Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QoxmnBfFZ3MKHV5azwmo4daPAMY.roa
File: QoxmnBfFZ3MKHV5azwmo4daPAMY.roa (raw, json)
Hash identifier: JYT6m0IRpYoaEE9BIftBd6X8hnNhPkiwtUsgaEDe9+I=
Subject key identifier: 42:8C:66:9C:17:C5:67:73:0A:1D:5E:5A:CF:09:A8:E1:D6:8F:00:C6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E82CE9C693B9CA7C06F3AA60C81F9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QoxmnBfFZ3MKHV5azwmo4daPAMY.roa
Signing time: Mon 02 Jan 2023 06:15:02 +0000
ROA not before: Mon 02 Jan 2023 06:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211448
IP address blocks: 2a0c:b641:140::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:82:ce:9c:69:3b:9c:a7:c0:6f:3a:a6:0c:81:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=428c669c17c567730a1d5e5acf09a8e1d68f00c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:25:d6:91:f3:45:b0:f3:10:11:d2:22:58:
ac:ce:5f:29:9b:e5:f0:23:f0:31:b2:3c:f6:b1:ea:
80:05:5c:5e:45:1f:dd:fa:f8:83:03:17:8e:a9:8c:
f1:d8:8c:aa:c0:ed:5a:1c:f7:e0:e6:89:2f:8e:d9:
c5:a8:c8:56:50:3c:41:44:7f:ac:0c:75:84:3b:5a:
c2:6f:11:3d:c5:5c:4f:ea:70:4e:7b:7a:02:ce:ae:
bc:3b:64:45:ff:28:d3:c5:8d:2b:71:a3:44:03:ea:
85:e0:e3:7c:a4:7b:57:ad:c9:9f:53:66:17:92:5e:
a9:22:31:1b:b5:83:ee:65:b8:f8:a6:03:cd:06:23:
80:d1:1d:4d:cd:64:a3:ad:c0:ac:21:b7:5e:37:52:
02:6e:63:fc:8b:6f:33:a4:4c:4c:d9:67:7f:fd:19:
dc:a5:84:59:9d:55:cb:60:aa:c6:d2:62:63:d5:32:
4d:c6:f6:e6:41:8f:27:c6:9d:c5:93:ff:a5:9d:9c:
64:e0:63:ca:75:b9:b2:43:91:09:7b:5a:4f:94:17:
8d:91:ff:94:fe:52:aa:87:37:6d:e0:3a:60:2f:fd:
b2:fe:3f:07:3e:40:28:59:71:eb:bc:09:2e:2d:40:
d3:d8:48:d8:90:be:57:91:14:aa:4d:6f:e0:56:df:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:66:9C:17:C5:67:73:0A:1D:5E:5A:CF:09:A8:E1:D6:8F:00:C6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QoxmnBfFZ3MKHV5azwmo4daPAMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:140::/44
Signature Algorithm: sha256WithRSAEncryption
89:1a:58:97:9a:b6:d7:78:40:1d:34:0e:2f:41:73:df:57:3f:
49:0f:72:c4:78:b7:20:36:3a:46:5a:02:7d:61:81:83:49:e9:
4d:bf:4d:9e:b1:65:20:86:5d:8f:09:26:cb:f6:c0:81:95:df:
02:48:db:f3:bc:01:cd:2e:85:64:66:de:94:14:e3:bf:2c:3d:
e4:8d:2f:bb:a5:66:fd:d4:ad:8d:89:3b:72:ef:a4:c0:54:b6:
8e:eb:df:7d:d4:db:e0:bb:2c:0c:85:58:8c:a2:7c:e3:4b:ed:
7c:30:42:07:e8:16:8b:df:b5:c6:0a:f6:d2:6e:53:89:da:1c:
e2:d3:5b:c8:b9:fa:40:7c:ed:0f:8d:1c:85:bc:55:18:ae:8e:
6d:0b:ec:c0:85:7c:42:e3:ef:e6:81:6b:8b:15:19:88:ae:68:
77:a6:a9:71:7a:ff:0b:de:d3:e2:a5:bc:da:06:14:75:da:f3:
09:fa:6a:fe:93:6b:47:93:ea:a9:9f:14:cb:da:0f:c1:3b:fc:
c4:35:43:c9:91:4a:55:f5:ed:ea:27:9c:02:77:84:32:18:e4:
de:dd:74:4b:fe:30:61:80:df:5d:8c:0d:04:0a:8f:c7:fe:90:
e2:b3:13:ee:02:f5:2c:7b:a4:30:f0:6a:45:d2:05:0b:93:96:
67:86:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:06 2024 by rpki-client on console-fra.rpki-client.org