Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/QDh-mVlkANyKPxY7SMGNNYZJTeI.roa
File: QDh-mVlkANyKPxY7SMGNNYZJTeI.roa (raw, json)
Hash identifier: WwfD/68D9uHflu7MxDlu09YlFVx8I9iBxEj82qVxMiM=
Subject key identifier: 40:38:7E:99:59:64:00:DC:8A:3F:16:3B:48:C1:8D:35:86:49:4D:E2
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 01876FF03E3C78F50FAE725383C0EA23D6A5
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/QDh-mVlkANyKPxY7SMGNNYZJTeI.roa
Signing time: Tue 11 Apr 2023 10:50:28 +0000
ROA not before: Tue 11 Apr 2023 10:50:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204841
IP address blocks: 2a0e:3247:8011::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:f0:3e:3c:78:f5:0f:ae:72:53:83:c0:ea:23:d6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Apr 11 10:50:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40387e99596400dc8a3f163b48c18d3586494de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:93:51:44:14:5f:d0:d5:e7:93:08:d2:29:
99:0c:b4:5c:1b:85:29:ce:45:e6:ab:81:3a:4b:b5:
43:09:42:13:b1:bf:22:1f:f8:79:78:d1:5a:0a:c9:
1d:f8:a1:b9:21:90:df:c4:76:f8:b9:92:54:0b:72:
16:7c:02:a9:82:fa:24:dc:06:c3:1f:9d:a7:19:07:
1a:23:08:f9:4b:2b:26:ba:de:a4:c5:a7:f0:7b:55:
6d:8a:03:59:a3:86:5b:c7:81:14:2b:db:71:f1:55:
8c:a3:84:8b:c3:57:f5:ec:2f:46:24:68:71:71:aa:
8c:db:dd:10:d7:b7:a0:2e:59:c4:83:c1:10:93:53:
aa:32:f9:a6:bb:ba:99:87:79:c5:73:52:d3:e6:20:
62:50:dc:ed:43:64:35:ea:91:8f:6b:ae:d2:be:2d:
f1:ac:cd:8a:2e:6e:38:b0:b8:ac:00:4a:1b:ae:7a:
9c:2c:6b:5c:36:7c:db:9c:ba:8c:4d:01:e0:18:8e:
92:f1:57:58:c9:89:78:ab:f3:78:6e:0c:8f:f4:00:
d4:a4:0a:f2:2c:fc:32:3b:30:92:ea:e8:34:f0:c2:
cf:12:b5:7b:72:f2:ca:c2:70:f1:e9:d3:9f:f0:93:
86:d8:86:ec:80:f8:32:cc:0e:f0:6e:7f:b8:a4:11:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:38:7E:99:59:64:00:DC:8A:3F:16:3B:48:C1:8D:35:86:49:4D:E2
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/QDh-mVlkANyKPxY7SMGNNYZJTeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3247:8011::/48
Signature Algorithm: sha256WithRSAEncryption
be:48:65:52:35:d1:af:15:36:92:76:28:2c:1f:16:95:c4:64:
63:65:ad:4b:0c:c9:2f:f2:85:de:40:b0:cd:c5:43:b8:85:cd:
0f:ba:01:46:60:64:aa:26:df:e5:fa:e2:7b:07:07:21:54:23:
83:8b:84:dc:d3:a3:23:62:2d:3a:25:0b:a9:20:34:69:a5:76:
67:e1:06:ce:44:17:70:9c:30:ce:cf:50:13:cd:62:eb:ca:08:
7b:12:97:1e:fb:62:a0:b1:e2:ab:17:59:5d:33:64:4b:2a:be:
c0:c2:1c:6e:e7:7b:14:d9:a6:f0:ad:04:ee:d5:8a:53:84:f7:
e4:e3:01:74:d6:20:a4:0d:ea:7c:e9:22:96:68:7b:46:27:56:
bc:0a:0c:08:af:74:94:00:ce:6f:f0:ff:fd:da:85:29:fb:37:
ea:51:32:4a:aa:b1:9c:8c:72:5f:4d:ea:0a:95:19:4e:df:91:
d5:c4:cc:76:93:e8:e6:c2:46:bd:cc:25:9b:4c:78:54:87:27:
28:22:c3:b6:33:eb:92:7d:08:39:77:e0:0e:fa:c8:97:48:42:
2d:2a:f9:29:81:87:02:f2:09:55:bc:6b:5e:a6:b4:80:89:8d:
3d:4b:13:3f:d7:f1:6c:fa:a9:84:67:51:c5:04:bd:3e:87:78:
d6:a9:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org