Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qJuTa_mKqQKY_AVNQ2ND_fEDJrM.roa
File: qJuTa_mKqQKY_AVNQ2ND_fEDJrM.roa (raw, json)
Hash identifier: xaSCvmVzTgcPOQazVBEg70jbK47fnCqEKDG9udCZfvw=
Subject key identifier: A8:9B:93:6B:F9:8A:A9:02:98:FC:05:4D:43:63:43:FD:F1:03:26:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCD044126EB60C39F9E3AB5662B206
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qJuTa_mKqQKY_AVNQ2ND_fEDJrM.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49768
IP address blocks: 2a10:cc42:1a0::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 23:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d0:44:12:6e:b6:0c:39:f9:e3:ab:56:62:b2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a89b936bf98aa90298fc054d436343fdf10326b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:0d:98:58:4e:1c:3a:ee:7f:11:42:9f:82:
8d:31:5a:df:4c:17:26:7d:9f:42:32:e0:be:a2:2a:
b1:fa:b8:df:98:20:5c:ae:01:f0:a4:5e:ec:62:b0:
60:30:94:fb:a9:0f:f8:6e:08:36:5d:74:3b:e8:61:
69:77:e6:67:51:b4:37:9a:f0:96:81:64:4f:bd:2e:
ca:76:2c:0d:38:39:54:25:fd:70:a5:af:df:3a:60:
ec:d8:43:cc:a4:a4:29:45:8a:cd:8b:90:b7:d5:e8:
17:7f:41:97:0b:76:c2:c4:9d:e7:d0:ab:53:c1:db:
04:48:cd:99:eb:80:2e:ca:af:af:74:56:00:84:0d:
de:af:f6:d7:fe:9a:7e:e8:86:69:3f:b6:ce:47:2d:
2d:a1:f9:25:f4:2f:17:84:ba:73:8c:43:8c:94:05:
b8:5a:09:32:f3:3f:c7:13:bf:99:f6:97:b8:e3:e4:
dd:71:3f:bb:1c:4e:72:c4:d4:75:1e:ca:7d:f7:01:
c7:f2:1e:b8:77:8c:14:31:36:a7:00:4d:b6:a0:50:
9f:77:44:de:08:b0:60:50:08:63:e5:89:1b:6b:81:
44:8a:fa:f9:d2:73:bf:eb:d0:a8:72:05:8e:cd:9e:
8f:c5:31:07:41:1f:b4:df:db:a1:a2:5c:51:78:bb:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9B:93:6B:F9:8A:A9:02:98:FC:05:4D:43:63:43:FD:F1:03:26:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qJuTa_mKqQKY_AVNQ2ND_fEDJrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc42:1a0::/46
Signature Algorithm: sha256WithRSAEncryption
50:0c:31:94:9a:b9:a5:2b:bf:c1:37:ed:b6:f4:38:ab:ee:b4:
ec:7f:dd:7a:a1:21:3c:61:ba:43:ec:cb:2b:d5:d6:00:c5:46:
4b:88:12:ff:85:2c:ff:58:53:c8:7e:6d:c0:36:4d:04:3f:0d:
43:f1:16:e0:34:d4:20:b1:21:76:de:df:11:be:77:18:f7:21:
fc:26:f9:46:3a:af:b8:c2:6d:71:9c:0e:60:66:76:9c:bf:7a:
c1:f9:b1:60:91:8b:1f:18:68:6d:d5:0f:d8:63:72:3d:e7:d6:
7c:91:41:62:3f:3e:84:ee:c9:17:72:18:89:b5:a6:fd:fc:f8:
7f:2b:1d:35:e7:23:4d:19:06:55:2f:11:a0:9e:f1:a4:0f:cf:
bd:65:b6:e5:93:c0:d5:de:8e:33:73:28:a9:ce:d4:a3:b0:9c:
93:44:2d:9d:bd:50:d7:59:c1:13:25:9a:05:57:fd:fc:f2:7a:
8d:f7:16:dc:2b:b2:c9:55:81:af:f3:26:db:6e:12:04:d7:4e:
3c:ac:2b:20:a0:31:48:98:d5:7e:e6:55:d1:7b:67:45:a6:10:
a0:ed:3d:bd:4b:c8:93:d4:00:26:6a:9c:fe:2a:d3:a8:55:18:
3b:ae:c6:b2:d1:36:d2:27:4e:2c:f2:13:f6:31:be:f7:0a:d1:
4c:3a:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:11:17 2024 by rpki-client on console-fra.rpki-client.org