Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/QWndnBEwIUS-cekmxVWdymBx3V0.roa
File: QWndnBEwIUS-cekmxVWdymBx3V0.roa (raw, json)
Hash identifier: lsoKnxxpid4EldjuOhqixSrtIb1aMop6CQ62JvbEL5c=
Subject key identifier: 41:69:DD:9C:11:30:21:44:BE:71:E9:26:C5:55:9D:CA:60:71:DD:5D
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 018B05AE3293752F7CDCC8CEE1633CD9F32A
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/QWndnBEwIUS-cekmxVWdymBx3V0.roa
Signing time: Fri 06 Oct 2023 15:49:44 +0000
ROA not before: Fri 06 Oct 2023 15:49:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 2a07:db80::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 17 Nov 2023 15:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:ae:32:93:75:2f:7c:dc:c8:ce:e1:63:3c:d9:f3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Oct 6 15:49:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4169dd9c11302144be71e926c5559dca6071dd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:60:85:47:af:17:93:9e:cd:1b:c4:67:d3:
dc:ea:0a:9c:fb:e7:c9:a4:d2:29:ef:bd:c4:97:a7:
24:16:00:f2:cb:a1:7f:08:ac:8f:18:12:4a:d2:eb:
fd:86:a5:62:a0:fc:c6:0a:d3:64:dd:1f:89:0c:91:
2e:92:60:4b:cb:93:61:b0:0f:86:ad:2e:01:f9:35:
10:f9:2c:a9:90:be:b2:47:d7:d3:6f:a1:30:34:f4:
d7:63:60:5c:c8:99:3d:c9:68:f2:28:4b:95:41:d1:
d9:69:58:7d:02:78:ec:4b:bd:b4:c5:22:da:d4:7a:
ae:82:ee:fb:92:a2:10:26:2b:d1:ae:7a:e7:ec:28:
8d:dc:9f:bc:88:6b:0e:48:75:7e:bd:c9:e1:31:17:
32:be:c2:0d:3a:fc:22:41:bb:d7:61:e5:db:40:3d:
26:cc:1d:e3:be:4a:fc:c6:21:69:0f:f7:7c:70:d6:
8c:d7:2f:8f:db:5b:a2:60:76:06:16:ec:cf:ca:39:
3f:20:8b:db:59:9d:e4:a1:c4:c1:24:5d:2a:20:13:
e5:cb:c9:43:7b:cd:bf:1c:3d:a2:27:47:25:a3:96:
81:34:d5:ac:79:b0:b0:9d:01:95:01:f4:27:aa:0a:
86:b9:75:36:e8:5a:48:8c:ea:9d:1c:4d:63:0a:4b:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:DD:9C:11:30:21:44:BE:71:E9:26:C5:55:9D:CA:60:71:DD:5D
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/QWndnBEwIUS-cekmxVWdymBx3V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:db80::/32
Signature Algorithm: sha256WithRSAEncryption
59:59:23:2d:24:ef:58:d8:00:01:f1:4f:61:56:89:ae:c9:08:
72:d6:89:2c:fd:41:d2:5f:c3:1e:f3:55:25:0b:62:78:e2:53:
4a:25:7e:eb:7c:9c:24:08:14:5e:b4:6e:d8:b3:68:28:3b:b8:
14:48:63:f6:c8:34:f3:4f:c8:fa:db:df:e4:cb:4a:3a:77:8c:
cc:17:02:68:2c:99:f2:82:11:c1:2d:8d:d5:e0:43:da:23:de:
ea:6c:11:11:70:e6:f2:d4:74:33:eb:3c:bb:23:30:5f:f5:c9:
fb:02:ed:b8:3f:ec:00:fe:0a:83:b6:45:84:3c:3f:46:8a:0c:
9b:3b:04:53:18:58:3e:33:93:7a:02:4a:04:50:57:02:af:37:
c2:1b:8d:dd:ad:1e:af:9f:97:73:18:69:38:b8:75:ff:93:94:
61:2a:d4:31:66:d9:77:c1:21:b0:f2:01:1a:af:f6:60:02:72:
f6:45:90:60:a3:6a:20:8f:84:c4:4a:0b:8c:79:68:cf:42:e4:
01:aa:e4:3e:65:5a:d6:70:50:1d:1e:52:ce:26:22:14:96:78:
5f:f6:83:18:9b:f3:15:11:f7:3d:d4:b4:27:90:d1:9d:5f:ae:
38:0b:54:2f:28:df:bf:3f:a8:ad:f3:9d:4a:35:20:42:78:a4:
ed:58:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:11 2024 by rpki-client on console-ams.rpki-client.org