Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/qwao6Wei5W6tqgryvHplATXAcyc.roa
File: qwao6Wei5W6tqgryvHplATXAcyc.roa (raw, json)
Hash identifier: j7diMP1W7mHo0vofw1wHXaUQHCbrEh0Arb/ludwYxKQ=
Subject key identifier: AB:06:A8:E9:67:A2:E5:6E:AD:AA:0A:F2:BC:7A:65:01:35:C0:73:27
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 01856D3874587028BBC1DA902DCC7606968F
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/qwao6Wei5W6tqgryvHplATXAcyc.roa
Signing time: Sun 01 Jan 2023 12:04:54 +0000
ROA not before: Sun 01 Jan 2023 12:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43591
IP address blocks: 2001:67c:2028::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:74:58:70:28:bb:c1:da:90:2d:cc:76:06:96:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Jan 1 12:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab06a8e967a2e56eadaa0af2bc7a650135c07327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:14:15:15:f8:22:e7:ea:f6:9b:5d:8f:52:
82:5a:06:cf:af:33:43:68:39:ea:12:c1:18:f7:0f:
56:2f:45:2a:91:f9:91:d1:70:03:4a:06:75:09:ed:
32:56:f9:5f:df:b7:a1:2c:76:6a:e2:f8:f1:3f:33:
1f:85:03:bf:0e:b3:10:c6:db:20:2d:ce:af:f3:04:
7a:74:f5:5b:b4:87:1f:e7:3f:2d:b0:47:ab:2e:99:
f7:29:2b:74:c7:7b:1b:73:9d:f8:87:bb:9b:87:75:
6f:dc:29:7b:4b:17:60:5a:32:4b:42:9f:87:df:e0:
0c:4b:c4:be:6f:15:ac:ef:83:14:e0:80:1f:36:8b:
eb:f0:21:a6:bf:6f:1a:19:23:e7:bd:41:ea:e7:6f:
34:36:5b:80:a7:7a:50:4b:ed:d8:aa:36:c8:14:e6:
65:88:00:e0:56:97:31:c4:81:f3:b6:e3:6c:21:73:
1a:1c:ec:75:f1:b3:fc:87:63:32:0b:d3:bd:e4:81:
4a:00:32:1c:7c:ec:fe:d6:18:f8:8a:a5:e7:c2:49:
ca:d2:7c:8f:c0:5c:9e:be:4d:88:17:fa:53:84:ce:
28:d5:9b:f9:69:e8:ee:34:6f:34:0f:24:d1:01:b1:
ee:cf:df:b5:1f:fd:cc:4f:5e:ef:9d:99:73:fb:fd:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:06:A8:E9:67:A2:E5:6E:AD:AA:0A:F2:BC:7A:65:01:35:C0:73:27
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/qwao6Wei5W6tqgryvHplATXAcyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2028::/48
Signature Algorithm: sha256WithRSAEncryption
b7:59:5f:0c:4a:c3:ec:61:d8:5b:80:18:f1:84:17:1a:f5:81:
77:9e:9d:22:db:f0:08:15:75:40:e9:97:81:bb:9e:2a:fc:76:
d5:8e:3e:dc:f2:f5:d7:22:af:95:85:a1:fd:2f:99:a7:1a:4c:
50:a1:10:0a:0a:09:5a:15:f5:31:f2:07:26:c4:58:51:16:b6:
8f:c0:0c:63:6d:60:e9:86:93:07:1a:6b:ae:2a:eb:67:e3:18:
36:24:ec:5e:9d:4b:dd:0b:98:f4:03:a0:e5:e0:a8:37:09:b1:
0b:a1:9e:13:ee:ec:ea:26:bf:5d:f2:b4:34:4a:c0:c0:d7:2d:
5e:db:fa:9b:43:6d:42:f0:e7:0e:7c:9f:88:f2:c3:61:7f:3b:
06:7c:ea:bf:59:97:c3:e7:bc:74:c5:93:87:7f:7a:d1:72:2c:
0e:d6:d3:eb:fc:66:83:96:b9:fa:4c:86:c7:4f:4b:bf:38:8a:
ff:fa:37:48:e9:cd:d3:39:3d:3d:8e:dd:b9:89:64:b5:66:18:
0d:f3:f6:44:3d:a5:02:4b:e4:7e:82:83:07:71:4f:f5:5f:4c:
6d:b9:ba:ee:30:ed:2d:1f:93:f1:aa:2a:c9:b6:69:8f:60:70:
17:83:19:5b:50:03:86:5f:4f:05:0e:2e:9e:3e:77:42:4f:83:
59:cc:44:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:59 2024 by rpki-client on console-fra.rpki-client.org