Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/Qg1tA80PZiLcmLIogh_UFCEyHS0.roa
File: Qg1tA80PZiLcmLIogh_UFCEyHS0.roa (raw, json)
Hash identifier: LsbHMiPivuwXTJ64HoeJAP4ZNzFtDNntHNz0JKMJ6AI=
Subject key identifier: 42:0D:6D:03:CD:0F:66:22:DC:98:B2:28:82:1F:D4:14:21:32:1D:2D
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 01856BD38C56E2C18B39196734C77EAB6F2D
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/Qg1tA80PZiLcmLIogh_UFCEyHS0.roa
Signing time: Sun 01 Jan 2023 05:35:03 +0000
ROA not before: Sun 01 Jan 2023 05:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5550
IP address blocks: 153.19.0.0/16 maxlen: 16
2001:4070::/33 maxlen: 33
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:8c:56:e2:c1:8b:39:19:67:34:c7:7e:ab:6f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 05:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=420d6d03cd0f6622dc98b228821fd41421321d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:c4:d0:9f:8f:41:6f:dd:c6:f6:5c:68:8c:
09:bf:50:d8:63:78:aa:72:1c:dd:25:25:69:0e:e8:
b6:22:3f:14:c4:82:c3:ba:e5:20:56:36:45:29:24:
7a:46:d6:13:b7:af:dd:19:d0:f8:4f:ca:0a:8c:65:
ad:b1:6e:49:17:a3:8c:95:16:d5:82:3e:41:3c:e6:
fd:b4:cf:7a:e6:f7:c7:c9:21:d2:2b:b7:06:64:cc:
4e:4e:1a:10:64:98:b7:cf:1b:25:33:6b:ae:8d:2d:
bf:1f:ae:eb:51:4c:53:74:ad:2b:78:55:6d:41:d4:
37:60:65:98:24:37:49:e5:60:91:fe:32:ed:e0:d6:
8c:d8:91:2c:1f:32:21:96:a2:e8:a2:49:ef:44:db:
3e:a5:89:f2:44:9c:ba:da:08:bf:fe:70:0a:a6:8e:
b0:e5:0e:57:fd:83:7d:31:2b:eb:92:99:87:8b:01:
14:e0:be:14:f2:36:78:15:b0:69:6f:51:ff:fe:7a:
d9:cd:8f:1a:27:43:24:00:6e:89:d3:35:a0:c7:29:
f6:79:91:8c:cf:02:49:2d:0b:61:32:76:e9:b6:06:
15:15:3c:dc:f0:9b:6a:f8:b3:26:36:f8:e9:35:64:
21:f2:b8:36:bd:a3:39:53:8d:85:8d:b8:80:0f:ac:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0D:6D:03:CD:0F:66:22:DC:98:B2:28:82:1F:D4:14:21:32:1D:2D
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/Qg1tA80PZiLcmLIogh_UFCEyHS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.19.0.0/16
IPv6:
2001:4070::/33
Signature Algorithm: sha256WithRSAEncryption
86:72:56:c6:79:e3:f3:03:92:63:18:95:86:c8:bb:43:9a:33:
ca:0a:5c:bd:e6:c5:69:dd:02:48:56:25:c1:75:34:3c:3b:88:
a7:9e:62:28:30:79:37:75:dd:47:dc:67:9a:7f:33:49:03:f5:
91:ba:24:5e:ab:6f:0f:ec:37:8d:82:19:a9:e0:db:ae:09:30:
87:5a:7c:23:1a:e4:86:25:1d:2f:0a:2e:d9:ac:43:1a:8c:c6:
a2:d9:82:79:24:ce:e2:e3:7d:b7:ea:83:00:e4:1f:be:6e:ca:
20:b9:bf:08:28:9d:25:e7:21:f6:09:49:50:e1:19:e4:b7:3d:
80:cf:3d:ba:e7:61:50:24:b8:97:89:14:d0:53:bc:c3:2f:12:
ed:67:70:58:a7:1e:80:3c:13:7b:dd:6b:e9:b1:75:a5:8f:21:
25:ce:7b:35:7b:04:44:80:bb:ba:1a:80:eb:d3:30:27:35:9c:
75:68:4f:f7:35:74:13:06:05:71:01:b2:ef:f8:1d:a2:a0:83:
09:bb:3d:13:3f:68:1b:e0:2a:02:b2:ab:c7:4b:85:75:55:48:
16:18:23:e2:67:8d:89:48:73:23:60:fc:39:c0:25:8b:f9:a3:
a9:ca:9d:ec:fb:a3:14:8c:ad:37:a1:67:0f:23:ca:ac:01:38:
7a:32:cf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:42 2024 by rpki-client on console-fra.rpki-client.org