Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/qHKY4piqOsvhcS3l0a_5eLShOe0.roa
File: qHKY4piqOsvhcS3l0a_5eLShOe0.roa (raw, json)
Hash identifier: 35oQTgM1rEJppNrzoHclZfXDxc6fmNOVSgVLxb1Y2N4=
Subject key identifier: A8:72:98:E2:98:AA:3A:CB:E1:71:2D:E5:D1:AF:F9:78:B4:A1:39:ED
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0186E521DCF049C604AC207EAF4E1CC59FC7
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/qHKY4piqOsvhcS3l0a_5eLShOe0.roa
Signing time: Wed 15 Mar 2023 11:57:27 +0000
ROA not before: Wed 15 Mar 2023 11:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199436
IP address blocks: 2a13:b487:1b00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:21:dc:f0:49:c6:04:ac:20:7e:af:4e:1c:c5:9f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Mar 15 11:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a87298e298aa3acbe1712de5d1aff978b4a139ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:61:f6:67:fe:2a:c6:11:04:09:33:5f:14:
d3:b6:b5:87:3e:c7:12:86:db:99:d5:e7:a5:a6:6b:
e4:88:90:cc:b6:0d:4b:3c:c7:36:8a:72:f5:c7:c2:
00:d9:89:1d:e9:4d:29:3b:4d:23:13:7e:2e:fb:ed:
cd:47:9f:02:cd:b4:49:e4:ca:bc:c0:1d:c0:f3:c6:
2b:c2:af:8f:28:59:48:3c:09:68:a9:f2:70:e2:77:
a9:03:cd:1a:b2:c3:f2:df:47:28:10:2d:9b:aa:9c:
01:b9:ac:02:f5:83:15:88:d4:d7:1a:f0:bf:4b:b6:
32:4d:83:02:99:59:fb:02:83:b0:25:ff:e1:0a:a8:
d3:15:ba:8f:fc:44:22:79:a1:e0:83:be:11:05:77:
29:e8:d3:2d:97:9f:a5:15:40:ad:c3:69:5d:f7:eb:
13:81:91:a4:7d:12:a1:a3:25:01:d0:80:87:93:07:
05:50:d6:24:68:bd:31:78:6f:58:50:f7:ee:fc:28:
6e:10:d2:51:5c:10:72:1a:cb:40:26:d7:f1:ec:e6:
de:03:d3:80:ed:04:0f:92:74:01:14:50:ae:d3:c7:
39:eb:fd:d8:54:71:0d:10:79:83:c8:c0:de:52:d0:
c6:c4:b2:a6:06:ad:1e:bd:d1:43:da:26:17:67:1f:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:98:E2:98:AA:3A:CB:E1:71:2D:E5:D1:AF:F9:78:B4:A1:39:ED
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/qHKY4piqOsvhcS3l0a_5eLShOe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1b00::/40
Signature Algorithm: sha256WithRSAEncryption
c5:bd:46:71:a7:26:ff:fe:d0:06:8b:18:af:16:a2:62:86:4e:
8c:f1:ae:ed:2c:47:96:c6:c2:80:86:10:ca:9d:6a:0a:6e:a8:
74:91:7f:d4:68:a6:72:44:c2:fa:e4:bf:88:f2:21:fa:49:56:
4b:7b:30:57:67:b2:2c:97:69:37:76:6c:20:08:c5:0e:e2:86:
0c:00:0e:f3:64:ac:86:09:2b:da:ee:24:b6:db:c7:b2:11:d1:
15:10:7f:36:17:cd:ea:da:85:2b:e1:d5:d5:04:a8:59:1f:6b:
48:f4:fa:d5:cf:65:07:f3:52:ef:f6:b9:84:90:9c:dd:2d:6a:
3d:94:9a:07:f7:79:06:c3:36:b4:9f:5f:01:24:5a:b9:bb:4c:
71:82:fb:a5:63:dc:1c:79:84:46:7d:16:b6:6b:e9:11:af:fb:
65:95:51:30:20:8f:cd:a1:75:9c:65:b5:92:bb:eb:da:d5:a3:
56:79:d1:98:ef:34:6d:55:84:22:2e:2f:7f:cf:12:35:24:b7:
26:7c:af:a0:e3:45:a2:5f:03:ef:e2:b5:e0:42:56:f4:29:47:
77:41:5e:38:f0:c4:c4:66:c0:4a:dc:9d:7b:f6:de:3a:31:e4:
b4:49:6b:38:09:5b:52:a5:6d:e5:a8:75:1e:24:ec:8d:26:d0:
ee:64:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org