Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/qPS9kLvtHkRYWWXMks6cTO5qRic.roa
File: qPS9kLvtHkRYWWXMks6cTO5qRic.roa (raw, json)
Hash identifier: TdAvw7SQufBn+cHj32nn729ab0jsU8aB0Pt+qv2zWGo=
Subject key identifier: A8:F4:BD:90:BB:ED:1E:44:58:59:65:CC:92:CE:9C:4C:EE:6A:46:27
Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial: 01856CEF2DF74391DCF675DC67136B9E1469
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/qPS9kLvtHkRYWWXMks6cTO5qRic.roa
Signing time: Sun 01 Jan 2023 10:44:52 +0000
ROA not before: Sun 01 Jan 2023 10:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 62.68.75.0/24 maxlen: 24
2a12:edc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:2d:f7:43:91:dc:f6:75:dc:67:13:6b:9e:14:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Validity
Not Before: Jan 1 10:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8f4bd90bbed1e44585965cc92ce9c4cee6a4627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:91:ec:b6:03:c9:db:38:20:b3:88:39:25:
e4:80:a8:7f:20:66:21:74:e4:0b:b8:08:6b:38:4d:
d0:73:1b:51:cf:07:d3:eb:d9:dc:3c:30:b3:ee:25:
4f:3e:a9:96:48:cd:4a:9d:56:57:0e:c3:54:c8:0a:
1f:87:c9:3d:cd:55:70:fc:8c:ae:91:5e:71:9f:8a:
18:be:7a:01:08:ef:8b:b3:5c:b2:a6:df:2f:70:12:
60:54:71:d3:3a:1d:45:6c:eb:bd:17:8c:6a:14:dc:
86:99:70:00:86:1a:2f:8b:48:75:59:e4:18:a6:c4:
56:7a:d1:52:8e:59:5f:28:27:39:71:92:86:9a:02:
7e:ff:69:13:a3:36:34:9c:ee:cd:b1:35:44:c0:e6:
fa:2b:12:9f:5d:09:4f:8e:ec:b5:e3:07:bc:53:9a:
cd:fe:ee:0c:af:c4:e1:b6:6a:35:67:44:b0:eb:fc:
ea:e5:2c:cb:44:58:98:84:0a:ea:03:a9:f8:97:da:
43:6c:b9:f7:ba:7a:bd:c7:c4:78:09:ad:be:25:52:
3e:5a:0f:e9:7c:aa:c9:40:f9:2b:75:4b:a3:6c:7a:
43:b2:d0:fd:b0:7a:b6:0d:0d:91:6b:4d:0e:03:20:
05:e4:a0:cf:ba:98:71:0e:8e:26:87:5d:f8:8b:29:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:BD:90:BB:ED:1E:44:58:59:65:CC:92:CE:9C:4C:EE:6A:46:27
X509v3 Authority Key Identifier:
keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/qPS9kLvtHkRYWWXMks6cTO5qRic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.75.0/24
IPv6:
2a12:edc0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:5d:59:64:81:56:8c:3f:dc:a6:b4:19:43:34:89:5f:4b:9f:
e4:cc:44:f3:96:d5:3c:01:a1:94:2c:be:f9:ca:64:9f:a3:1a:
29:f8:0e:04:24:f3:a5:92:9d:9e:c3:6a:5b:23:92:66:56:f7:
89:76:85:fa:52:32:f1:a5:f8:17:cb:1c:77:29:a1:b6:9b:6b:
13:86:5b:5a:39:12:3c:22:c0:84:70:b3:dd:5e:e6:7f:30:71:
e9:a6:8a:66:80:4a:77:8f:9d:21:7a:44:fb:ef:69:59:36:68:
c8:d3:dc:05:04:09:c8:d1:87:cc:a7:7c:52:28:26:62:8e:97:
ef:9b:14:0e:93:b0:cd:51:58:16:3b:e0:6a:73:fc:0d:b9:80:
0e:19:ac:ca:b1:2a:61:04:3c:7c:a2:57:60:19:97:bb:36:54:
85:84:a1:9d:9e:b5:22:65:f3:09:5b:2c:e6:6e:89:52:9e:36:
90:e7:51:a6:04:a2:3a:5d:0a:ce:8d:4f:f4:eb:15:1d:05:c8:
3c:f9:16:85:cf:1c:39:27:ce:dc:89:77:dd:1e:36:15:61:88:
3e:4c:2b:e8:b2:41:4f:32:25:5e:78:61:80:21:2d:3a:3a:96:
f8:e0:d2:60:95:32:25:03:59:f0:db:eb:5f:85:57:96:78:ff:
16:bf:02:c9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVs7y33Q5Hc9nXcZxNrnhRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1
MmJiOTQwHhcNMjMwMTAxMTA0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGY0YmQ5MGJiZWQxZTQ0NTg1OTY1Y2M5MmNlOWM0Y2VlNmE0NjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc+R7LYDyds4ILOIOSXkgKh/IGYh
dOQLuAhrOE3QcxtRzwfT69ncPDCz7iVPPqmWSM1KnVZXDsNUyAofh8k9zVVw/Iyu
kV5xn4oYvnoBCO+Ls1yypt8vcBJgVHHTOh1FbOu9F4xqFNyGmXAAhhovi0h1WeQY
psRWetFSjllfKCc5cZKGmgJ+/2kTozY0nO7NsTVEwOb6KxKfXQlPjuy14we8U5rN
/u4Mr8Thtmo1Z0Sw6/zq5SzLRFiYhArqA6n4l9pDbLn3unq9x8R4Ca2+JVI+Wg/p
fKrJQPkrdUujbHpDstD9sHq2DQ2Ra00OAyAF5KDPuphxDo4mh134iymNCQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKj0vZC77R5EWFllzJLOnEzuakYnMB8GA1UdIwQY
MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt
YmM5MTM0NjZkNDNkLzEvcVBTOWtMdnRIa1JZV1dYTWtzNmNUTzVxUmljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk
LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAPkRLMA0E
AgACMAcDBQMqEu3AMA0GCSqGSIb3DQEBCwUAA4IBAQBuXVlkgVaMP9ymtBlDNIlf
S5/kzETzltU8AaGULL75ymSfoxop+A4EJPOlkp2ew2pbI5JmVveJdoX6UjLxpfgX
yxx3KaG2m2sThltaORI8IsCEcLPdXuZ/MHHppopmgEp3j50hekT772lZNmjI09wF
BAnI0YfMp3xSKCZijpfvmxQOk7DNUVgWO+Bqc/wNuYAOGazKsSphBDx8oldgGZe7
NlSFhKGdnrUiZfMJWyzmbolSnjaQ51GmBKI6XQrOjU/06xUdBcg8+RaFzxw5J87c
iXfdHjYVYYg+TCvoskFPMiVeeGGAIS06Opb44NJglTIlA1nw2+tfhVeWeP8WvwLJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:29 2024 by rpki-client on console-fra.rpki-client.org