Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/_QtB45BODDGoqFPmBFavS9H2ZrE.roa
File: _QtB45BODDGoqFPmBFavS9H2ZrE.roa (raw, json)
Hash identifier: QtOZP3pcjKmtOFUW3XL5wVwRFu4A/U7kAcELePJ5Aks=
Subject key identifier: FD:0B:41:E3:90:4E:0C:31:A8:A8:53:E6:04:56:AF:4B:D1:F6:66:B1
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 018E9F9FB5623F10EF9DC8D8B444FC68AAFC
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/_QtB45BODDGoqFPmBFavS9H2ZrE.roa
Signing time: Tue 02 Apr 2024 16:23:47 +0000
ROA not before: Tue 02 Apr 2024 16:23:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46573
IP address blocks: 2a10:3b00::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 05 Apr 2024 21:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:9f:b5:62:3f:10:ef:9d:c8:d8:b4:44:fc:68:aa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Apr 2 16:23:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd0b41e3904e0c31a8a853e60456af4bd1f666b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:49:b3:73:28:16:bb:72:69:44:a5:ce:47:
dd:5d:51:78:b0:5d:b7:dc:5b:53:e0:99:b1:4a:f5:
51:06:c7:43:57:2b:76:e9:ea:84:73:ae:56:e1:a7:
c2:3c:35:08:3d:01:b0:29:f2:1c:d1:be:01:09:a0:
4d:53:88:fb:24:7a:8c:fa:db:f5:fc:c9:c5:d9:7a:
ec:94:50:06:1e:cc:e2:de:c8:eb:7a:11:e1:62:14:
49:1c:86:b4:a6:19:44:8a:a7:96:07:5d:55:dd:e3:
10:2b:1a:94:33:70:19:2b:68:05:34:01:98:1f:ef:
58:22:34:a3:5c:e0:7f:4f:fb:10:c4:ee:d7:1c:18:
7d:9b:08:af:54:4b:97:da:a8:41:60:dd:c0:5d:0a:
3e:1b:95:96:7d:23:eb:e3:7b:a4:b5:ff:c0:2d:c8:
66:2f:24:e8:b5:94:a2:17:e1:f5:6b:05:49:ed:21:
53:86:24:0c:a3:26:f3:03:74:4f:c3:63:6d:83:bc:
e7:fb:4a:88:84:52:fd:64:5f:5a:89:1d:d0:e7:7c:
85:2b:8e:a0:3e:e8:56:f9:b7:65:54:85:d6:a9:39:
87:97:a9:f5:14:9d:73:7a:62:0c:e8:ef:b3:aa:57:
6f:93:55:61:3f:4d:a4:27:f0:f5:38:57:fd:c2:7e:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0B:41:E3:90:4E:0C:31:A8:A8:53:E6:04:56:AF:4B:D1:F6:66:B1
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/_QtB45BODDGoqFPmBFavS9H2ZrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3b00::/32
Signature Algorithm: sha256WithRSAEncryption
3d:18:95:55:fd:0c:10:66:0a:02:57:75:0d:b9:61:e1:f1:2f:
0d:11:70:61:ee:ab:d1:f8:0a:9c:82:31:b1:77:c3:e4:52:50:
40:4f:ef:9c:be:c1:d3:b0:a0:1c:69:d1:0e:9b:ec:60:63:95:
fc:b8:bb:04:6d:72:43:33:32:db:73:06:f0:5f:35:70:49:7c:
e3:3e:c3:13:db:89:f2:f7:b2:93:cd:c3:98:6e:db:51:59:7a:
cc:e5:bd:64:a3:43:4a:69:28:e3:3b:28:97:ba:82:88:0b:b3:
75:80:89:b4:98:de:19:4c:c4:69:c0:99:17:80:71:a0:22:59:
83:30:76:1d:0e:1a:48:fc:00:90:81:71:e9:30:ee:4c:89:f5:
53:26:b2:9e:29:5b:fa:72:65:98:d5:62:a6:15:ca:5a:ee:36:
67:ac:b0:97:c0:a5:ef:ce:fe:9e:0c:d0:7e:95:90:b2:68:d0:
d3:7b:ff:41:03:0c:0c:42:15:b4:be:68:72:f5:67:93:da:2c:
ac:70:77:d9:fd:05:4d:55:2e:8e:30:42:b1:c2:f1:a4:7d:ca:
24:1d:2c:a9:0b:cc:0a:96:03:79:b9:7f:c5:94:59:03:1d:81:
9e:75:49:26:04:c0:e0:b9:d1:5e:48:76:54:83:ee:e4:1f:a4:
79:fb:d6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:19 2024 by rpki-client on console-fra.rpki-client.org