Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/qjxU-5TC6wyZm0B1FBrQ8syIee4.roa
File: qjxU-5TC6wyZm0B1FBrQ8syIee4.roa (raw, json)
Hash identifier: iJ5o8os1Cyp81jc0IwVcGyDe32OVdArdi2ssRXK5UZw=
Subject key identifier: AA:3C:54:FB:94:C2:EB:0C:99:9B:40:75:14:1A:D0:F2:CC:88:79:EE
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 0185712797D72373811DF6DD55461971B32A
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/qjxU-5TC6wyZm0B1FBrQ8syIee4.roa
Signing time: Mon 02 Jan 2023 06:24:58 +0000
ROA not before: Mon 02 Jan 2023 06:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206785
IP address blocks: 2a00:c40:8095::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:97:d7:23:73:81:1d:f6:dd:55:46:19:71:b3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 2 06:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa3c54fb94c2eb0c999b4075141ad0f2cc8879ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:21:7a:f2:a9:56:de:e3:a6:2c:15:fd:0a:
2e:85:64:c7:bb:8d:79:d6:3d:0c:77:cb:49:3f:80:
a0:91:01:71:c3:89:7b:c9:95:2c:d8:c3:e6:34:87:
0a:13:ac:ab:f2:89:55:9d:17:69:2f:8a:b4:e7:1c:
ef:11:35:03:6b:41:48:79:ed:6e:e6:fb:44:d6:25:
a3:02:34:0e:d8:19:23:4f:e2:72:5e:a2:30:c0:18:
a2:e7:e3:22:f6:f0:82:2b:bf:5e:61:69:42:63:1f:
8f:1d:e8:d1:ab:a6:a8:a7:d0:7b:3c:26:d6:eb:6e:
a4:0d:0c:d2:c5:92:ee:bd:a5:ca:05:cd:bc:d0:1a:
ab:b4:f7:56:e3:a1:48:be:25:3e:de:b3:39:98:74:
d6:8f:e0:dd:66:a6:e0:e7:6d:9f:58:3c:ce:59:d9:
bd:34:1f:67:22:27:9c:cd:11:c3:8b:e5:9d:01:1e:
8d:e3:40:5a:86:c0:c1:6c:00:20:3a:f7:fa:ab:e9:
7d:c6:ce:e9:1d:33:59:06:69:e2:21:b4:9b:4e:54:
30:60:5b:ec:32:e1:d6:fc:27:a9:84:fa:9d:b3:49:
1b:ed:13:93:63:fe:05:11:4e:3b:a1:d9:6f:91:eb:
48:9f:05:96:2f:91:c9:67:ef:59:c2:2f:3a:81:59:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3C:54:FB:94:C2:EB:0C:99:9B:40:75:14:1A:D0:F2:CC:88:79:EE
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/qjxU-5TC6wyZm0B1FBrQ8syIee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:c40:8095::/48
Signature Algorithm: sha256WithRSAEncryption
bc:93:bd:ed:82:9c:33:1d:89:0b:5a:cc:1a:c6:ab:a2:73:fc:
de:f3:16:20:4b:a2:bc:9e:a3:e6:7f:f0:de:d9:d1:e9:a7:0b:
92:84:60:87:38:08:9a:0e:c3:cf:4b:33:e1:0a:e6:51:4e:d2:
2d:41:ff:cf:ec:67:2a:f3:12:b4:67:e3:81:30:50:24:89:da:
99:1a:39:bf:43:ba:3e:da:c8:a8:f9:9f:d9:f5:26:c0:e5:a5:
49:d1:e9:2b:89:bf:79:eb:05:27:2c:da:60:7e:5a:7f:ec:ea:
7b:14:8f:7f:0f:fb:db:25:c4:50:98:06:90:1e:46:fa:76:5e:
0e:5c:e2:57:be:42:8a:0d:d6:10:a1:da:ef:be:ec:96:9f:7c:
7c:95:96:e2:7c:36:b8:a1:c8:37:c2:3b:8a:fe:6d:6e:ec:5c:
74:6a:bf:64:40:3c:b1:cc:b1:56:8d:ca:61:c0:59:03:76:73:
10:cd:97:e1:d8:84:9b:df:04:9a:f9:e0:2a:f0:81:19:e1:06:
8f:2a:2d:52:82:b6:06:43:69:68:7f:a5:10:77:8b:1e:7f:1b:
19:81:67:78:bf:ee:ba:73:88:c2:e2:53:87:78:f3:ce:0b:c5:
23:f5:80:2a:f1:61:d5:a5:19:1a:a9:93:6d:22:a0:df:ee:fe:
a7:90:4b:45
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxJ5fXI3OBHfbdVUYZcbMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5
YTQxMzkwHhcNMjMwMTAyMDYyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTNjNTRmYjk0YzJlYjBjOTk5YjQwNzUxNDFhZDBmMmNjODg3OWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzIhevKpVt7jpiwV/QouhWTHu415
1j0Md8tJP4CgkQFxw4l7yZUs2MPmNIcKE6yr8olVnRdpL4q05xzvETUDa0FIee1u
5vtE1iWjAjQO2BkjT+JyXqIwwBii5+Mi9vCCK79eYWlCYx+PHejRq6aop9B7PCbW
626kDQzSxZLuvaXKBc280BqrtPdW46FIviU+3rM5mHTWj+DdZqbg522fWDzOWdm9
NB9nIieczRHDi+WdAR6N40BahsDBbAAgOvf6q+l9xs7pHTNZBmniIbSbTlQwYFvs
MuHW/CephPqds0kb7ROTY/4FEU47odlvketInwWWL5HJZ+9Zwi86gVkTCwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKo8VPuUwusMmZtAdRQa0PLMiHnuMB8GA1UdIwQY
MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt
MGExYTM1ODk3ZjEwLzEvcWp4VS01VEM2d3labTBCMUZCclE4c3lJZWU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw
LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAMQICV
MA0GCSqGSIb3DQEBCwUAA4IBAQC8k73tgpwzHYkLWswaxquic/ze8xYgS6K8nqPm
f/De2dHppwuShGCHOAiaDsPPSzPhCuZRTtItQf/P7Gcq8xK0Z+OBMFAkidqZGjm/
Q7o+2sio+Z/Z9SbA5aVJ0ekrib956wUnLNpgflp/7Op7FI9/D/vbJcRQmAaQHkb6
dl4OXOJXvkKKDdYQodrvvuyWn3x8lZbifDa4ocg3wjuK/m1u7Fx0ar9kQDyxzLFW
jcphwFkDdnMQzZfh2ISb3wSa+eAq8IEZ4QaPKi1SgrYGQ2lof6UQd4sefxsZgWd4
v+66c4jC4lOHePPOC8Uj9YAq8WHVpRkaqZNtIqDf7v6nkEtF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-fra.rpki-client.org