Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/nQ7Qyhv893BEjNlleVutJEVnb_w.roa
File: nQ7Qyhv893BEjNlleVutJEVnb_w.roa (raw, json)
Hash identifier: QpPYmNNHHGad8tX2Ew35jka4D+aIaEl7mK1UiyV35is=
Subject key identifier: 9D:0E:D0:CA:1B:FC:F7:70:44:8C:D9:65:79:5B:AD:24:45:67:6F:FC
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF6E65C8B42C45FDF05AF205622C6E
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/nQ7Qyhv893BEjNlleVutJEVnb_w.roa
Signing time: Sun 01 Jan 2023 15:24:45 +0000
ROA not before: Sun 01 Jan 2023 15:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50505
IP address blocks: 2001:a10:22::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:6e:65:c8:b4:2c:45:fd:f0:5a:f2:05:62:2c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d0ed0ca1bfcf770448cd965795bad2445676ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:dd:53:db:40:49:ec:e9:52:2c:fc:54:d3:
f6:9c:50:e0:09:91:7a:00:bf:e1:53:df:12:8c:b0:
ca:b2:f9:b5:11:dc:95:ff:2c:9b:4a:0e:95:a0:fc:
80:34:ac:14:90:f8:fe:2e:04:f2:61:66:cb:95:84:
17:72:80:af:17:a7:e7:34:a4:89:0a:05:71:5f:78:
85:29:9c:ac:a5:28:44:7f:a6:8d:5b:91:53:cd:8d:
97:14:b7:57:9f:a7:8d:9c:a1:6f:08:c0:63:92:3c:
6e:ba:32:b3:e1:c2:00:80:d6:a5:0d:31:95:83:36:
b1:37:1b:eb:dc:18:56:17:e6:bc:82:b4:63:7b:f3:
37:b5:1d:f5:16:8a:a4:6d:f7:c5:ee:0d:a8:29:2f:
07:3d:8d:7e:46:e6:4e:38:b0:e9:92:4d:4f:98:2a:
87:41:36:b7:73:83:5d:d4:ce:a4:12:b7:f7:9f:11:
e7:8e:37:25:9b:84:c9:6c:8e:b4:a3:06:3f:f7:ca:
5b:3f:c6:f6:5b:75:b4:6c:67:d2:2d:eb:59:8d:c5:
0b:47:d0:64:15:27:90:6d:af:71:66:3c:cb:3b:aa:
ce:2d:05:fe:64:72:85:11:87:64:10:85:9b:eb:ff:
b7:ab:a1:36:c0:99:a6:0a:d6:25:c8:99:8f:27:f0:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0E:D0:CA:1B:FC:F7:70:44:8C:D9:65:79:5B:AD:24:45:67:6F:FC
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/nQ7Qyhv893BEjNlleVutJEVnb_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:a10:22::/48
Signature Algorithm: sha256WithRSAEncryption
09:99:3e:99:f6:cc:3f:05:4b:82:9c:ae:80:55:97:46:a8:13:
cc:93:07:52:2f:dd:f8:43:6b:fe:90:3a:fd:f9:9a:95:f2:b2:
4a:ae:39:98:5f:39:ab:b7:ab:65:16:fa:b0:ae:b2:bf:f0:e8:
4e:d8:69:d5:b6:b9:f6:26:10:b5:ff:74:c8:16:c9:02:ac:a6:
76:a5:d4:b7:78:d5:3c:8b:5f:e2:12:ab:32:30:d7:b3:1a:a7:
47:4e:94:b3:ca:f1:7f:a0:5d:5b:fa:fa:a5:8f:12:e7:cf:a6:
38:f8:2b:88:43:10:24:ff:8c:db:28:aa:e7:53:60:8a:25:d2:
42:aa:91:79:a5:20:ae:4c:72:7d:34:5b:8b:ef:10:03:e1:5e:
c6:bd:ae:73:aa:1a:ad:11:43:aa:fa:a3:64:87:59:ec:88:7d:
29:78:63:08:a6:34:c2:f2:3b:f2:15:95:d9:79:45:91:67:3a:
e7:53:be:d3:25:94:c1:e1:69:aa:4b:19:80:a9:3f:4e:72:80:
df:1c:5a:d7:26:ba:07:4b:e0:95:a5:ca:ee:0f:7a:b6:d3:4b:
2f:77:4b:7b:3d:72:7a:e3:5a:ee:c9:45:a0:be:eb:ba:9a:46:
b0:a1:57:b4:bc:e4:19:e5:dd:51:9e:f5:a2:3f:a3:c9:65:da:
8e:87:a8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org