Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/q5NvuhVBP7x5xOmip-wsq_P2t04.roa
File: q5NvuhVBP7x5xOmip-wsq_P2t04.roa (raw, json)
Hash identifier: DbWKGAjAXaAjEJMyA7Aco+NpS7YXP9t5KX7t+QTUnKk=
Subject key identifier: AB:93:6F:BA:15:41:3F:BC:79:C4:E9:A2:A7:EC:2C:AB:F3:F6:B7:4E
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 01888657F734C58943B4C72EA637C3A2FB3F
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/q5NvuhVBP7x5xOmip-wsq_P2t04.roa
Signing time: Sun 04 Jun 2023 12:18:11 +0000
ROA not before: Sun 04 Jun 2023 12:18:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 2a12:e341::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:86:57:f7:34:c5:89:43:b4:c7:2e:a6:37:c3:a2:fb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Jun 4 12:18:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab936fba15413fbc79c4e9a2a7ec2cabf3f6b74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:8c:9e:ed:e9:e6:0f:64:ac:f0:9c:e7:f3:
9b:bd:46:1c:1b:03:05:17:12:ae:c5:37:f1:ae:4c:
1b:7f:0d:c3:3c:f0:74:0f:d9:df:41:2b:95:a3:ca:
e7:45:2c:ba:0c:37:d0:96:5c:b2:3b:28:79:df:b2:
35:d5:8d:f1:4b:01:05:df:9a:74:c7:6e:8e:a0:6e:
d0:6a:fa:ec:bb:8b:da:c8:ab:47:53:ec:81:5e:b2:
ab:52:98:92:90:b7:c2:e4:3e:4c:ff:5d:a6:78:03:
cf:8d:15:19:6f:0a:d7:02:e8:15:c8:7f:1a:c5:f8:
d1:2d:02:70:16:b3:ef:00:b3:17:4b:14:82:3b:79:
84:88:c2:a1:98:03:c5:93:4b:80:18:75:24:8b:e6:
9c:87:21:0a:d2:f8:cf:bc:8d:33:92:77:c2:64:54:
4e:7a:92:08:bc:a8:0d:52:5d:0b:8a:a8:67:ca:27:
01:cd:92:43:2e:a3:e2:2d:ef:4f:19:78:45:1e:0e:
93:6a:c3:a4:42:af:f7:69:d9:d9:14:9b:14:c3:bc:
6f:ea:84:e9:5a:2f:62:cb:7b:83:69:c3:c0:9f:0c:
6b:90:2c:50:1f:d4:fd:c2:01:60:3c:3a:e7:ea:25:
8e:10:e1:1d:27:ca:ae:53:7a:15:fb:6a:54:1a:7c:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:93:6F:BA:15:41:3F:BC:79:C4:E9:A2:A7:EC:2C:AB:F3:F6:B7:4E
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/q5NvuhVBP7x5xOmip-wsq_P2t04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e341::/32
Signature Algorithm: sha256WithRSAEncryption
4c:f5:e2:9a:b0:76:bd:ef:de:79:e1:d6:c7:70:32:e0:dc:20:
7d:dc:b5:37:e7:b6:bb:20:e9:71:30:df:4f:b2:27:44:56:91:
ff:e1:92:9c:c3:f8:5b:ea:fe:62:b5:13:67:b6:7e:df:17:5c:
cf:40:df:03:d9:cd:31:09:a1:09:8b:23:6b:25:c8:63:25:a6:
5c:56:49:02:76:82:b3:94:18:56:93:aa:46:2e:58:b8:b7:a0:
d8:0b:f6:65:6a:fd:38:e1:97:a5:f6:85:c1:07:0a:aa:1c:70:
6b:40:fd:0d:84:11:d8:fa:51:02:96:dc:24:27:4f:2d:59:c7:
09:44:7d:5e:ed:7d:c4:cc:b3:04:29:f6:9f:c3:8b:74:84:1c:
2b:66:57:39:d0:aa:99:f4:61:ff:f8:2c:9e:92:db:f6:ed:17:
96:79:24:60:40:df:1e:b4:a2:55:72:8b:81:45:02:d2:65:8b:
99:41:ed:09:cb:58:0d:4e:3e:44:2b:6b:96:c3:7f:8b:de:a5:
ad:cc:ad:78:ce:1a:17:1c:44:44:ae:62:af:fc:8b:c0:4a:51:
be:f8:51:50:57:ea:a8:05:7f:71:51:28:fa:2f:67:f4:45:96:
c9:85:4a:4e:6b:04:78:f9:98:c3:55:95:76:56:c1:5a:87:92:
5b:f3:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:50 2024 by rpki-client on console-fra.rpki-client.org