Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/qV26o5jf7Zdqx2NPUxQYdarYo_4.roa
File: qV26o5jf7Zdqx2NPUxQYdarYo_4.roa (raw, json)
Hash identifier: Gs1DQ/tougIiuQj6HLbiD8HrEDMNOCL2u1112zrE+C0=
Subject key identifier: A9:5D:BA:A3:98:DF:ED:97:6A:C7:63:4F:53:14:18:75:AA:D8:A3:FE
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 019170ECF4381A5A52EB82C49250C18E723D
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/qV26o5jf7Zdqx2NPUxQYdarYo_4.roa
Signing time: Tue 20 Aug 2024 17:54:22 +0000
ROA not before: Tue 20 Aug 2024 17:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200299
IP address blocks: 2a04:ff00:b00b::/48 maxlen: 48
2a04:ff07:fefe::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:ec:f4:38:1a:5a:52:eb:82:c4:92:50:c1:8e:72:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Aug 20 17:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a95dbaa398dfed976ac7634f53141875aad8a3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6a:14:f9:30:ef:17:4a:06:b7:8f:4e:3a:5c:
8e:b0:c6:a5:96:44:57:c1:cf:37:74:06:81:f4:93:
c3:76:8a:5a:a7:23:99:67:bc:11:03:e5:ab:bf:19:
29:68:5c:49:85:f1:7f:5e:d3:0d:e1:93:32:35:70:
33:a5:73:0c:7b:a0:56:d9:90:6e:b0:75:25:45:e1:
b6:45:7c:78:7e:83:6b:88:6c:60:62:5c:fe:98:ad:
55:1f:51:3c:49:f8:ea:1b:b1:40:7f:df:60:44:c7:
82:98:98:b1:8e:f2:a7:95:5b:67:cb:a3:d9:bf:87:
6c:17:fa:17:44:2d:a0:5b:a1:11:da:11:80:f6:63:
e3:6d:92:c2:cc:48:4a:ce:07:c5:40:7c:fa:d5:ff:
3f:5c:76:36:a6:31:7d:58:1b:9c:88:9c:94:6a:b8:
c2:da:fc:88:f4:6e:7c:be:0b:27:e1:db:24:bc:7b:
43:1e:52:47:e4:08:e8:b0:e6:72:5c:47:f2:6b:be:
95:6e:71:bd:91:56:91:21:ad:5e:28:23:42:99:0a:
40:82:6a:21:c5:99:eb:48:34:75:10:59:6b:2c:73:
8b:99:b0:dd:73:30:70:77:d7:78:06:10:99:2d:d5:
a1:ac:5e:b0:73:ab:94:95:5e:ac:8e:bd:d7:a0:b5:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5D:BA:A3:98:DF:ED:97:6A:C7:63:4F:53:14:18:75:AA:D8:A3:FE
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/qV26o5jf7Zdqx2NPUxQYdarYo_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:b00b::/48
2a04:ff07:fefe::/48
Signature Algorithm: sha256WithRSAEncryption
7f:15:c9:88:43:7e:8a:f9:1a:72:0a:ad:51:65:c2:a9:72:7a:
9b:3d:2d:4f:c7:cb:72:a8:38:5d:0e:a6:03:1b:1c:79:35:61:
08:e0:15:46:e3:6f:e6:81:c2:22:45:61:9f:2c:a8:ed:ec:1e:
ea:ff:82:10:37:97:f0:41:9b:5e:8a:31:c1:b6:28:d1:e7:43:
ec:9a:ec:35:cc:7e:dc:3c:44:e5:67:34:a6:dd:38:0d:be:45:
bb:41:de:bd:db:8f:68:78:44:20:5c:72:de:34:e2:c6:a0:c8:
2e:eb:5f:dd:7f:1a:73:6d:95:bb:72:ad:47:0a:98:ef:c1:e5:
bf:ad:7c:56:9a:fe:37:63:cb:c5:0e:23:0b:24:9d:16:14:7d:
69:20:20:5e:29:3e:00:15:e5:4c:8d:57:a0:f5:06:de:e4:5b:
b5:08:23:8a:dd:1f:11:d6:ec:37:50:e3:7e:24:c9:01:4e:a1:
99:39:22:32:14:0e:d4:47:d3:46:06:1c:69:06:c4:4a:d3:4b:
79:20:16:57:70:19:b9:78:3b:26:5b:e7:37:b2:db:a1:cb:13:
13:8f:2f:5f:ec:f4:4a:00:7a:d9:42:38:f8:2e:e9:81:38:f2:
ec:da:b5:75:54:5e:8c:e2:ea:21:0b:b3:64:10:94:2c:90:af:
33:18:99:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:41 2025 by rpki-client