Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QgN-ew81txmua5Xve-5hvEcy8vM.roa
File: QgN-ew81txmua5Xve-5hvEcy8vM.roa (raw, json)
Hash identifier: FkJQ9sq9Nd0xFmePv77pwMPjNmjiRSD/9acRzmUqCsk=
Subject key identifier: 42:03:7E:7B:0F:35:B7:19:AE:6B:95:EF:7B:EE:61:BC:47:32:F2:F3
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0192EE0C61B6DE507F19420CF26DE2EBC1D0
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QgN-ew81txmua5Xve-5hvEcy8vM.roa
Signing time: Sat 02 Nov 2024 18:04:01 +0000
ROA not before: Sat 02 Nov 2024 18:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:b641:20::/44 maxlen: 48
2a0c:b641:130::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Nov 2024 11:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ee:0c:61:b6:de:50:7f:19:42:0c:f2:6d:e2:eb:c1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 2 18:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42037e7b0f35b719ae6b95ef7bee61bc4732f2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:1a:9b:2c:3b:d0:36:7c:27:da:79:ff:10:
72:69:04:16:02:1e:64:be:a5:b7:1a:bf:17:0b:d9:
8c:7b:4e:64:5c:0f:0d:fb:b6:e2:86:a2:26:7e:ce:
05:dd:4a:32:90:f5:71:4a:c0:30:70:95:9a:81:c9:
d2:b2:60:cb:f5:27:54:8e:f9:3a:d4:63:06:45:fe:
53:f2:76:9f:da:cd:68:99:fd:0a:55:1d:63:30:64:
ef:e4:7c:a5:9b:dc:2f:47:62:8f:d9:e8:0f:37:dd:
30:5e:22:bf:e8:d3:0d:2e:9c:fc:32:07:ec:e0:9a:
9d:cb:2b:7c:8a:9b:a0:49:f1:b4:f8:ba:3f:ea:75:
01:6a:c2:f4:43:f0:57:6e:a7:78:6e:12:53:b6:9f:
12:15:c6:ff:0c:21:b2:6c:16:a4:a8:a5:6f:1d:a3:
77:dc:4e:61:f9:65:af:35:0d:dc:66:13:04:81:56:
ea:bf:45:62:ff:cb:5a:fd:eb:ec:27:67:56:77:84:
47:b5:11:5f:e4:0e:81:fc:15:66:d0:77:e7:43:4c:
f9:9c:e0:fc:fc:8a:8d:bc:e1:e0:7d:09:57:2d:9b:
17:81:50:eb:c8:9f:14:c4:90:3e:23:9b:97:6f:ea:
26:76:eb:45:8b:05:4d:65:ce:68:5d:39:c6:06:26:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:03:7E:7B:0F:35:B7:19:AE:6B:95:EF:7B:EE:61:BC:47:32:F2:F3
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QgN-ew81txmua5Xve-5hvEcy8vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:20::/44
2a0c:b641:130::/44
Signature Algorithm: sha256WithRSAEncryption
59:d8:61:4c:74:78:13:70:a5:8b:9f:04:42:b0:84:be:cc:ed:
34:55:0b:14:15:4d:5c:57:65:c5:d3:c9:b5:de:f7:4d:f2:06:
d7:77:bc:cb:7b:97:18:9a:e2:08:f1:a4:c1:b0:80:4e:cc:30:
e1:45:dc:4a:a2:27:57:a9:e8:a4:63:d8:49:c1:b6:93:bb:e9:
d4:94:8d:58:f3:52:b0:7c:ce:11:0b:28:aa:b0:ce:64:4a:fb:
7a:8f:75:c7:8a:15:b1:62:9a:a2:f7:61:ff:13:db:72:55:80:
45:06:6e:90:f7:ef:f8:a3:4a:13:7b:65:d1:d1:5f:48:5e:e4:
61:5f:aa:0b:36:d9:be:86:d9:3b:27:4f:14:de:94:58:4c:79:
4f:41:ca:4d:21:58:81:1d:0e:31:f6:15:82:3d:31:e9:6b:55:
64:c2:8f:1e:06:43:d2:69:7b:df:a4:45:33:16:59:fa:3a:57:
67:68:3d:8f:f7:06:d5:bc:80:78:36:d2:23:47:68:fb:fd:dd:
de:62:7e:22:19:88:62:56:fc:c3:23:71:2f:fd:fd:e7:8b:3b:
f4:1e:09:bd:32:40:d5:e5:27:99:8a:36:d4:ae:f8:db:c3:93:
31:bb:23:36:88:58:ad:1b:ad:75:06:bf:02:80:11:85:1c:0d:
ea:46:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:17:35 2024 by rpki-client on console-fra.rpki-client.org