Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26bc06-393e-441d-8bc0-b292cf4ae080/1/qjhxs6t6v-kxWH0y9s6OF4L1q5g.roa
File: qjhxs6t6v-kxWH0y9s6OF4L1q5g.roa (raw, json)
Hash identifier: PKH0KLK0ExHQF5iK9y7lgvZRFhVXMAg3lT813C19iJs=
Subject key identifier: AA:38:71:B3:AB:7A:BF:E9:31:58:7D:32:F6:CE:8E:17:82:F5:AB:98
Certificate issuer: /CN=5792df61399569f74fb77b6311b7d921ba949825
Certificate serial: 01889F48DB968581661051782D125D47B07E
Authority key identifier: 57:92:DF:61:39:95:69:F7:4F:B7:7B:63:11:B7:D9:21:BA:94:98:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5LfYTmVafdPt3tjEbfZIbqUmCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26bc06-393e-441d-8bc0-b292cf4ae080/1/qjhxs6t6v-kxWH0y9s6OF4L1q5g.roa
Signing time: Fri 09 Jun 2023 08:32:12 +0000
ROA not before: Fri 09 Jun 2023 08:32:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60431
IP address blocks: 2001:678:cb0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:48:db:96:85:81:66:10:51:78:2d:12:5d:47:b0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5792df61399569f74fb77b6311b7d921ba949825
Validity
Not Before: Jun 9 08:32:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa3871b3ab7abfe931587d32f6ce8e1782f5ab98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:c1:e8:0c:45:d2:d7:85:7d:df:97:70:d7:
e8:ad:9e:4c:c8:f7:9f:bf:3c:39:bb:54:b4:50:b4:
67:41:78:18:0b:92:19:db:7e:85:4a:02:b2:c2:89:
f4:97:e2:f3:7f:ac:46:a3:35:12:32:98:bd:bf:f1:
da:0e:50:b9:90:49:0e:d1:34:e9:b2:ba:54:33:05:
9b:37:3a:cc:eb:05:33:45:eb:3c:87:48:22:98:5a:
94:ab:15:e8:a5:8d:62:c7:74:d7:d0:94:9e:28:68:
7e:b6:96:66:2c:83:5f:99:11:98:bd:33:a0:d6:73:
c0:d5:42:40:01:c2:5e:25:65:a0:a3:b1:60:1c:23:
86:d4:47:ec:1c:ff:03:75:ca:98:a7:b0:e5:8b:21:
a8:a8:cb:9d:08:30:e4:ac:5d:fc:ab:0f:a4:42:62:
61:06:47:81:c3:c3:c3:5b:4b:e8:6d:c2:64:1f:dc:
35:16:2f:78:ce:77:f8:6b:b8:a3:7e:93:ae:f5:98:
9a:74:c0:2e:6f:48:83:03:31:89:d5:49:d8:82:2a:
ee:de:54:33:bf:68:29:67:f5:24:10:2d:2f:6e:bf:
f1:7a:f8:6c:15:ba:47:8c:77:43:69:6b:bf:31:e9:
5c:a1:bd:cd:1f:4e:e1:bc:89:17:83:e1:2c:e8:4d:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:38:71:B3:AB:7A:BF:E9:31:58:7D:32:F6:CE:8E:17:82:F5:AB:98
X509v3 Authority Key Identifier:
keyid:57:92:DF:61:39:95:69:F7:4F:B7:7B:63:11:B7:D9:21:BA:94:98:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5LfYTmVafdPt3tjEbfZIbqUmCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26bc06-393e-441d-8bc0-b292cf4ae080/1/qjhxs6t6v-kxWH0y9s6OF4L1q5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26bc06-393e-441d-8bc0-b292cf4ae080/1/V5LfYTmVafdPt3tjEbfZIbqUmCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:cb0::/48
Signature Algorithm: sha256WithRSAEncryption
41:93:bc:a5:f8:55:72:0c:1b:94:fd:99:24:b1:50:a3:a5:75:
87:6e:dc:d3:f0:ae:3e:81:1c:e9:37:11:f5:cc:61:34:4b:e0:
f2:c7:1f:15:d5:30:b7:31:4b:b8:22:1e:26:16:24:0a:73:6a:
d4:c9:b4:14:09:c1:6d:7c:69:aa:11:0c:40:1a:58:1a:60:71:
be:3d:2e:b3:92:a5:e4:5b:ed:a2:50:93:4d:bd:2a:b6:f4:7d:
09:20:1a:6f:65:68:a0:6b:a2:b4:70:9d:f5:c3:99:5f:b9:8e:
2b:1e:4c:1f:b3:52:e9:a2:11:c9:4b:42:9b:8f:02:97:93:1c:
10:41:eb:a7:24:88:3c:26:cf:92:e7:bb:e1:6f:ce:c0:28:eb:
96:86:d7:fb:11:1d:77:66:ef:34:37:12:a6:d4:4a:b9:2d:c3:
7a:85:a2:b3:2b:e9:7c:fe:47:a7:7a:b1:c8:a9:64:76:84:49:
cc:1d:36:07:13:a7:a7:2b:43:2a:42:be:e5:38:5d:1d:e2:e9:
9d:ab:f6:ee:91:6d:62:aa:33:15:2c:73:52:77:d2:a8:ff:c9:
bc:07:70:d0:f3:53:12:0b:f4:5f:3c:ec:07:94:56:5c:55:bc:
06:b7:7d:29:1f:4d:54:b2:57:ac:4f:bb:5a:bb:6d:0e:13:ec:
3f:2d:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:08 2024 by rpki-client on console-fra.rpki-client.org