Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QATqDgCfBx1JkUTiWlV0S9amyOs.roa
File: QATqDgCfBx1JkUTiWlV0S9amyOs.roa (raw, json)
Hash identifier: Zlp4xPvaBCuvte+4RJS8zVXMIrOyAV8pGsE+6/4Qvho=
Subject key identifier: 40:04:EA:0E:00:9F:07:1D:49:91:44:E2:5A:55:74:4B:D6:A6:C8:EB
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA72BED4ECC4D8CF6BA7E8EA8039DE1
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QATqDgCfBx1JkUTiWlV0S9amyOs.roa
Signing time: Tue 06 Feb 2024 18:21:18 +0000
ROA not before: Tue 06 Feb 2024 18:21:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199594
IP address blocks: 2a0f:b241:85::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a7:2b:ed:4e:cc:4d:8c:f6:ba:7e:8e:a8:03:9d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:21:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4004ea0e009f071d499144e25a55744bd6a6c8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:9e:d4:b7:4f:f4:08:91:72:88:ac:4a:e7:
e1:8c:7e:66:d2:2b:92:94:6f:00:31:0d:57:e4:1b:
9b:25:36:7e:d7:6f:16:6a:9a:f1:6d:15:4e:04:1e:
ab:6c:6f:5e:6f:77:cf:65:b1:ee:c3:c1:8b:d9:03:
7d:1d:2f:1c:0f:70:cf:db:5d:6c:fa:76:18:85:24:
b4:1e:ce:b9:fd:ae:74:38:d8:9a:63:0a:d4:5c:ee:
a6:5d:ed:e2:ee:03:e5:b6:28:cf:6f:9f:c7:40:fb:
02:81:66:81:01:87:b1:d7:06:f5:84:57:80:83:ba:
f9:1a:94:f1:44:ef:48:79:b2:b4:af:b3:52:9c:f2:
84:01:ce:f9:0f:f5:30:c0:db:75:59:db:9c:a5:56:
e9:4b:b5:99:1d:38:77:4d:a4:a5:e7:c2:61:d9:c5:
6e:d9:5b:fe:3b:50:d4:8c:94:83:eb:8e:bb:fb:64:
43:8f:86:ed:e9:ec:bb:e9:e7:90:2e:4b:70:44:4a:
48:c6:a6:cc:73:36:c2:b8:35:8a:4a:5e:30:d5:31:
56:4a:a7:22:76:a6:3a:69:19:71:95:c9:2f:63:eb:
dd:be:dc:1c:73:c8:ae:b5:b2:ff:0e:78:76:58:8b:
30:59:37:19:e9:e6:bb:1d:b2:19:40:10:b8:3c:ce:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:04:EA:0E:00:9F:07:1D:49:91:44:E2:5A:55:74:4B:D6:A6:C8:EB
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QATqDgCfBx1JkUTiWlV0S9amyOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:85::/48
Signature Algorithm: sha256WithRSAEncryption
1f:6a:fd:7b:8d:51:19:2f:af:da:1c:3e:00:32:c4:24:e3:c5:
54:ba:e9:3c:f7:cd:f4:fa:b2:7a:21:df:8f:dc:c9:16:29:90:
3d:8a:26:3b:05:fc:62:ff:29:0d:37:c0:db:0c:b3:19:59:fd:
0c:27:c3:75:25:29:34:7e:01:1c:49:0d:39:a1:e5:dc:db:60:
db:09:99:61:e3:3a:2e:d0:e5:72:cd:07:a0:ef:6b:c8:e2:29:
19:e0:8a:8d:49:70:95:dc:cd:c6:15:dc:16:1c:38:8d:9c:32:
5b:f2:49:ce:66:bc:96:23:a8:9e:d2:65:f5:3a:55:5f:fc:9b:
ab:c2:4b:6b:82:26:b3:12:a6:bc:b3:06:48:d9:f4:d6:49:a2:
77:19:a5:d2:c0:16:f7:fc:ce:8f:fa:21:a7:0c:71:2e:4e:c5:
c2:bb:a2:26:7e:c7:57:01:89:bd:ca:b7:20:24:ba:d9:a9:27:
2c:9c:82:f6:61:d3:ce:0f:ab:ab:90:7b:fa:b2:29:87:63:8e:
dc:0d:3d:78:54:7c:7f:76:47:04:3f:10:03:e4:f5:06:19:fc:
c1:f8:05:e2:a6:f7:4a:c7:27:2c:23:87:68:a6:71:2d:95:1b:
50:c1:e9:1e:49:1e:2d:51:96:9a:f5:57:68:4c:0a:3e:dd:23:
a2:0c:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org