Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/qyROYlVh8rdr12STij9hubSalwg.roa
File: qyROYlVh8rdr12STij9hubSalwg.roa (raw, json)
Hash identifier: LjFRSFepI8cnSiy7s2Nvk3ERYGI7UBPw2LNsV+jwhhk=
Subject key identifier: AB:24:4E:62:55:61:F2:B7:6B:D7:64:93:8A:3F:61:B9:B4:9A:97:08
Certificate issuer: /CN=c2fa527fa586cab2f56700cdce8d8f512c0f18a9
Certificate serial: 0185708CD5464ED0415380CDD32212615BF7
Authority key identifier: C2:FA:52:7F:A5:86:CA:B2:F5:67:00:CD:CE:8D:8F:51:2C:0F:18:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/qyROYlVh8rdr12STij9hubSalwg.roa
Signing time: Mon 02 Jan 2023 03:35:55 +0000
ROA not before: Mon 02 Jan 2023 03:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48635
IP address blocks: 2001:678:3a4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d5:46:4e:d0:41:53:80:cd:d3:22:12:61:5b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fa527fa586cab2f56700cdce8d8f512c0f18a9
Validity
Not Before: Jan 2 03:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab244e625561f2b76bd764938a3f61b9b49a9708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d9:6e:63:30:b8:5a:88:b1:13:67:82:f9:57:
51:30:43:fc:8f:9f:72:c0:55:7b:e8:c7:e1:bf:16:
9f:01:68:49:c6:5e:77:bb:cc:c2:54:70:0f:9a:cc:
a8:33:8d:1d:dd:ac:20:d7:06:57:e0:b8:e1:67:48:
ff:e2:22:fe:e5:95:dc:15:a4:0a:7d:1b:5a:b3:7e:
90:01:1d:2c:24:a7:b0:e9:5f:c6:30:e8:36:c6:e0:
0f:e2:fd:0f:14:73:96:88:6c:a0:ed:10:d9:02:47:
90:57:6c:de:fe:1d:0a:ff:85:63:bc:c6:d2:c1:9d:
a2:6d:37:ff:42:a7:b5:6f:2f:99:25:13:78:0c:e4:
b5:4e:1e:c6:bc:24:64:ca:a0:c2:ca:b2:2f:c7:2b:
52:02:bf:2b:df:b4:58:23:36:5b:6c:3f:0f:fd:ff:
09:98:a5:eb:16:09:4c:84:3e:f3:0b:3e:28:f0:b7:
6c:46:82:ed:11:8e:fe:fa:e5:99:8e:5e:a5:d9:83:
29:62:bd:35:f0:35:9e:96:31:87:06:20:a0:31:9b:
fd:41:82:49:23:fb:93:29:c5:c8:6e:01:d5:de:b7:
6b:22:3b:75:ab:21:37:cf:f7:5a:12:3a:e5:ea:8e:
ed:05:c0:63:f1:e4:85:0a:99:c2:aa:18:fb:a4:96:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:24:4E:62:55:61:F2:B7:6B:D7:64:93:8A:3F:61:B9:B4:9A:97:08
X509v3 Authority Key Identifier:
keyid:C2:FA:52:7F:A5:86:CA:B2:F5:67:00:CD:CE:8D:8F:51:2C:0F:18:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/qyROYlVh8rdr12STij9hubSalwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3a4::/48
Signature Algorithm: sha256WithRSAEncryption
9e:28:62:cd:ce:bd:de:f2:a8:8a:d5:05:eb:70:e3:0f:af:b2:
de:ae:2e:8b:32:a1:f6:a5:32:d9:06:f1:73:9f:01:6a:20:a8:
28:6e:da:24:bf:fa:60:f7:22:b6:76:94:4a:b0:10:6b:ad:1e:
61:11:b6:d3:b5:eb:87:bb:0d:e9:1a:3d:d1:f5:a5:46:ea:b6:
87:47:ee:9b:3d:ef:3b:0f:75:47:22:e0:11:4a:96:67:81:32:
0d:a3:ab:eb:cc:88:d3:14:c7:14:80:1d:90:e3:23:f7:26:6c:
46:db:06:0f:16:8a:d9:28:59:0d:75:e9:5f:ec:2c:49:04:05:
8e:0f:85:f3:8b:51:13:45:65:0e:5d:ea:37:a1:e4:4a:1f:3e:
d9:7c:1a:fe:a1:6e:84:36:ec:2a:a5:1c:88:22:20:1e:c9:eb:
af:48:16:d0:3b:8f:21:6e:7e:a1:38:a6:2f:0e:e3:a7:e7:8a:
89:93:b2:50:d7:12:01:47:5c:19:a5:84:e8:61:2a:60:ca:7a:
8a:a2:05:16:b9:47:72:ef:7a:3f:34:73:2a:b5:5d:7e:53:b0:
3e:60:fd:8d:be:91:40:36:38:56:b5:bf:88:e5:5f:a2:60:6b:
3a:b1:ac:61:aa:06:a7:d2:51:21:0a:bb:ef:c9:e4:0e:e5:59:
3a:c8:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:12 2024 by rpki-client on console-fra.rpki-client.org