Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Qqcndtv4lKqvYM16tTDWpsIG5ik.roa
File: Qqcndtv4lKqvYM16tTDWpsIG5ik.roa (raw, json)
Hash identifier: LxeR+YFcdMm7mc9j+/pV9v1BGrmSMrcspITL09c/FDU=
Subject key identifier: 42:A7:27:76:DB:F8:94:AA:AF:60:CD:7A:B5:30:D6:A6:C2:06:E6:29
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D56278AB15F064A108294A5E15C8BB
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Qqcndtv4lKqvYM16tTDWpsIG5ik.roa
Signing time: Mon 02 Jan 2023 04:55:10 +0000
ROA not before: Mon 02 Jan 2023 04:55:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 2a0f:3101::/32 maxlen: 32
2a0d:3c46::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 17 Jul 2023 15:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:62:78:ab:15:f0:64:a1:08:29:4a:5e:15:c8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42a72776dbf894aaaf60cd7ab530d6a6c206e629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:84:7c:3d:f8:db:4a:48:39:4c:4e:4e:79:
1c:25:d1:8a:27:bc:60:cc:aa:5c:0e:56:55:28:15:
b4:69:3f:7c:cf:93:a8:49:30:32:0b:92:b9:4c:c2:
0c:81:42:7c:d5:90:d9:31:35:bf:4c:9b:eb:48:e1:
8e:b3:4d:da:55:15:8c:d7:98:65:5b:f5:9b:7e:93:
ec:61:a5:3a:ce:c6:e7:77:61:1f:d7:da:97:ec:21:
1a:80:3e:e9:55:ed:09:bb:60:9d:50:4a:23:3b:68:
e8:60:8b:80:a7:9c:0d:dd:c7:c9:b4:5e:ed:07:7b:
b0:56:41:65:1d:4f:ce:8a:6d:f5:ef:f5:fd:cc:fc:
b3:d2:28:af:84:52:b7:51:05:f4:84:86:ef:24:35:
7e:e1:09:86:b4:48:8f:96:84:be:c5:12:e9:db:84:
88:ae:6a:53:c2:65:df:e6:0d:02:e9:cf:ec:e6:a8:
76:4d:bc:37:03:0f:69:b5:15:f8:4f:19:0b:83:91:
6b:df:ca:83:88:96:b7:bb:bb:06:6b:c6:a3:d9:27:
a7:7c:66:f4:c6:87:0b:8a:4c:30:9a:54:f3:a1:5b:
6f:69:8d:dd:10:bc:cc:e2:f7:05:17:22:1d:72:ff:
66:4f:be:2b:55:bc:fb:60:8f:28:61:33:d7:f7:7b:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A7:27:76:DB:F8:94:AA:AF:60:CD:7A:B5:30:D6:A6:C2:06:E6:29
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Qqcndtv4lKqvYM16tTDWpsIG5ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:3c46::/32
2a0f:3101::/32
Signature Algorithm: sha256WithRSAEncryption
9d:47:c3:81:48:77:9a:b5:f4:c6:f2:c3:91:c2:ae:31:3c:e8:
f8:2d:7c:13:65:4f:76:2d:fd:89:5e:0e:dc:73:ef:e9:97:29:
ec:d0:97:5f:87:eb:18:23:44:f7:85:60:db:be:3e:15:2e:56:
a7:c5:dc:d5:46:3f:3a:f7:db:29:35:e8:90:78:82:02:c5:6d:
aa:48:78:c7:93:25:8e:4c:16:49:be:43:b4:c3:42:2f:d0:b0:
6e:bd:36:cc:43:ed:5c:f0:e1:5b:d1:40:f5:f4:14:dd:f2:4e:
51:6b:0b:49:f6:1f:f4:57:47:f3:72:95:5e:0e:e8:ae:b0:a0:
fc:b4:b0:51:64:90:48:da:e3:dc:80:62:d5:c8:3a:d3:28:ef:
c0:ad:21:b1:2e:79:1f:26:b3:85:3a:0d:c1:fe:5b:c6:41:7e:
b6:5a:43:0a:74:4b:53:dd:51:d2:ce:f2:48:fe:59:94:bc:a5:
bc:7a:89:e9:70:0a:7d:a5:01:b1:e7:0f:eb:b3:fc:68:1e:b0:
e9:ba:b7:c9:89:af:d1:fa:4a:47:2e:f7:03:73:30:b1:5c:9a:
6b:3d:51:74:f9:7a:32:fc:2e:78:b0:e4:d4:77:1c:ba:cf:57:
af:91:b0:c1:a9:c8:86:fe:a9:fa:ee:0e:b8:01:fa:7f:6d:f0:
93:4a:19:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org