Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-Qjow2GFAer197fOzGPlheLkfjg.roa
File: 1-Qjow2GFAer197fOzGPlheLkfjg.roa (raw, json)
Hash identifier: zBpi2lKndDHsZalaCMl9TjYYn3ld1hNPWcnfBXnsFxA=
Subject key identifier: F9:08:E8:C3:61:85:01:EA:F5:F7:B7:CE:CC:63:E5:85:E2:E4:7E:38
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246C403BE0461E18EB215C7A034C757
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-Qjow2GFAer197fOzGPlheLkfjg.roa
Signing time: Mon 02 Jan 2023 11:38:38 +0000
ROA not before: Mon 02 Jan 2023 11:38:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51861
IP address blocks: 2a0c:9a40:80a3::/48 maxlen: 48
2a0c:9a40:80ae::/48 maxlen: 48
2a0c:9a40:80a9::/48 maxlen: 48
2a0c:9a40:80a4::/48 maxlen: 48
2a0c:9a40:80a7::/48 maxlen: 48
2a0c:9a40:80a2::/48 maxlen: 48
2a0c:9a40:80ad::/48 maxlen: 48
2a0c:9a40:80a0::/44 maxlen: 48
2a0c:9a40:80a8::/48 maxlen: 48
2a0c:9a40:80ab::/48 maxlen: 48
2a0c:9a40:80a6::/48 maxlen: 48
2a0c:9a40:80a1::/48 maxlen: 48
2a0c:9a40:80ac::/48 maxlen: 48
2a0c:9a40:80af::/48 maxlen: 48
2a0c:9a40:80aa::/48 maxlen: 48
2a0c:9a40:80a5::/48 maxlen: 48
2a0c:9a40:80a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c4:03:be:04:61:e1:8e:b2:15:c7:a0:34:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f908e8c3618501eaf5f7b7cecc63e585e2e47e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:58:f9:53:35:e8:2d:8c:87:7b:4b:ad:28:
8c:a1:f5:86:c0:24:db:64:3c:da:b6:84:11:53:59:
8b:0e:5c:93:0f:06:1b:9c:c8:ed:a2:e2:ac:98:dc:
2d:a3:14:b9:18:d8:aa:57:7c:d6:e0:70:9e:e9:a2:
c9:bb:34:d6:8f:4f:e5:71:69:ad:f1:12:de:8d:26:
15:a9:ea:29:92:49:68:d5:04:2f:c3:8d:f2:b3:c8:
bf:eb:95:22:b2:37:45:b4:00:c8:e8:9f:95:d0:0c:
0f:1d:6e:7b:24:4a:a1:a1:19:1b:d1:95:39:74:a3:
fd:22:5e:08:5d:10:2f:53:0f:89:3b:1a:8d:37:cb:
05:65:b3:43:6a:6c:b2:cb:73:7d:92:f5:67:69:6b:
5a:ed:c2:7c:26:4b:8d:04:69:03:23:70:22:0b:50:
1b:bc:24:41:59:3f:3b:b1:c8:c5:c2:a5:ec:38:f7:
a4:30:6b:b7:2e:15:05:48:96:14:6a:d4:12:67:07:
f5:aa:21:b8:e1:fc:22:e2:e7:0d:a7:2a:84:f0:6f:
a2:87:89:32:79:f2:f1:14:b2:57:1c:f0:d8:bb:c0:
03:d7:75:dd:c3:8d:ec:13:ae:55:22:10:6e:c8:a4:
45:5f:f0:17:f3:9b:fa:63:ec:ae:26:c1:8c:0d:87:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:08:E8:C3:61:85:01:EA:F5:F7:B7:CE:CC:63:E5:85:E2:E4:7E:38
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-Qjow2GFAer197fOzGPlheLkfjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:80a0::/44
Signature Algorithm: sha256WithRSAEncryption
8a:c6:2b:12:a7:ad:57:fb:99:65:b1:96:03:69:25:20:c6:83:
cc:49:3f:84:0c:d0:5e:fb:3c:bf:18:53:12:0b:6b:00:05:8a:
f6:2b:a6:75:a5:6d:d2:95:d0:8a:59:c0:ca:6c:71:0f:a1:2e:
a0:e3:91:61:f2:6e:5f:f0:c6:85:6a:0c:bb:6d:dd:f5:8e:31:
57:db:7f:90:14:99:f5:db:ff:fe:9e:57:b2:3a:a6:3d:c5:13:
ea:82:b2:bb:c9:be:47:c6:b6:86:a0:dd:49:06:56:c6:70:f6:
89:72:17:29:b1:4a:7b:bc:08:5c:31:ed:68:df:6f:27:00:c1:
74:59:76:33:2d:c4:21:c5:16:b8:cf:81:a9:84:a8:d2:e4:b4:
da:23:8c:9c:0c:27:87:e8:e1:f1:f7:75:40:31:27:3d:d1:ba:
ab:e3:3b:bd:fe:c9:6d:47:3d:0e:b6:99:f6:b0:59:0c:9b:82:
1c:f9:69:2d:c1:9d:df:f0:d7:a7:d5:b1:4f:7c:a3:1e:02:1c:
19:76:0e:ba:fd:dc:f4:ed:d4:dc:1b:e2:55:1b:08:e1:7d:2b:
71:6e:82:cc:60:ee:0a:64:d5:19:d3:8d:05:17:dc:5b:0a:e8:
b4:4b:db:ff:50:35:69:41:ca:9e:86:de:05:b8:a5:11:30:1b:
63:53:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:15 2024 by rpki-client on console-ams.rpki-client.org