Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qx-DB79mTfeZfmZfe0K-2jcpBi4.roa
File: qx-DB79mTfeZfmZfe0K-2jcpBi4.roa (raw, json)
Hash identifier: 9X7oMqbX6PHDJodZMvyj3U7AwhOqI+NZKqv/Ylx0wSs=
Subject key identifier: AB:1F:83:07:BF:66:4D:F7:99:7E:66:5F:7B:42:BE:DA:37:29:06:2E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD493DEB6B91051F4BC10C7DA59E6E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qx-DB79mTfeZfmZfe0K-2jcpBi4.roa
Signing time: Tue 02 Jan 2024 10:34:34 +0000
ROA not before: Tue 02 Jan 2024 10:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212888
IP address blocks: 2a0e:b107:c00::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 18:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:49:3d:eb:6b:91:05:1f:4b:c1:0c:7d:a5:9e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab1f8307bf664df7997e665f7b42beda3729062e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:f9:9d:f9:d3:9e:59:68:48:99:85:d6:cd:
5f:f8:51:da:8d:e2:2d:95:29:a2:af:5c:0d:8c:36:
f1:af:4b:65:17:67:e9:91:4d:69:8d:e7:b9:f3:36:
8f:c6:f7:e5:37:80:9e:dc:0b:66:a8:d7:0d:a3:c6:
9e:35:78:77:85:1c:36:63:37:ed:a3:be:de:54:0e:
e4:69:38:d9:4f:b9:98:5d:1b:4c:dd:2c:6b:fd:98:
73:14:e7:c4:c4:35:af:cf:1d:c5:7b:11:8f:a7:16:
ca:c4:42:35:7a:3b:f5:05:59:7e:0d:2e:d7:28:67:
be:b6:73:03:a0:88:5d:87:20:48:9c:cf:47:71:76:
c7:09:63:d4:9b:e6:c3:97:9a:ab:b2:1f:3b:d6:8d:
00:cc:69:5b:30:59:59:d9:f0:3c:13:3b:ac:64:1a:
34:84:d4:b4:23:45:c7:b1:af:a4:90:c6:22:3c:8a:
f2:c2:8a:96:e8:fe:43:74:55:bd:0a:54:f1:ad:1c:
b6:b9:c9:1a:73:54:1a:40:62:c9:b8:ad:af:73:e8:
81:c6:a0:3c:68:16:11:a2:a6:19:f1:89:63:c4:a7:
68:cb:02:b4:f6:0c:d5:89:6b:81:cd:09:f2:2f:85:
6d:fa:04:ac:fb:73:3c:cf:64:ef:5e:b9:74:aa:d1:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1F:83:07:BF:66:4D:F7:99:7E:66:5F:7B:42:BE:DA:37:29:06:2E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qx-DB79mTfeZfmZfe0K-2jcpBi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:c00::/44
Signature Algorithm: sha256WithRSAEncryption
77:ce:1c:05:fa:31:fc:9a:5c:b8:2d:6e:cc:5c:d5:7e:e1:d9:
20:a7:5b:db:38:60:66:6d:0b:03:40:8a:1d:ac:56:ab:60:cf:
f3:81:22:b8:fa:df:29:06:c1:fb:b4:97:09:43:21:7b:35:ea:
6d:52:6b:3b:71:65:08:c5:e5:fc:0b:2e:a8:cc:25:08:08:8e:
06:1d:c0:84:84:6f:bf:09:34:53:1f:90:33:e6:02:15:d7:6d:
8a:f5:b8:c0:e9:0b:ea:78:2e:ce:fa:8f:ae:cc:ba:1d:63:37:
30:8d:3f:2a:92:05:18:19:05:0a:0c:39:25:8f:e9:a3:c7:c7:
b2:70:80:93:d0:94:1d:fc:a0:33:d0:b0:ad:03:af:7b:b7:73:
ac:6a:89:b2:31:c6:6c:57:92:9b:1b:69:b6:0f:61:cd:9b:b0:
5e:74:0c:7d:42:07:a5:20:93:3f:26:d5:95:dd:23:c2:bd:06:
fd:45:79:22:8e:e1:b1:57:72:2e:54:74:0a:01:d4:a6:86:e5:
58:e4:76:b2:0b:b0:42:b1:8c:18:07:eb:90:ac:bd:81:7b:e4:
7f:fb:d7:05:cb:7b:a6:78:c7:3b:d0:68:7d:04:bc:79:95:49:
93:a5:21:a1:21:47:79:73:dc:81:d4:41:eb:6c:58:fe:b9:35:
5d:a7:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 22:32:55 2024 by rpki-client on console-ams.rpki-client.org