Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/wqyNa7-X-GubBq72XoFppEWJZcU.roa
File: wqyNa7-X-GubBq72XoFppEWJZcU.roa (raw, json)
Hash identifier: qGYTmWmfrVfGbxjZ2dJ7dbtZNLaLRjdBwsR481ROV7Q=
Subject key identifier: C2:AC:8D:6B:BF:97:F8:6B:9B:06:AE:F6:5E:81:69:A4:45:89:65:C5
Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial: 0189F6469404DEDC1AC100BF7A44AA7E87AF
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/wqyNa7-X-GubBq72XoFppEWJZcU.roa
Signing time: Mon 14 Aug 2023 22:59:27 +0000
ROA not before: Mon 14 Aug 2023 22:59:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209808
IP address blocks: 2a13:75c1:200::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f6:46:94:04:de:dc:1a:c1:00:bf:7a:44:aa:7e:87:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Validity
Not Before: Aug 14 22:59:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2ac8d6bbf97f86b9b06aef65e8169a4458965c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c9:6a:a1:02:37:5e:11:dc:6d:ae:5a:25:cf:
32:a0:b4:5b:11:21:a3:b9:8b:32:bc:d2:30:e8:58:
c4:cb:f5:38:40:7b:7e:95:1f:bb:c5:47:86:ac:35:
97:19:1c:e5:48:b0:06:77:0d:f7:b0:fe:ed:2f:13:
f5:f9:42:17:6a:5f:6e:07:a2:c0:07:19:b2:91:2a:
c2:11:c5:4b:c5:af:01:ed:e5:ae:d8:2c:32:a9:92:
2c:e4:1c:ea:9e:3e:eb:99:f3:ef:1c:14:f4:5b:c4:
8a:a5:d4:9b:bd:36:06:10:fe:dc:cc:4f:8d:9a:c1:
ce:a8:5f:7f:98:c2:a9:81:1b:20:63:c1:81:70:30:
3f:ce:2e:a7:81:db:9a:08:49:11:07:4b:d2:f8:75:
0d:d5:1d:bd:25:1e:3c:23:3a:ef:f7:f6:65:5d:c6:
ce:d8:10:eb:bf:d4:0b:b2:3b:df:cc:61:f9:e8:46:
f6:65:0c:0f:7a:38:85:09:03:20:91:ba:44:5c:0c:
df:45:b4:73:e6:a1:69:bb:66:2d:df:31:0b:16:a3:
a9:2e:78:b4:f0:16:51:73:c5:ab:95:e1:5d:54:37:
25:c5:01:49:ca:12:94:2b:a9:1c:62:e7:f4:53:2a:
21:1a:16:c4:3a:7b:57:a6:40:57:c6:27:cc:41:bb:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AC:8D:6B:BF:97:F8:6B:9B:06:AE:F6:5E:81:69:A4:45:89:65:C5
X509v3 Authority Key Identifier:
keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/wqyNa7-X-GubBq72XoFppEWJZcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:75c1:200::/40
Signature Algorithm: sha256WithRSAEncryption
a9:f8:e3:6b:a2:d8:e7:8e:03:bf:c0:9e:7e:52:2b:3d:70:b6:
f6:1e:06:01:0c:8a:e0:a5:c6:f8:d0:a1:63:c7:b0:01:56:66:
4b:9a:bc:dd:e3:d7:47:d5:e8:b5:a5:2b:e3:90:8f:06:57:93:
c9:ee:17:8b:6e:9f:f7:7e:ad:90:86:c7:78:e4:23:f1:71:a0:
d1:eb:6b:53:2a:24:2e:66:42:6e:77:a5:fe:3d:85:f5:6d:3d:
97:4c:87:57:2d:72:67:65:00:58:8f:5e:c5:c9:03:4b:8a:0b:
1a:27:b9:8f:c9:fd:d3:73:47:67:c5:ff:44:f5:ab:65:ff:0f:
8e:14:9c:34:f3:51:96:d9:85:46:ca:f9:de:20:1a:7e:0a:f3:
de:3a:6a:b2:9d:01:30:01:d7:3a:63:d1:18:07:ea:ee:d0:6b:
3f:37:62:7a:42:d9:0c:2e:72:5c:25:a3:37:ad:4d:d8:bd:bc:
30:e2:54:ec:d4:9b:52:20:69:75:a2:59:79:f8:d6:71:25:b6:
a0:58:7b:f6:ac:d2:0b:bd:d5:ed:4f:56:c0:b1:41:4f:3f:3c:
0c:0a:6e:a2:30:fd:12:b2:1a:be:24:25:07:85:e6:19:39:d0:
a4:35:d6:4a:41:39:d4:df:ce:f3:29:55:60:8a:2c:7f:a1:d3:
0a:ce:08:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:25 2024 by rpki-client on console-fra.rpki-client.org