Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/qHst3H__nNgJfxI1joZfs3V3p4U.roa
File: qHst3H__nNgJfxI1joZfs3V3p4U.roa (raw, json)
Hash identifier: SUxqEUm/gDhbBZMKgOYKcSKw35O+uAxZV2Zwr69fSlM=
Subject key identifier: A8:7B:2D:DC:7F:FF:9C:D8:09:7F:12:35:8E:86:5F:B3:75:77:A7:85
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 01856D4AE953DDC3478D45EA578989C71181
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/qHst3H__nNgJfxI1joZfs3V3p4U.roa
Signing time: Sun 01 Jan 2023 12:25:04 +0000
ROA not before: Sun 01 Jan 2023 12:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60115
IP address blocks: 2a07:2918:6000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:e9:53:dd:c3:47:8d:45:ea:57:89:89:c7:11:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jan 1 12:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a87b2ddc7fff9cd8097f12358e865fb37577a785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:79:3f:2a:16:bd:12:3e:1d:64:ff:52:a1:
01:84:31:96:b1:75:af:2c:26:46:70:9b:33:12:48:
d6:a0:d0:32:2f:95:ca:1b:1b:6b:4e:4c:84:3b:5d:
30:d2:80:eb:91:0c:cf:df:50:f1:f7:59:31:d9:9f:
14:c0:57:b9:f8:6a:7f:cd:2e:c5:c8:98:cf:5a:f9:
40:be:51:f9:67:18:53:dc:20:09:d8:5d:d1:73:68:
0b:d6:56:aa:85:65:1c:35:4b:f8:16:c8:48:d9:5a:
68:db:d1:97:fc:bf:b0:97:b3:bc:d9:30:e6:c8:cf:
52:be:8e:17:ba:cb:34:49:72:88:5b:b1:56:f2:fc:
0a:57:e6:1c:2b:ce:9b:18:12:4a:50:5a:2f:aa:34:
39:ab:65:a4:cd:89:d6:90:c8:ca:3f:59:7e:6a:94:
ac:01:fb:98:7e:ae:52:49:f2:30:e0:b3:f1:e3:48:
31:0b:31:dc:22:58:9e:41:bb:4d:20:f5:ba:95:6e:
a6:77:d7:b7:4a:db:67:c7:c6:30:fe:39:18:92:6c:
a8:85:de:fb:ac:17:9a:8c:0a:c2:59:b3:0b:0e:23:
3a:a7:24:7c:c5:e9:09:20:6f:df:ba:ca:ba:ff:a7:
0e:c2:96:9f:0a:94:3e:26:cd:c6:9f:b8:90:81:23:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7B:2D:DC:7F:FF:9C:D8:09:7F:12:35:8E:86:5F:B3:75:77:A7:85
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/qHst3H__nNgJfxI1joZfs3V3p4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2918:6000::/36
Signature Algorithm: sha256WithRSAEncryption
21:9f:4e:65:2d:03:7c:57:36:b9:f1:7d:bd:87:c6:15:e6:00:
5d:64:62:d1:53:88:02:18:c7:51:21:4b:25:89:43:67:63:92:
b0:14:12:cf:8b:8e:f0:34:a1:1d:ec:83:1a:a9:63:e6:69:65:
df:54:89:a4:24:3b:79:19:60:57:72:b9:6f:cc:d7:47:2f:25:
c1:0d:f6:36:f4:11:39:c1:be:e5:a8:d4:94:04:01:8b:69:be:
0b:a4:05:09:37:9c:61:93:b7:83:f9:2b:b2:1c:f4:0a:4f:a3:
75:70:c5:59:03:17:5b:6e:0c:d2:8e:4b:1a:77:a3:c9:33:7e:
fc:8b:e7:e1:d9:e1:fe:c1:3a:0c:df:2f:9f:a9:c6:5a:a7:a9:
5a:55:09:bc:f0:ef:81:d6:54:f7:3b:cd:57:29:cf:36:c4:9b:
37:ba:56:d5:6e:08:48:95:89:5a:c8:aa:4b:7d:60:d9:6d:f3:
78:cb:0e:a2:17:1c:ca:f8:dc:39:8f:45:8b:87:2b:84:df:1e:
c5:97:e5:80:78:52:84:dd:33:4a:18:69:e3:4f:1e:00:93:c6:
bf:4c:b8:d9:38:9a:6a:39:d8:d2:a6:9b:cc:22:b9:db:bf:bc:
76:3b:64:19:57:56:b6:b8:db:25:4d:35:71:0f:1f:53:86:3b:
b4:45:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:43 2024 by rpki-client on console-ams.rpki-client.org