Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/dQMFDu-nV1IoBw31bELbu6Mmp3U.roa
File: dQMFDu-nV1IoBw31bELbu6Mmp3U.roa (raw, json)
Hash identifier: cl5QFaNMbSLSbkRHiCPzD+JOPubVZ6M9gS+XuiIgqxU=
Subject key identifier: 75:03:05:0E:EF:A7:57:52:28:07:0D:F5:6C:42:DB:BB:A3:26:A7:75
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 0193021AA76BC86335E95307A3B7AE21668B
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/dQMFDu-nV1IoBw31bELbu6Mmp3U.roa
Signing time: Wed 06 Nov 2024 15:32:01 +0000
ROA not before: Wed 06 Nov 2024 15:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 2001:3500::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 22 Nov 2024 00:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:1a:a7:6b:c8:63:35:e9:53:07:a3:b7:ae:21:66:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Nov 6 15:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7503050eefa7575228070df56c42dbbba326a775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:b4:fa:23:ca:6e:71:09:1a:34:a5:70:bd:
29:15:52:6e:0e:74:88:77:b7:f0:ce:85:70:3f:6c:
7f:54:e8:2d:e0:8d:c8:86:16:ee:ae:61:fc:e0:84:
07:ab:51:e7:ea:d0:a4:10:97:38:a5:a1:af:bc:6a:
2e:ff:3d:4c:95:e4:5c:f0:65:f8:5b:71:84:13:61:
6a:56:87:f0:58:8b:ff:40:26:4c:2d:30:74:f0:fe:
dd:95:4c:32:4a:54:4e:0c:a8:98:0a:99:c3:64:27:
48:11:7e:aa:eb:dc:16:dd:5b:4d:99:2d:2d:db:3b:
62:90:dd:cf:d3:0b:6e:5c:02:23:dd:3e:b0:e5:0a:
77:85:0e:a4:63:d7:9a:34:1a:d4:c2:30:a5:20:ef:
c3:d7:a8:24:45:d3:cc:99:2f:d3:03:03:6c:93:a7:
fb:d1:af:bb:ff:65:a0:91:b0:aa:29:47:f2:4b:1a:
88:d9:ef:bd:a9:c8:09:71:f6:73:0b:62:f4:02:5c:
97:91:f0:14:c6:8b:21:b9:25:8b:57:f8:e9:eb:ba:
7e:b1:f0:b7:1f:c1:b9:9a:c1:cb:aa:bd:5b:fa:dc:
8d:fe:30:e2:6e:38:ad:73:fe:c9:1f:d1:a4:cb:9e:
7e:c0:37:10:5b:62:fa:cf:5e:66:27:3c:3b:a2:dd:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:03:05:0E:EF:A7:57:52:28:07:0D:F5:6C:42:DB:BB:A3:26:A7:75
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/dQMFDu-nV1IoBw31bELbu6Mmp3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3500::/29
Signature Algorithm: sha256WithRSAEncryption
10:1f:0a:2c:fc:5f:37:26:4a:9a:19:f4:05:30:c8:6e:ac:99:
04:35:15:2f:e5:22:0e:8f:06:2e:50:e6:89:5f:38:fb:36:7f:
ee:cc:c5:9a:f2:1e:3b:4f:ba:44:04:93:ae:80:db:82:f6:ff:
83:f6:8d:59:c2:65:cb:3d:dd:19:ea:2c:47:fc:c2:f1:fb:13:
c7:e7:61:77:92:64:72:ba:29:c1:96:d7:8e:94:27:dc:f3:31:
af:08:6c:55:37:a7:71:62:8c:e5:49:2b:5a:ee:94:b0:b7:8c:
f1:8b:11:8d:c6:de:02:40:55:53:2b:f6:a2:e7:ea:6d:c2:32:
a7:72:12:15:ef:39:9d:3e:48:39:7c:d4:0f:4c:c4:1a:05:a7:
81:31:b2:67:c7:a1:b3:80:a0:fd:90:28:91:a0:08:d1:98:0b:
12:b8:69:da:56:86:b7:69:5b:1a:bd:ec:f0:a4:42:80:42:66:
44:5e:fd:25:95:35:31:18:c5:92:2d:02:06:77:da:24:31:6b:
82:e6:98:b1:9a:3a:f5:72:df:4a:f5:63:fd:60:8c:ea:bd:af:
7a:e4:df:e7:e4:a9:65:85:bc:15:20:ef:ca:04:90:40:5d:3a:
21:aa:62:8d:4d:40:dd:a1:97:a9:2a:9b:bb:6c:93:ef:9b:75:
3b:6a:8b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:47:25 2024 by rpki-client on console-fra.rpki-client.org