, json)
Hash identifier: B2MaHoVG8kvOenirEbvrzAFJ3bcq1We9tTd6vZH5aws=
Subject key identifier: A8:F9:BB:F1:B3:D3:50:34:5C:08:99:84:AE:BB:92:FC:D1:99:AA:EB
Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial: 01856E0B04D7827C983D608F5B9B29CDA61B
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/qPm78bPTUDRcCJmErruS_NGZqus.roa
Signing time: Sun 01 Jan 2023 15:54:53 +0000
ROA not before: Sun 01 Jan 2023 15:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213373
IP address blocks: 149.3.170.0/24 maxlen: 24
2.56.10.0/24 maxlen: 24
2a10:5fc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:04:d7:82:7c:98:3d:60:8f:5b:9b:29:cd:a6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Validity
Not Before: Jan 1 15:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8f9bbf1b3d350345c089984aebb92fcd199aaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:0f:a0:cf:6e:15:db:61:43:5e:fe:3d:80:
27:09:78:9f:83:40:1e:e7:49:26:58:37:ca:13:65:
25:d8:12:8d:f2:ca:69:3a:07:06:9e:52:8a:69:b1:
66:27:29:55:1a:79:2d:65:24:3e:2f:08:20:3c:2d:
6e:aa:df:d2:da:16:d2:7d:d5:1f:bd:ed:05:d9:fa:
cb:ac:4d:8b:22:c1:26:24:72:31:d0:e7:1b:32:98:
e1:6d:93:21:2c:0b:9e:4f:f4:2a:94:7e:d6:28:cd:
a6:97:b9:31:f6:b2:e6:42:47:c0:3c:e3:0b:ab:4e:
7a:ab:47:4c:0c:ac:93:2a:ca:97:5c:cd:8a:33:dd:
6d:02:76:5c:e3:ec:01:08:b0:e8:6e:00:46:14:7c:
52:6d:a6:43:02:a5:73:54:53:38:2f:7a:43:4f:8c:
64:02:d1:b3:59:03:b1:21:62:c3:69:7d:b5:fc:6a:
bc:68:36:24:8f:d8:f2:c5:c3:c8:27:96:c7:03:1a:
76:4a:36:09:9d:07:2e:72:74:dc:d5:7e:55:9b:0f:
97:2a:46:5f:a8:f2:0e:f3:7e:0c:5a:76:7a:dd:ce:
7a:d3:c0:69:87:b8:a1:00:59:80:58:03:0c:66:8f:
87:17:e7:b4:93:4b:b9:81:44:d9:d7:e2:1f:01:ee:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F9:BB:F1:B3:D3:50:34:5C:08:99:84:AE:BB:92:FC:D1:99:AA:EB
X509v3 Authority Key Identifier:
keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/qPm78bPTUDRcCJmErruS_NGZqus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.10.0/24
149.3.170.0/24
IPv6:
2a10:5fc0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:18:cc:53:d6:e9:f2:fd:df:2d:34:e3:d6:a3:a7:a9:9e:f3:
00:77:68:f7:fc:7e:20:d9:51:c4:f2:69:20:2e:1a:bc:58:ae:
08:fc:3b:54:2b:d2:43:43:24:b4:21:18:02:de:2a:8b:71:f2:
5d:58:b8:f7:4a:d9:01:8f:4e:76:83:ac:d8:a7:0b:d0:7f:13:
4e:ce:82:12:0a:c3:5f:a2:5f:76:13:1c:20:d4:5b:19:c3:f5:
03:1a:5f:d7:13:eb:d0:12:d8:19:6f:74:01:32:23:b7:e7:51:
a3:60:df:4c:ca:a4:7e:e4:b7:b0:fe:a6:e1:f3:8b:22:c3:27:
01:4f:ee:45:61:44:4e:df:5e:bb:7f:76:78:3f:bb:9c:c8:74:
27:c5:30:ab:7b:e8:a1:50:1a:8d:1c:85:31:16:08:ff:2a:a9:
76:a2:47:5c:e3:0e:24:f4:65:9b:54:c0:a1:4f:db:2d:74:4a:
1f:34:f6:89:f2:2b:6a:c5:30:96:fa:ef:ab:c7:aa:a4:d4:3b:
58:f6:40:e4:20:ab:5f:27:a9:2d:28:cb:df:7d:3e:b8:1c:cd:
89:13:22:75:80:28:c4:15:a7:6b:b9:0b:67:83:14:71:71:a6:
58:0e:cd:7c:47:86:0b:30:b2:30:92:72:ab:c9:84:d3:3a:af:
b9:75:64:65
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 16 19:49:06 2023 by rpki-client on console-fra.rpki-client.org