Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qIwr1Pho_6pztVC4G5Kakb-NmJk.roa
File: qIwr1Pho_6pztVC4G5Kakb-NmJk.roa (raw, json)
Hash identifier: cPLHJLgghZtgswEM+lh3eyLHZKNOyjcG+I0oOimv5Sk=
Subject key identifier: A8:8C:2B:D4:F8:68:FF:AA:73:B5:50:B8:1B:92:9A:91:BF:8D:98:99
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0192EBBDDD98DE276CCEA459DC1C4443F0B2
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qIwr1Pho_6pztVC4G5Kakb-NmJk.roa
Signing time: Sat 02 Nov 2024 07:19:01 +0000
ROA not before: Sat 02 Nov 2024 07:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136557
IP address blocks: 2.58.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 08:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:eb:bd:dd:98:de:27:6c:ce:a4:59:dc:1c:44:43:f0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 2 07:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a88c2bd4f868ffaa73b550b81b929a91bf8d9899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:d4:26:1e:d8:f7:37:f1:a8:b5:9b:b4:a9:
fe:92:96:69:5b:80:fd:1b:3e:0b:37:5a:b7:ee:a7:
99:72:5c:03:60:a9:04:8a:29:ac:5c:fa:2e:47:b7:
7a:06:ca:88:a1:fd:e7:f1:5b:81:e7:88:b6:0e:b0:
a0:63:bd:7f:0e:08:bc:b2:32:12:68:d0:b3:a9:f2:
5f:61:c1:0e:34:c8:c7:95:bf:83:6d:33:ce:23:90:
d4:53:1b:3f:52:75:75:54:0f:a2:0f:fa:bb:2a:af:
0e:17:12:49:b2:c7:e0:52:ee:11:08:d2:7d:72:93:
b1:26:ea:08:66:58:e2:3e:4d:72:e7:24:16:d7:b3:
be:74:d5:ec:df:c5:e3:60:95:4a:81:be:ae:da:f4:
f9:0a:24:91:64:24:8c:0f:8d:9d:09:fa:70:5a:c8:
91:af:21:fd:d8:08:93:27:ff:7a:bd:0b:da:79:07:
0b:42:38:5f:9e:af:55:4e:1d:47:92:c7:5c:20:a1:
ca:d6:89:76:8c:3a:26:1c:12:9e:81:8a:bd:87:22:
0a:39:c0:36:76:00:5b:a7:a3:ae:6e:91:ab:42:bf:
90:23:f7:15:2d:e8:fd:64:c8:89:7a:9b:8f:fa:7f:
dc:9f:29:e4:3a:39:94:79:75:3f:7e:6c:77:ad:12:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8C:2B:D4:F8:68:FF:AA:73:B5:50:B8:1B:92:9A:91:BF:8D:98:99
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qIwr1Pho_6pztVC4G5Kakb-NmJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:cc:ab:9e:95:f1:c8:b0:68:44:c2:3a:b0:dd:9e:ea:95:f6:
42:7c:12:a1:ec:55:d5:0d:ef:a0:eb:de:da:38:23:f1:6f:b0:
5e:00:f5:e5:31:6c:dc:ef:d9:a0:20:13:2b:29:8e:06:bc:c9:
24:1f:a7:d2:63:b5:5a:a6:86:7f:1b:82:4e:60:20:60:4f:8c:
25:17:38:a7:7a:33:1e:c6:c1:84:d4:c4:e6:9d:9b:57:ec:ba:
1f:69:f3:22:be:6c:a7:44:48:72:2c:62:94:07:de:5b:9c:5f:
ba:04:6d:ec:15:f0:08:33:f8:b1:d1:08:ad:3e:68:ea:5a:df:
d3:15:a0:40:c1:06:45:13:c0:25:d8:bc:50:c6:cf:c1:c1:0e:
be:79:9b:c5:3f:19:c6:54:c2:e3:e1:ea:b3:fb:ae:64:2e:01:
79:23:7d:d7:55:90:e4:7a:40:21:5a:6a:87:64:f2:a9:e6:2f:
58:06:4f:3f:7e:1d:5d:f0:b7:78:94:a3:6b:a6:05:0a:b9:95:
88:79:03:73:10:90:99:22:bb:96:0d:0a:40:57:2c:fb:5d:44:
3b:63:81:c3:9c:11:d9:ab:d1:c7:7c:35:7e:1e:37:95:84:2d:
6b:47:0f:9a:0b:4f:a8:9a:3a:ac:92:4c:cd:06:ad:2d:62:9d:
0d:49:19:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLrvd2Y3idszqRZ3BxEQ/CyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjQxMTAyMDcxOTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODhjMmJkNGY4NjhmZmFhNzNiNTUwYjgxYjkyOWE5MWJmOGQ5ODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOfUJh7Y9zfxqLWbtKn+kpZpW4D9
Gz4LN1q37qeZclwDYKkEiimsXPouR7d6BsqIof3n8VuB54i2DrCgY71/Dgi8sjIS
aNCzqfJfYcEONMjHlb+DbTPOI5DUUxs/UnV1VA+iD/q7Kq8OFxJJssfgUu4RCNJ9
cpOxJuoIZljiPk1y5yQW17O+dNXs38XjYJVKgb6u2vT5CiSRZCSMD42dCfpwWsiR
ryH92AiTJ/96vQvaeQcLQjhfnq9VTh1HksdcIKHK1ol2jDomHBKegYq9hyIKOcA2
dgBbp6OubpGrQr+QI/cVLej9ZMiJepuP+n/cnynkOjmUeXU/fmx3rRLJcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKiMK9T4aP+qc7VQuBuSmpG/jZiZMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvcUl3cjFQaG9fNnB6dFZDNEc1S2FrYi1ObUprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjqqMA0G
CSqGSIb3DQEBCwUAA4IBAQCozKuelfHIsGhEwjqw3Z7qlfZCfBKh7FXVDe+g697a
OCPxb7BeAPXlMWzc79mgIBMrKY4GvMkkH6fSY7VapoZ/G4JOYCBgT4wlFzinejMe
xsGE1MTmnZtX7LofafMivmynREhyLGKUB95bnF+6BG3sFfAIM/ix0QitPmjqWt/T
FaBAwQZFE8Al2LxQxs/BwQ6+eZvFPxnGVMLj4eqz+65kLgF5I33XVZDkekAhWmqH
ZPKp5i9YBk8/fh1d8Ld4lKNrpgUKuZWIeQNzEJCZIruWDQpAVyz7XUQ7Y4HDnBHZ
q9HHfDV+HjeVhC1rRw+aC0+omjqskkzNBq0tYp0NSRns
-----END CERTIFICATE-----
Generated at Mon Nov 4 11:00:41 2024 by rpki-client on console-ams.rpki-client.org