Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TQRcjGNiJ5IReqRhY8VhuLQtxaM.roa
File: TQRcjGNiJ5IReqRhY8VhuLQtxaM.roa (raw, json)
Hash identifier: c9OSm8B7oM5HX0DSA4IDv35Um9EbUl/KoOfUdips4lM=
Subject key identifier: 4D:04:5C:8C:63:62:27:92:11:7A:A4:61:63:C5:61:B8:B4:2D:C5:A3
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 01892561B857DD7223D91C59E3E3343C8364
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TQRcjGNiJ5IReqRhY8VhuLQtxaM.roa
Signing time: Wed 05 Jul 2023 09:28:28 +0000
ROA not before: Wed 05 Jul 2023 09:28:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:85c0::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 05 Jul 2023 12:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:61:b8:57:dd:72:23:d9:1c:59:e3:e3:34:3c:83:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Jul 5 09:28:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d045c8c63622792117aa46163c561b8b42dc5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:31:e1:32:12:86:4d:48:8d:52:0e:c5:76:
84:4e:a0:eb:ff:5a:10:13:89:04:45:dd:e6:9e:9c:
38:63:45:76:24:7e:85:b8:ae:27:4b:1c:17:d1:a1:
f4:78:db:b5:ea:c2:a3:62:dc:41:f8:4d:e0:94:bc:
30:31:08:09:c8:6f:ca:ee:f7:7d:78:99:97:1c:ec:
42:dc:f9:e9:1d:7d:8e:4f:ad:3f:6e:ca:dc:63:f1:
5b:b4:47:af:fd:23:7c:b6:78:2b:6c:34:b4:45:9f:
3e:b5:05:76:8a:93:01:4f:ac:2d:b4:2f:ab:b3:5a:
34:0f:99:34:51:f9:d2:fd:e8:1a:bf:52:c7:cc:4e:
bd:b5:49:9b:92:83:b2:7a:57:27:42:55:f9:c2:99:
be:c9:fe:03:53:5b:50:cf:4f:e9:12:28:b3:15:a7:
c9:ea:2e:a6:23:12:96:fb:ac:3e:d9:5b:81:c3:fe:
9d:bf:45:68:27:7f:87:90:a4:1e:61:9e:79:7d:df:
bb:d7:9d:db:03:97:48:dc:7d:3a:63:b4:00:29:58:
d9:eb:ce:ee:1d:e8:09:90:8e:87:ad:8e:62:71:61:
03:3d:c9:53:fc:e4:2b:10:60:d7:b4:d1:f7:09:c4:
85:d9:40:6b:60:38:bc:02:72:4b:9d:c3:9c:cd:fa:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:04:5C:8C:63:62:27:92:11:7A:A4:61:63:C5:61:B8:B4:2D:C5:A3
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TQRcjGNiJ5IReqRhY8VhuLQtxaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:85c0::/40
Signature Algorithm: sha256WithRSAEncryption
1b:f1:be:f4:ca:43:96:54:14:e1:d9:39:2d:6f:4e:c8:4e:de:
a4:ab:a8:37:96:c4:11:2a:e4:b5:42:6c:e9:ab:8e:92:dc:aa:
0d:81:ca:b4:d3:16:b3:6f:c4:c4:f3:44:30:50:4d:15:f9:e2:
99:c8:e6:38:64:25:d4:db:fc:c3:f5:d9:58:b0:54:a8:71:e4:
99:cb:1f:3c:31:ef:97:4c:06:5b:fa:02:fc:0d:6a:dd:ff:19:
15:bf:fb:e5:63:ec:45:4a:94:b5:86:7f:c3:b0:42:3e:e2:e1:
78:76:bd:62:2b:30:5b:c7:14:a5:36:6f:c7:26:47:cb:8f:be:
e6:3e:8b:f9:b9:f2:02:1c:19:50:41:77:d9:5e:52:8f:a5:e1:
8b:ba:47:ae:2e:35:bc:04:13:ca:27:94:98:b6:d4:0e:fe:7c:
53:cd:8a:b1:63:93:0b:20:b7:a5:b3:b4:ef:73:a2:21:0d:c9:
ea:4c:f1:8c:d6:58:c4:42:b8:38:42:39:ef:b6:67:6b:82:ec:
00:94:69:23:35:03:e8:fa:b6:50:32:e2:8c:aa:7e:8a:45:38:
92:25:23:66:c3:cc:33:fa:e4:ce:be:8a:b2:85:c5:29:b9:58:
68:1e:21:42:88:7f:d8:75:00:39:ba:20:e0:2c:6b:a0:dc:bb:
19:af:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:27 2024 by rpki-client on console-ams.rpki-client.org