Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/Qw5Snm_N9dtE_Hhi8xGdw0A204s.roa
File: Qw5Snm_N9dtE_Hhi8xGdw0A204s.roa (raw, json)
Hash identifier: z6mVBwVafIIPlVSmhhZyt6Jz7wkoDbAkm50LuhJSQ8c=
Subject key identifier: 43:0E:52:9E:6F:CD:F5:DB:44:FC:78:62:F3:11:9D:C3:40:36:D3:8B
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 018570DE727EFEE18C361E3F4AE5F70143DE
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/Qw5Snm_N9dtE_Hhi8xGdw0A204s.roa
Signing time: Mon 02 Jan 2023 05:05:04 +0000
ROA not before: Mon 02 Jan 2023 05:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57472
IP address blocks: 2a00:126f::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:72:7e:fe:e1:8c:36:1e:3f:4a:e5:f7:01:43:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Jan 2 05:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=430e529e6fcdf5db44fc7862f3119dc34036d38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:80:94:54:0d:c8:e7:1e:fd:d8:a4:60:b6:
25:56:f3:0e:12:d9:11:6f:9a:29:9a:a0:e2:5d:fc:
12:c0:79:ee:ee:81:cb:9c:0d:d8:2c:d6:1b:78:39:
47:9d:f6:ff:87:a8:7c:9c:6c:6f:a8:f3:ee:82:2f:
98:e6:d3:a1:94:46:84:d1:dc:31:8f:71:3e:d1:ab:
29:e6:65:cf:0a:47:f2:05:0f:7d:4d:76:02:ac:c2:
7c:91:df:2e:27:5e:67:c1:2e:23:f1:d9:4e:b9:08:
37:24:68:1a:b4:9d:f4:7f:14:d8:c7:25:5a:47:22:
31:fe:6b:5d:2f:35:6c:fa:20:fb:9c:e3:a9:0b:7a:
d1:88:a5:99:2c:83:48:84:bc:3e:cb:0a:93:4b:dd:
eb:2a:31:49:e4:8f:72:f1:66:48:fa:c4:a2:0f:a0:
f4:06:68:f8:2c:58:1f:c8:7c:b5:ef:e0:9a:7b:2c:
10:7a:fd:41:a9:81:8c:f2:1c:36:67:72:ae:0f:0d:
49:ae:e9:a3:4a:d0:b2:3d:2e:04:31:9f:41:c2:a7:
00:9c:77:9a:e4:d6:17:89:63:0e:42:c8:af:c4:55:
ea:92:4a:1b:76:c2:b0:8b:7a:ce:07:c2:8b:e1:ae:
da:96:dd:91:94:22:33:0e:a0:47:f3:c3:4b:b0:b5:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0E:52:9E:6F:CD:F5:DB:44:FC:78:62:F3:11:9D:C3:40:36:D3:8B
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/Qw5Snm_N9dtE_Hhi8xGdw0A204s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:126f::/32
Signature Algorithm: sha256WithRSAEncryption
c2:ca:a9:c0:d5:f3:d1:12:b3:6f:1f:da:3c:a5:13:b3:a0:a7:
b4:fd:b5:39:24:b5:f5:61:42:23:97:01:bc:fd:71:dc:76:07:
f1:24:19:c5:37:57:67:69:e5:33:d6:68:4d:3a:15:77:a1:75:
9d:a4:bb:8f:f5:94:b7:2e:83:cd:15:8d:1e:20:2d:f3:37:18:
21:3d:33:23:77:fd:6c:dd:ea:b2:ce:ec:56:ad:0f:66:da:26:
97:a1:43:2b:5d:cd:d6:7a:0b:c4:b1:67:8a:32:e4:07:fe:cc:
56:d1:ab:bd:04:28:63:4e:05:7d:e9:78:ef:25:0f:ac:84:67:
7e:aa:a5:ad:53:07:c6:71:cf:88:0e:e2:6b:93:18:20:c6:b7:
18:34:41:10:61:c0:db:07:1a:78:c3:be:6f:a3:45:b5:11:44:
a7:5f:9a:9b:21:1b:66:ef:cd:1d:d9:8a:3a:62:ee:c7:aa:6c:
a6:39:f2:7d:2d:81:be:44:92:3d:de:3b:f8:7c:2a:71:93:db:
0a:8c:6a:d2:ed:bc:ad:75:75:47:d9:8c:c0:07:9a:6f:9a:38:
94:b5:ca:dd:c5:c4:c5:91:f2:d3:11:a7:2c:41:47:7f:f9:c1:
37:fc:82:2f:86:5c:0a:49:52:0a:9a:56:5e:5e:e0:49:37:31:
3c:1c:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:10 2024 by rpki-client on console-ams.rpki-client.org