Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QQXpk6qtojZ6yjarqGEMtZT_0yg.roa
File: QQXpk6qtojZ6yjarqGEMtZT_0yg.roa (raw, json)
Hash identifier: ZRWnVamkza/Y1UOucTR3LvbzfjpnfQa88adZ0FGAwBA=
Subject key identifier: 41:05:E9:93:AA:AD:A2:36:7A:CA:36:AB:A8:61:0C:B5:94:FF:D3:28
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCD4CFDBFC2790A499867D88715713
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QQXpk6qtojZ6yjarqGEMtZT_0yg.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57429
IP address blocks: 2a0e:b107:1340::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Mar 2024 06:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d4:cf:db:fc:27:90:a4:99:86:7d:88:71:57:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4105e993aaada2367aca36aba8610cb594ffd328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3b:26:20:05:03:6f:34:11:aa:b1:9f:dd:bc:
2c:9e:2d:d4:0d:c5:5f:cf:5c:5b:8e:06:d8:b4:a7:
0b:72:33:f2:ad:99:bf:24:48:30:29:3d:f7:b4:0f:
e3:8d:c9:84:15:12:65:a0:09:0b:b6:1e:d1:01:e3:
de:a2:a7:14:25:db:9a:2f:dc:13:64:3c:d8:51:33:
7a:07:b1:27:03:35:dd:7c:c9:e0:02:21:d6:e2:a3:
be:e0:45:04:c4:82:bb:cc:48:23:d0:97:13:33:05:
e8:38:cc:64:39:5e:98:e0:a2:fb:98:31:46:97:cd:
90:98:36:39:7b:20:63:78:4c:62:38:33:44:ef:9a:
64:ed:11:32:8e:7f:fc:d0:23:1c:f0:96:16:42:b5:
f4:83:ea:d2:66:d0:d5:50:d9:a0:42:4e:4a:cc:e5:
aa:7f:ff:3d:85:21:c2:91:fd:13:93:7d:62:e8:9e:
d3:39:bf:e3:c1:f6:72:a9:16:d0:9c:c1:de:a8:f4:
e5:07:62:a0:93:e6:a8:8a:96:b7:db:5b:f7:74:7e:
92:3c:5a:12:e2:8d:c9:fd:cd:28:8f:22:ea:7a:f6:
44:ee:c0:7d:b9:72:b9:d9:2d:f5:ca:6d:d7:0a:f2:
a0:79:02:82:06:3b:54:2e:96:9a:43:60:cd:c1:58:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:E9:93:AA:AD:A2:36:7A:CA:36:AB:A8:61:0C:B5:94:FF:D3:28
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QQXpk6qtojZ6yjarqGEMtZT_0yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1340::/44
Signature Algorithm: sha256WithRSAEncryption
c0:fb:ab:64:f8:4f:72:ed:9b:16:c5:0b:74:b8:e6:42:21:24:
33:99:cf:67:4d:22:90:c8:4f:9a:7b:9d:ed:1c:b8:64:f2:62:
03:54:ad:1e:4d:59:90:11:15:f4:2b:ad:3a:c3:f4:39:46:26:
77:73:76:ba:71:a3:00:f8:09:01:6e:0e:35:4c:b7:7e:75:ea:
6d:0e:da:bb:5e:00:b1:33:b7:4a:e3:73:a2:58:96:cf:38:0c:
fd:0a:da:08:c7:f8:ed:35:5b:58:23:e2:aa:46:30:a8:03:77:
e1:62:66:d0:3a:20:57:de:91:0b:39:84:d8:f0:a3:8b:75:f3:
b9:2c:3c:65:de:fd:42:64:5d:20:a9:f4:1b:8d:48:98:c5:f4:
ed:54:5d:75:ec:c2:0c:fb:aa:54:a8:9c:33:1d:47:a6:80:ff:
86:f3:22:02:b3:e2:d3:3e:87:7d:a3:a2:c9:0b:68:15:d2:a3:
9d:e7:25:6a:ee:2e:55:49:ab:d3:6d:42:46:5a:3a:7a:48:14:
6b:75:ca:38:46:19:88:c1:ca:70:3c:80:32:a9:3f:79:76:43:
58:e5:23:6a:a9:32:f6:8f:37:c9:19:51:cc:43:1f:72:df:37:
6c:8a:b5:47:2a:f1:76:04:dd:81:43:71:1e:6f:a7:e4:7b:d4:
16:60:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 07:37:33 2024 by rpki-client on console-ams.rpki-client.org