Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QTNhZWC-gnhAh10Tea5bAHyPoug.roa
File: QTNhZWC-gnhAh10Tea5bAHyPoug.roa (raw, json)
Hash identifier: bz7EfwfOnGt3/yOgIyG2Q3pZejZbS3PomZTXKf98ZGc=
Subject key identifier: 41:33:61:65:60:BE:82:78:40:87:5D:13:79:AE:5B:00:7C:8F:A2:E8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD2CE845EADBC1FE55F77582B19DAD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QTNhZWC-gnhAh10Tea5bAHyPoug.roa
Signing time: Tue 02 Jan 2024 10:34:27 +0000
ROA not before: Tue 02 Jan 2024 10:34:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210925
IP address blocks: 2a0e:b107:1182::/48 maxlen: 48
2a0e:b107:1183::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Feb 2024 11:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:2c:e8:45:ea:db:c1:fe:55:f7:75:82:b1:9d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4133616560be827840875d1379ae5b007c8fa2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:81:d7:ae:6c:5e:2f:55:f7:5d:18:c1:51:
15:c5:3d:b1:38:3f:a2:53:13:f8:1b:6d:a8:22:47:
ee:40:53:56:5b:59:30:8a:62:cf:6a:50:01:c0:bc:
c1:e0:d9:68:c6:b9:c1:a6:20:4c:be:64:7f:d6:19:
0a:db:b9:21:e0:8c:a5:0e:a5:64:93:ed:10:24:26:
e4:ee:60:05:8f:85:37:6a:b4:8c:e8:11:a3:78:97:
42:6b:df:ff:a6:d4:cf:f9:4e:6c:44:a3:f5:ac:99:
9f:7b:c9:1f:78:77:5d:0a:4b:9f:2f:4b:7b:61:5f:
8e:d0:49:64:8f:64:f5:7c:ad:66:81:a3:6c:a0:be:
b9:b4:f3:8d:c9:e3:b2:ca:1c:2e:6a:36:96:3d:61:
5f:5a:90:3f:a7:24:25:d0:b2:13:85:b2:74:82:a9:
b7:e7:83:a0:88:36:b8:56:74:39:82:fb:fc:e0:26:
3a:11:59:be:11:0a:f6:f9:10:13:ef:98:bf:ba:2c:
87:05:b0:0a:e6:c2:73:77:58:01:b6:fd:91:ff:0b:
c0:cf:45:16:86:f6:18:44:76:8b:50:6f:74:98:ce:
a6:2f:e8:cc:c5:66:c4:93:bf:11:ca:23:85:60:31:
7e:5b:bd:69:a1:dc:6b:55:a5:49:88:a4:8b:c1:40:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:33:61:65:60:BE:82:78:40:87:5D:13:79:AE:5B:00:7C:8F:A2:E8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QTNhZWC-gnhAh10Tea5bAHyPoug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1182::/47
Signature Algorithm: sha256WithRSAEncryption
7f:f6:98:29:7b:3b:78:d4:46:a3:ad:39:d6:e6:b8:2c:65:85:
ec:d2:9f:23:cb:50:b3:c8:24:d2:32:4c:66:b4:a6:4f:c5:53:
1e:a9:53:65:5e:4e:bd:5f:20:72:a9:48:0b:22:cf:6e:4b:1a:
62:26:ba:c8:af:42:62:12:df:42:0e:33:ab:eb:25:4f:47:08:
c9:43:14:b0:46:e8:bc:f1:28:3c:7a:45:a1:a9:50:b7:ee:19:
08:3e:66:a3:c9:ef:bd:76:15:9a:00:9e:3f:52:aa:c4:61:47:
de:84:3f:fc:4e:7e:8d:57:b2:d0:67:f5:46:1e:00:aa:c7:9a:
81:0e:24:d5:bf:12:57:03:7c:17:10:5f:91:a2:12:29:ed:27:
03:a9:5e:88:7d:e4:5d:9b:0d:65:0a:15:79:e8:b0:4c:f7:7e:
d9:56:92:ff:68:c8:d1:6d:d5:e1:24:c8:8e:96:f1:46:b0:70:
7a:6e:34:ba:73:a9:4d:94:15:2d:40:98:3b:ba:19:97:26:27:
22:f6:2d:10:2e:10:a9:d5:7f:77:65:b6:d2:fd:bd:d6:5a:bc:
56:ba:38:30:88:b1:1b:ea:62:44:38:d5:b1:b1:f8:19:a1:eb:
34:35:be:16:37:47:13:28:a1:75:5b:2b:b9:6e:58:46:bd:ea:
d3:6d:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 16:25:34 2024 by rpki-client on console-fra.rpki-client.org