Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/QgNsqHTNCXToabMMWmy7eJrz8nI.roa
File: QgNsqHTNCXToabMMWmy7eJrz8nI.roa (raw, json)
Hash identifier: lFDHN1Im/WM+8cRnMQJqPMPxCcMqrMDWaBYBZw1dUNs=
Subject key identifier: 42:03:6C:A8:74:CD:09:74:E8:69:B3:0C:5A:6C:BB:78:9A:F3:F2:72
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01856CCB0054EA552EE3981BA7A950380483
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/QgNsqHTNCXToabMMWmy7eJrz8nI.roa
Signing time: Sun 01 Jan 2023 10:05:21 +0000
ROA not before: Sun 01 Jan 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49133
IP address blocks: 2a0d:2406:babe::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:00:54:ea:55:2e:e3:98:1b:a7:a9:50:38:04:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 1 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42036ca874cd0974e869b30c5a6cbb789af3f272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:0b:4e:69:14:a2:5a:78:04:84:32:92:ab:
dc:70:0d:b4:92:33:f4:fd:d5:8b:48:aa:a7:7e:35:
0a:4a:53:14:8f:ae:6f:21:e5:b6:51:92:7d:8c:be:
c0:fe:cf:c5:11:96:58:42:56:c7:21:03:fa:e3:a5:
46:f2:a0:48:f8:08:4b:40:e0:f6:35:ce:b9:8e:0c:
cb:f7:16:e9:fc:a1:38:c9:ca:1b:26:78:93:84:5c:
7d:4f:88:91:9e:01:a7:e4:23:1d:a9:4c:bd:34:14:
ec:a6:71:2c:b3:0f:dd:00:47:1d:5a:70:6c:0c:cb:
41:32:ce:17:5e:02:1d:0b:f1:30:3c:19:ba:0e:4f:
36:ec:01:75:34:95:6d:c2:8f:07:14:1d:1f:83:53:
85:6a:bc:08:98:3a:c2:97:ac:f0:49:4e:d3:91:3f:
16:f7:49:63:db:ee:2a:90:31:92:e0:43:0a:0e:fa:
95:5b:05:40:25:ca:74:c8:1d:91:9e:72:e6:33:a9:
8a:79:fb:b5:d6:9d:d1:4b:57:70:b3:7d:91:6e:a6:
59:25:f9:93:63:0f:67:47:38:39:ed:23:5b:39:f4:
e0:4f:7f:94:45:f3:f8:a3:98:fc:16:35:39:5a:d9:
66:bc:7a:1c:d1:f2:60:6e:3c:24:0f:c3:8a:60:28:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:03:6C:A8:74:CD:09:74:E8:69:B3:0C:5A:6C:BB:78:9A:F3:F2:72
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/QgNsqHTNCXToabMMWmy7eJrz8nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:babe::/48
Signature Algorithm: sha256WithRSAEncryption
32:c2:07:df:97:ae:9e:64:6b:32:8e:04:b7:3d:06:1c:91:91:
c1:78:68:1b:a0:03:46:65:01:f9:59:9c:6a:40:85:e0:f5:41:
58:12:0e:3d:7a:8e:34:5c:d3:ce:6b:da:f6:b7:ec:57:81:6b:
8e:9b:10:1b:0e:5e:25:b4:3c:00:cf:21:51:24:ca:ac:08:26:
df:48:ad:fb:e4:b4:d4:2e:35:21:68:0f:ad:ac:9b:e6:48:7f:
fe:6f:3d:95:ce:a7:55:2f:e5:24:ab:6e:e2:5c:f8:99:b6:71:
b5:e9:82:3c:86:a1:96:3e:44:47:2a:d0:ae:79:0d:67:0d:8a:
0e:eb:ad:8e:13:72:0d:a9:a5:c0:8e:91:26:f0:d5:b8:fa:b3:
b9:14:71:67:ae:2b:14:b9:cb:f4:9c:28:aa:99:f6:d2:2e:0f:
0d:32:9d:c8:7b:96:42:12:58:2e:90:52:1d:31:2d:d6:97:f2:
78:ce:a9:ad:bd:9c:b6:7a:cb:0a:d3:c2:f0:18:e1:8d:11:56:
9e:f0:16:e7:09:9c:55:7a:96:6a:43:7d:27:96:30:a6:8c:f2:
8b:ed:3f:be:dd:83:a9:43:19:6c:fe:9c:d4:2b:0c:5b:fd:b0:
5c:5c:5a:9b:6b:e8:71:fa:ed:85:ed:fe:b4:3e:6f:3f:b3:62:
fe:21:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:18 2024 by rpki-client on console-fra.rpki-client.org