Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/CQ__GqUpda7kjbSzfqsvOyHMCyM.roa
File: CQ__GqUpda7kjbSzfqsvOyHMCyM.roa (raw, json)
Hash identifier: qEAABdGAszyzFIYfWlunRzqdq6nHsfv5q9gPF5i3ujE=
Subject key identifier: 09:0F:FF:1A:A5:29:75:AE:E4:8D:B4:B3:7E:AB:2F:3B:21:CC:0B:23
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 01882525D850DBE775337B8B6B3BBE9D4B39
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/CQ__GqUpda7kjbSzfqsvOyHMCyM.roa
Signing time: Tue 16 May 2023 15:20:17 +0000
ROA not before: Tue 16 May 2023 15:20:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a06:5901:8000::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 May 2023 22:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:25:d8:50:db:e7:75:33:7b:8b:6b:3b:be:9d:4b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: May 16 15:20:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=090fff1aa52975aee48db4b37eab2f3b21cc0b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:6a:08:9e:83:92:f4:21:6c:24:16:f1:96:
d4:be:90:08:4b:4a:4d:ef:68:cf:5e:6e:45:38:41:
2f:cb:d1:79:1d:29:1c:a6:1b:5a:1b:7b:67:8b:39:
80:df:81:9c:19:15:6c:a9:c1:1e:8a:2f:3f:a1:68:
67:e1:62:a7:0e:e0:d2:c6:a1:e5:e8:dc:2c:4d:c1:
59:a8:c7:bd:b4:7b:2e:66:c3:9d:74:ac:66:83:7c:
71:30:00:c6:5d:03:33:cf:63:81:8a:e0:20:5c:39:
75:1e:2f:5e:e7:7a:62:31:76:e2:cd:01:07:73:0b:
a2:4f:18:64:da:9f:79:99:f6:0c:95:c9:21:15:1c:
6c:25:12:80:85:cb:84:30:01:10:b1:6e:fe:f7:6b:
f0:76:80:4d:88:90:1f:c1:cc:fd:43:92:86:c2:f6:
ad:cd:e1:e8:6f:93:20:e8:5f:f1:7f:c3:93:98:6d:
a0:f4:da:20:9e:2a:49:61:92:9c:1b:ca:e9:08:b6:
c6:5a:78:91:fd:5d:74:bf:57:d3:53:55:f8:1d:02:
76:6c:de:e6:3b:e0:c2:ce:9c:67:c4:2b:5f:44:e3:
93:cc:34:26:59:cc:39:c0:7d:1b:94:0e:12:21:61:
6d:1d:0e:1d:04:23:d1:55:9c:4a:f1:46:68:30:a7:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0F:FF:1A:A5:29:75:AE:E4:8D:B4:B3:7E:AB:2F:3B:21:CC:0B:23
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/CQ__GqUpda7kjbSzfqsvOyHMCyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5901:8000::/40
Signature Algorithm: sha256WithRSAEncryption
a5:39:e6:4a:b8:3d:6e:7e:b5:70:85:b9:b8:a1:54:3f:50:23:
e0:1a:34:17:99:73:09:ca:53:77:49:da:97:5a:ec:69:19:be:
bc:11:fd:92:bf:f4:df:f5:73:0a:4f:8e:52:07:d8:88:5a:3c:
17:2d:3d:9e:8c:a8:0e:76:4d:43:63:8a:e1:ed:52:38:fd:25:
92:54:46:73:06:c4:3e:ce:63:93:18:6c:51:b8:9d:df:a2:96:
3f:b7:e1:07:2d:00:c1:56:88:3e:b8:94:9c:3b:6d:a3:84:3c:
61:dc:4d:3f:12:7a:6c:e3:1b:a6:33:b6:d0:0b:73:9d:e0:f6:
62:b2:a0:a0:0c:97:c6:07:b8:aa:90:cb:19:2d:01:c7:5b:a8:
31:81:68:1f:c3:45:19:20:d5:51:b0:8a:ce:f7:a4:d2:7f:16:
9f:02:00:60:87:88:bc:7d:1b:d9:54:41:fc:c9:70:b1:9b:94:
58:14:fe:15:86:d4:35:57:87:33:13:f0:8f:7e:14:49:2e:c7:
87:e8:a7:03:6e:fa:cf:98:9b:07:55:b8:7c:da:13:7b:9f:fe:
fa:45:ae:2f:5f:0d:9c:82:16:02:df:af:32:71:91:de:31:b0:
08:12:eb:23:8a:69:2e:22:d2:99:73:41:e6:e1:5f:df:06:98:
af:2b:39:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:23 2024 by rpki-client on console-fra.rpki-client.org