Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/q8DRkztc1dPGu-XJUU20EshAugg.roa
File: q8DRkztc1dPGu-XJUU20EshAugg.roa (raw, json)
Hash identifier: Agm++Yk62HaxxiPRapHXDmJCnLUDBdqvAAel2FjoDiU=
Subject key identifier: AB:C0:D1:93:3B:5C:D5:D3:C6:BB:E5:C9:51:4D:B4:12:C8:40:BA:08
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 018AACFFF4EAC180D9B7BA708360FD275D98
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/q8DRkztc1dPGu-XJUU20EshAugg.roa
Signing time: Tue 19 Sep 2023 10:32:50 +0000
ROA not before: Tue 19 Sep 2023 10:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204946
IP address blocks: 2001:678:b0c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:ff:f4:ea:c1:80:d9:b7:ba:70:83:60:fd:27:5d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: Sep 19 10:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abc0d1933b5cd5d3c6bbe5c9514db412c840ba08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:8e:68:f1:07:1a:89:fa:cc:ea:19:5d:aa:
05:22:3c:97:95:82:8b:1f:73:ce:96:20:05:a4:22:
9a:bc:a6:25:06:1b:4f:db:0a:bd:38:c1:3b:64:2e:
e9:d1:6a:b7:07:55:c1:94:67:3b:1a:b4:0a:f6:17:
0d:1e:e4:e9:cb:3b:09:c1:c3:5b:70:30:c7:5a:ce:
8b:77:14:5d:78:23:83:aa:41:29:2d:41:e1:36:c5:
90:ff:66:07:11:d3:82:6a:d8:a8:8c:15:73:ed:37:
0a:aa:02:8a:fd:f4:69:9d:f9:d9:dd:25:37:52:55:
e3:0c:64:72:b3:af:77:e1:bd:ec:28:17:2a:e4:bb:
55:b5:32:03:9c:8f:45:21:e9:12:89:47:67:74:45:
38:7e:68:d2:8c:11:5f:12:73:80:20:ea:10:d1:5d:
3e:cd:c4:99:0c:55:f1:90:c7:c7:1e:6e:cb:e3:2b:
1a:0e:a0:cf:ee:2f:f3:ed:5b:3f:4a:d6:13:1d:56:
19:9c:37:45:a3:09:20:9d:86:b0:32:3f:29:e4:37:
5c:20:04:33:c3:62:f9:3b:97:71:1b:6f:74:a2:79:
a7:a0:90:10:fe:82:13:97:42:0a:f6:e4:13:dd:1a:
28:6f:a3:8a:94:01:2a:8c:48:e3:c8:5b:9c:ca:00:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C0:D1:93:3B:5C:D5:D3:C6:BB:E5:C9:51:4D:B4:12:C8:40:BA:08
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/q8DRkztc1dPGu-XJUU20EshAugg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b0c::/48
Signature Algorithm: sha256WithRSAEncryption
84:11:64:7d:37:b0:24:17:01:f3:08:01:c0:ac:d8:96:d8:27:
ad:ab:43:12:da:cb:10:c2:0a:ae:df:a4:11:68:25:25:90:3e:
b9:da:df:ef:2b:9c:95:1e:5e:54:3a:c5:a9:96:66:c7:cc:e6:
02:94:00:6a:fe:08:17:93:b7:b8:e1:91:c9:30:01:a7:d7:a0:
7d:c9:8e:28:69:a8:57:64:2a:66:26:d6:fe:7d:12:fc:ce:bd:
80:c0:6e:64:33:5a:8a:9d:e8:b2:c3:2b:da:5e:77:d0:c6:8c:
fa:c6:d6:b3:4a:7d:23:96:77:49:23:27:9d:50:b8:ab:0f:dd:
a1:4b:e9:3e:a7:1e:f3:64:39:04:e5:7c:71:c6:2e:74:7f:cd:
8b:9b:51:10:92:ad:3a:b3:81:81:3a:ad:94:33:6d:8b:5f:2b:
51:48:dd:d9:41:83:be:5f:d7:a0:d9:d4:34:62:68:90:58:4b:
fd:1f:d7:91:49:62:e9:ea:16:cc:9e:34:09:c0:0e:5d:d9:1c:
99:90:fd:88:18:61:67:8d:ca:5f:18:c9:6e:17:09:00:cf:1b:
d9:04:2a:ca:e3:1b:f9:d4:63:35:9a:84:da:94:28:9b:a7:37:
fc:1e:7a:dd:87:f4:30:e8:2c:d2:33:f5:95:c4:14:37:35:5c:
f0:25:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:59 2024 by rpki-client on console-fra.rpki-client.org