Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QJDenLXhrLymEM6m-hJ_77I5-cs.roa
File: QJDenLXhrLymEM6m-hJ_77I5-cs.roa (raw, json)
Hash identifier: lRMmqOSLFUz9M8Un6hFxFcDlz9bIoRkNiH4nhFRh8WA=
Subject key identifier: 40:90:DE:9C:B5:E1:AC:BC:A6:10:CE:A6:FA:12:7F:EF:B2:39:F9:CB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01874AD6F86D0BF531E1369268262DAE4AB2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QJDenLXhrLymEM6m-hJ_77I5-cs.roa
Signing time: Tue 04 Apr 2023 05:56:54 +0000
ROA not before: Tue 04 Apr 2023 05:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199693
IP address blocks: 2a0e:b107:2000::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Sep 2023 12:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:d6:f8:6d:0b:f5:31:e1:36:92:68:26:2d:ae:4a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 4 05:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4090de9cb5e1acbca610cea6fa127fefb239f9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:c9:5e:44:7f:72:56:3f:4d:7c:bb:17:2f:
8a:41:50:ec:e4:60:9f:41:17:34:7f:9d:83:6a:51:
d9:d2:9c:0f:8e:ec:4d:1f:17:34:d9:37:a2:a0:c8:
9c:6e:8e:18:4d:b8:71:ab:1c:d8:f4:22:17:e6:70:
f0:7d:7b:79:b7:a7:b2:a3:c9:d9:0f:a7:59:3d:62:
5d:b2:35:03:a8:76:ef:f9:76:11:5d:5a:22:ec:e5:
3f:61:fc:cb:80:4d:72:45:b0:51:40:41:d6:18:43:
03:07:a7:8b:6b:80:2f:78:4d:48:70:16:ef:7e:6f:
e8:a3:f1:1d:94:ba:c6:ab:52:5c:4e:27:68:26:26:
61:7a:fa:19:f9:1f:6c:2b:a6:ee:21:5a:01:47:0e:
da:55:6b:88:e9:7a:4c:4e:e6:c8:5f:47:4b:77:10:
8d:8c:24:7f:73:e8:72:13:50:0c:ee:0a:ca:77:15:
4d:d1:ec:8c:30:af:85:b2:38:0f:ad:9b:ee:a0:0d:
df:b1:ec:e8:4c:b4:06:9f:5f:f5:99:61:c3:29:c9:
1a:17:64:e8:24:f1:cd:03:01:11:a9:69:7e:1d:5e:
1b:bd:d9:9f:6e:04:4c:95:e0:ed:17:bb:02:00:66:
19:42:60:22:c1:4e:6e:56:91:bc:67:c0:cf:db:08:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:90:DE:9C:B5:E1:AC:BC:A6:10:CE:A6:FA:12:7F:EF:B2:39:F9:CB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QJDenLXhrLymEM6m-hJ_77I5-cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2000::/44
Signature Algorithm: sha256WithRSAEncryption
7e:60:79:36:ec:30:38:d8:cf:3c:b5:3f:b1:e6:4d:1c:ed:d4:
c7:37:50:98:8f:a0:c8:3c:e0:34:ec:f2:54:58:0a:bc:09:0f:
a9:24:7f:9e:d7:4d:f8:99:b0:31:de:fe:7d:22:be:69:1b:2f:
33:27:be:da:d6:54:df:20:6d:23:21:10:d9:b6:16:80:8d:9e:
0c:d7:0c:2f:05:75:17:c1:1c:c5:5d:6a:42:b4:b9:cf:e7:e9:
e9:3c:fd:6d:32:a8:cb:3e:06:7f:06:07:e3:69:88:cf:d1:a8:
76:78:f4:62:3e:ab:b9:bb:58:3a:0a:d0:ca:8d:6a:f4:6c:40:
d8:4a:03:72:a4:d4:00:40:15:ba:1c:a6:7b:cd:00:fe:c3:d0:
26:ce:9e:2f:f8:f8:b7:a3:4e:f3:a9:ee:98:f5:4f:ba:86:72:
96:3a:0c:d9:29:68:85:6e:81:ad:de:51:b5:be:bc:b3:48:99:
76:7d:87:37:cd:3f:6f:ad:f2:da:47:b1:f3:dc:41:a4:d1:6b:
72:d7:bc:24:c3:2b:58:31:e0:95:88:c5:7e:7e:6c:d8:6e:c8:
c9:87:fe:d4:ff:f0:53:79:2d:ef:d7:e7:98:d8:d8:f0:07:ac:
da:ec:93:46:3f:1c:15:3c:a0:98:3e:71:50:ff:88:9c:ec:ae:
c4:cd:ec:17
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYdK1vhtC/Ux4TaSaCYtrkqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNDA0MDU1NjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDkwZGU5Y2I1ZTFhY2JjYTYxMGNlYTZmYTEyN2ZlZmIyMzlmOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqTJXkR/clY/TXy7Fy+KQVDs5GCf
QRc0f52DalHZ0pwPjuxNHxc02TeioMicbo4YTbhxqxzY9CIX5nDwfXt5t6eyo8nZ
D6dZPWJdsjUDqHbv+XYRXVoi7OU/YfzLgE1yRbBRQEHWGEMDB6eLa4AveE1IcBbv
fm/oo/EdlLrGq1JcTidoJiZhevoZ+R9sK6buIVoBRw7aVWuI6XpMTubIX0dLdxCN
jCR/c+hyE1AM7grKdxVN0eyMMK+FsjgPrZvuoA3fsezoTLQGn1/1mWHDKckaF2To
JPHNAwERqWl+HV4bvdmfbgRMleDtF7sCAGYZQmAiwU5uVpG8Z8DP2wh+cQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFECQ3py14ay8phDOpvoSf++yOfnLMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUUpEZW5MWGhyTHltRU02bS1oSl83N0k1LWNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xByAA
MA0GCSqGSIb3DQEBCwUAA4IBAQB+YHk27DA42M88tT+x5k0c7dTHN1CYj6DIPOA0
7PJUWAq8CQ+pJH+e1034mbAx3v59Ir5pGy8zJ77a1lTfIG0jIRDZthaAjZ4M1wwv
BXUXwRzFXWpCtLnP5+npPP1tMqjLPgZ/BgfjaYjP0ah2ePRiPqu5u1g6CtDKjWr0
bEDYSgNypNQAQBW6HKZ7zQD+w9Amzp4v+Pi3o07zqe6Y9U+6hnKWOgzZKWiFboGt
3lG1vryzSJl2fYc3zT9vrfLaR7Hz3EGk0Wty17wkwytYMeCViMV+fmzYbsjJh/7U
//BTeS3v1+eY2NjwB6za7JNGPxwVPKCYPnFQ/4ic7K7EzewX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:02 2024 by rpki-client on console-ams.rpki-client.org