Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/qPVE2WRxeOd5f7fel1LGjBVcZ8Y.roa
File: qPVE2WRxeOd5f7fel1LGjBVcZ8Y.roa (raw, json)
Hash identifier: Jn9ZUDHMT6Hf6R0M4/0wDdmgcbELGXdkB+UeCf1N64s=
Subject key identifier: A8:F5:44:D9:64:71:78:E7:79:7F:B7:DE:97:52:C6:8C:15:5C:67:C6
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 01856CB818BD5AD77956E4BF14933C87B2B0
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/qPVE2WRxeOd5f7fel1LGjBVcZ8Y.roa
Signing time: Sun 01 Jan 2023 09:44:42 +0000
ROA not before: Sun 01 Jan 2023 09:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213151
IP address blocks: 2001:678:1e8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:18:bd:5a:d7:79:56:e4:bf:14:93:3c:87:b2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Jan 1 09:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8f544d9647178e7797fb7de9752c68c155c67c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:4f:83:74:f4:b3:e6:2b:68:16:c5:aa:56:
db:b6:2a:7c:66:98:ac:2e:4a:89:30:d0:28:0f:ec:
5f:f3:d4:49:20:30:b0:48:d6:11:70:10:aa:b8:4b:
e1:12:94:e0:fa:a3:4a:33:53:d5:b3:fa:1b:2a:d1:
2b:9c:9e:2f:c7:08:3e:6d:a1:bb:07:ee:fa:b1:64:
db:6b:71:8a:18:f7:fb:55:5c:e3:c7:6a:c3:36:9d:
9c:45:bb:2e:da:b6:a2:aa:93:f5:36:07:dd:b4:dc:
9f:ab:c9:20:c0:50:eb:f6:46:83:bd:79:d7:54:77:
69:25:90:b3:a1:c3:4a:a3:4f:b2:c1:f1:05:08:9c:
35:3f:6b:a3:72:db:3e:23:2a:50:6f:8f:65:5d:7a:
61:de:4c:85:a0:74:9c:67:0d:07:ca:0d:28:f5:f6:
1b:fc:dd:43:57:85:14:21:40:e4:a9:66:0f:a8:c2:
26:54:a8:d7:e6:ba:43:03:12:24:99:d6:46:00:3a:
29:78:0d:32:76:77:02:57:c3:18:2c:09:cb:93:56:
de:b9:99:47:ec:18:9b:32:44:32:fe:f6:11:18:86:
f8:90:04:94:e2:5f:d6:7d:1f:a6:47:73:5f:45:d5:
c9:ed:e8:2e:b3:ed:87:aa:2b:f1:fc:cb:a0:f1:d0:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F5:44:D9:64:71:78:E7:79:7F:B7:DE:97:52:C6:8C:15:5C:67:C6
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/qPVE2WRxeOd5f7fel1LGjBVcZ8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1e8::/48
Signature Algorithm: sha256WithRSAEncryption
5e:2a:0f:47:55:03:71:01:7c:b7:59:09:32:52:9f:29:7c:61:
9d:a4:88:c0:42:4b:2d:fe:9c:6b:8b:6f:b1:dd:fd:d4:32:02:
21:45:1f:f9:3f:9a:50:7f:1e:d6:5a:6c:12:d0:01:bc:c1:b6:
23:5a:cc:52:7d:61:e8:9f:eb:95:fd:a5:cb:fa:a7:c2:51:8d:
7b:25:1d:20:ed:28:c6:ad:8e:34:75:c1:39:16:c3:57:75:8d:
f8:b0:26:03:2d:9c:2a:85:44:5d:28:f3:84:80:65:df:b2:9e:
25:24:2f:b8:72:85:11:cf:2c:bf:45:a5:a4:e4:0b:61:9c:aa:
63:fb:29:1b:b6:0e:64:01:05:45:31:de:71:0c:98:40:d3:fa:
9d:b4:41:ab:3a:80:02:f9:e1:8b:a2:bd:3a:b1:9c:78:2d:2e:
96:f5:21:75:00:68:37:3a:24:0f:cd:a6:fe:af:a1:04:4b:77:
ac:5d:18:e7:63:2d:9f:a8:c1:49:e2:a7:92:22:df:0b:4d:86:
f2:5c:84:73:b6:8a:6a:cb:82:af:85:e1:4b:c7:fc:33:de:6f:
b7:36:bb:d4:77:13:41:03:38:82:e3:7f:22:10:7c:d1:e6:5e:
62:ef:be:ee:6c:6b:9f:ee:40:da:1a:ee:b2:fb:6b:2a:db:1e:
11:ad:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:23 2024 by rpki-client on console-fra.rpki-client.org