Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/qb713yq6jn4hQRBWapWMb-mK9eM.roa
File: qb713yq6jn4hQRBWapWMb-mK9eM.roa (raw, json)
Hash identifier: 6gWigUCI0B+9YewyiNemGXGVnfqvwUbEDRPUJkr+wxI=
Subject key identifier: A9:BE:F5:DF:2A:BA:8E:7E:21:41:10:56:6A:95:8C:6F:E9:8A:F5:E3
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 01857230FE742FB4AD279870E989845C4265
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/qb713yq6jn4hQRBWapWMb-mK9eM.roa
Signing time: Mon 02 Jan 2023 11:14:51 +0000
ROA not before: Mon 02 Jan 2023 11:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62177
IP address blocks: 2a0c:9480::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:fe:74:2f:b4:ad:27:98:70:e9:89:84:5c:42:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jan 2 11:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9bef5df2aba8e7e214110566a958c6fe98af5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:b5:bf:f4:9b:b4:68:18:ed:4e:87:50:f2:
0f:23:60:a3:a9:f8:f2:06:d8:be:a3:10:11:f3:9d:
fa:ad:3c:72:2f:03:a4:8e:36:54:71:44:51:93:ea:
89:cb:8a:99:82:03:14:71:81:3d:14:99:5a:9a:1e:
a9:4b:1b:ff:08:81:f8:d7:e9:f1:87:8f:a8:4d:2a:
be:b3:83:5a:99:4e:3a:f8:84:80:2a:be:e7:30:43:
1b:e0:27:45:04:8b:69:45:c4:26:02:49:2f:3e:29:
e4:1c:c4:8f:ea:0a:75:5b:e3:41:5e:e2:7f:9c:ff:
b9:f1:c2:fb:fc:a2:06:49:67:4b:f8:43:fc:d3:85:
63:43:40:14:77:a1:57:0f:f7:83:76:1c:03:57:e3:
42:c1:2f:56:aa:53:22:72:3b:e3:2b:de:1a:e4:d4:
34:35:73:5d:8d:db:f2:35:ab:00:ee:93:1c:cd:f4:
f2:a7:56:21:f3:f3:ae:1d:da:30:12:44:8b:bc:0d:
e7:23:1c:1b:f6:77:89:13:9c:38:4b:c7:43:4e:8b:
0b:f9:60:31:6f:ad:fd:29:72:eb:99:da:0b:e7:f1:
65:80:e3:e6:f7:97:ad:24:67:29:76:c9:21:fb:24:
2f:a3:fe:22:30:34:eb:4e:27:cd:69:20:d4:69:47:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BE:F5:DF:2A:BA:8E:7E:21:41:10:56:6A:95:8C:6F:E9:8A:F5:E3
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/qb713yq6jn4hQRBWapWMb-mK9eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9480::/29
Signature Algorithm: sha256WithRSAEncryption
46:76:1f:dd:ec:62:e5:c0:e1:7d:e8:77:78:87:98:0c:74:6a:
6a:36:83:7e:45:cc:6d:3d:52:ca:16:9f:52:c7:90:c3:3f:36:
22:b9:ac:dd:06:42:bd:95:04:55:3d:28:f4:0d:ed:28:b5:bf:
e5:78:e1:4b:af:68:bd:1d:ec:93:5c:ea:6f:43:cd:ef:85:86:
62:b6:17:16:09:08:60:57:44:8c:66:68:1e:bd:eb:9d:4c:47:
00:66:21:e1:d6:0b:c1:9c:62:cc:7b:c6:f3:34:30:e4:3e:1a:
a8:5d:ed:4e:ec:e5:dc:78:f2:31:d6:66:69:6b:ab:42:52:62:
d4:df:ae:cb:6d:2c:b2:70:2e:bc:01:02:16:b2:97:a8:ce:56:
a7:2a:be:d8:0b:99:7e:6d:ff:50:8d:f1:37:c4:82:01:54:c5:
c6:e8:e2:56:cb:5c:b8:b5:12:7e:3f:76:10:25:ef:ca:a3:f9:
4b:4b:63:7b:ef:84:63:6b:3c:d3:f9:ae:72:0d:05:63:c2:88:
0c:d1:63:26:05:1f:f3:6d:77:61:0e:f5:a6:dd:f0:d4:d6:ff:
07:b3:ab:1a:97:de:0c:16:3e:95:73:66:48:da:6b:fb:21:b5:
53:83:97:a6:f6:a8:5a:6c:63:38:c6:a5:a9:53:3e:63:c0:79:
8e:9f:57:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:55 2024 by rpki-client on console-ams.rpki-client.org