Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/QKqD77MccUHwLDFQRFEUwhiGF8w.roa
File: QKqD77MccUHwLDFQRFEUwhiGF8w.roa (raw, json)
Hash identifier: FT+FmYKWNXTo1QWNgyj42p/JSOgCR92KkaAa6H7gZgI=
Subject key identifier: 40:AA:83:EF:B3:1C:71:41:F0:2C:31:50:44:51:14:C2:18:86:17:CC
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 01901C18A130BACDAAE8B3096329C0D65544
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/QKqD77MccUHwLDFQRFEUwhiGF8w.roa
Signing time: Sat 15 Jun 2024 13:31:34 +0000
ROA not before: Sat 15 Jun 2024 13:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 2a05:9bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 17 Jun 2024 20:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:18:a1:30:ba:cd:aa:e8:b3:09:63:29:c0:d6:55:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Jun 15 13:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40aa83efb31c7141f02c3150445114c2188617cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:22:f3:2f:38:f4:d5:28:41:1c:f7:37:52:
f5:14:ab:a0:06:a8:ee:c2:6a:30:7f:23:43:09:86:
57:54:64:05:af:27:93:90:2e:c6:e5:2a:72:ef:c2:
45:a8:e9:7a:ad:d3:cb:0e:2e:d8:9d:08:a6:ee:8c:
37:03:5f:4d:b7:51:a1:ac:61:69:74:ed:89:e0:48:
6a:93:77:62:39:a2:7b:3e:61:7a:1d:88:e6:3d:99:
83:26:4c:4a:37:7c:46:c9:7d:7d:47:55:69:59:d0:
8b:70:f5:bd:a1:cc:d0:3f:ad:2c:8c:bb:f7:9e:68:
88:c0:9d:77:a8:77:47:ac:66:d2:28:08:6d:95:60:
af:48:5b:75:e4:49:39:60:87:5b:61:cc:64:9a:b3:
22:cb:73:24:81:b8:4f:0c:0b:51:91:65:b5:3b:cf:
9d:d7:62:a8:93:88:d7:09:5a:a4:e4:7d:54:e0:4e:
9c:6b:7d:fa:31:bb:02:84:95:d9:93:86:33:14:e9:
4e:b4:87:73:5e:26:59:eb:ca:6c:a6:11:46:d4:1b:
1a:74:1a:df:6c:b3:5d:08:97:d5:f8:b0:f7:08:12:
51:51:49:b8:71:85:9b:fa:bc:89:a9:28:f6:f7:24:
49:dd:b5:47:f1:8a:3e:d7:73:0d:30:e8:20:cc:c8:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AA:83:EF:B3:1C:71:41:F0:2C:31:50:44:51:14:C2:18:86:17:CC
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/QKqD77MccUHwLDFQRFEUwhiGF8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9bc0::/29
Signature Algorithm: sha256WithRSAEncryption
88:d7:bf:fd:0d:7b:ae:12:f1:21:b1:dd:0e:90:f0:01:69:7f:
b6:95:91:fd:58:e5:80:0d:57:24:5a:a5:e0:27:6c:ce:2f:a5:
7c:71:54:4c:66:3b:fd:33:46:79:75:72:54:e3:0a:2a:02:fb:
16:a2:ed:05:e0:6b:f7:f5:df:d4:70:27:ce:d6:54:71:c3:74:
6a:37:0a:16:d8:d0:1b:de:bd:e9:90:68:ab:15:0b:03:a1:7a:
1c:7b:fb:6a:9c:88:ac:b7:f1:e0:1a:4f:a8:0a:5e:09:38:f1:
4f:3e:b4:23:63:ad:42:1a:22:10:78:a3:f3:c4:b5:c2:fa:a0:
f9:c3:03:b5:57:93:53:42:da:31:bf:60:67:98:e2:6b:4d:f1:
14:21:4d:7e:1c:7d:78:d3:41:1a:ec:05:48:2b:2d:4d:d0:30:
3c:c0:ee:01:ac:62:63:58:6e:4c:12:55:5e:9c:40:67:fb:cc:
e5:9d:40:43:2b:bf:24:1d:73:ca:a5:96:f1:4c:27:2b:f7:25:
98:72:ab:31:b2:7c:e4:6e:f0:b7:3c:0d:e6:e0:22:dd:e8:a0:
6f:70:9a:cc:d5:28:a1:1d:36:ef:d6:d5:b0:5d:03:23:04:2c:
c2:5c:bf:1d:ee:d1:8e:0e:aa:12:67:31:7b:18:ad:a9:83:43:
0b:c0:34:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:15:20 2024 by rpki-client on console-fra.rpki-client.org