Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/qOsKgnZ_RhDNC1ecGxbtGdjYc7w.roa
File: qOsKgnZ_RhDNC1ecGxbtGdjYc7w.roa (raw, json)
Hash identifier: 4tDerQk+Nenv3EsnR3AdezMsCUdlv3eiHU984QTzcM8=
Subject key identifier: A8:EB:0A:82:76:7F:46:10:CD:0B:57:9C:1B:16:ED:19:D8:D8:73:BC
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01856DC1DD07341CFA80DA1C5FF1B1728A4C
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/qOsKgnZ_RhDNC1ecGxbtGdjYc7w.roa
Signing time: Sun 01 Jan 2023 14:34:59 +0000
ROA not before: Sun 01 Jan 2023 14:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394414
IP address blocks: 2a06:c3c0:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:dd:07:34:1c:fa:80:da:1c:5f:f1:b1:72:8a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 14:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8eb0a82767f4610cd0b579c1b16ed19d8d873bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:87:1d:53:48:5d:20:70:b2:85:55:4b:38:1f:
22:07:3f:da:8b:89:4e:b1:a5:e0:27:d1:4d:16:cc:
41:90:c2:47:cb:e7:ed:b7:26:46:b3:7f:d2:bf:0b:
8f:82:de:f2:58:3c:be:71:b6:1a:05:77:02:cb:28:
76:9b:02:2c:27:f8:4c:d1:08:b4:fa:4b:3b:d5:b5:
fb:d7:bd:ff:0f:40:03:91:46:1b:b1:74:e9:de:12:
09:77:59:cc:71:7e:46:29:cd:a9:8e:0b:03:36:63:
83:8a:e8:7d:16:77:f4:d7:8f:c3:aa:c4:c9:70:58:
d1:1c:b5:34:dc:55:68:63:a2:65:95:cd:b4:d8:15:
c7:b0:c1:07:47:b5:13:fc:60:11:32:2f:1b:63:d5:
99:c9:77:6a:c9:9b:cf:e1:be:3e:22:b2:5a:a1:33:
29:99:ff:18:7f:a2:8f:ce:41:3c:d5:69:04:13:67:
c8:b8:cb:ad:59:43:66:60:23:8f:f0:a1:57:e2:3e:
1b:63:12:6c:f0:a1:da:80:5c:8b:0a:22:ec:02:df:
ac:6c:56:7e:02:d8:6c:9a:69:17:ae:be:35:5d:71:
2f:67:e0:29:a4:3b:08:14:2c:ee:96:bd:bf:1d:0f:
50:02:85:e4:dc:7c:9a:c4:d8:61:cd:11:31:01:d0:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EB:0A:82:76:7F:46:10:CD:0B:57:9C:1B:16:ED:19:D8:D8:73:BC
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/qOsKgnZ_RhDNC1ecGxbtGdjYc7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0:6::/48
Signature Algorithm: sha256WithRSAEncryption
5c:c4:b5:5a:ae:c0:d7:36:52:26:17:2c:83:25:f2:37:df:26:
d0:3a:47:07:21:8b:20:40:93:51:27:77:59:1c:ee:ab:9f:2f:
52:d2:26:9d:13:da:45:b4:77:d4:bb:f9:d9:cc:0e:97:a2:ee:
29:22:bf:e9:c1:63:b6:9d:cf:8e:56:47:13:48:90:98:c6:c4:
67:d2:9b:85:74:c1:fe:89:87:36:6f:7b:0a:ea:79:5b:5c:15:
10:37:d4:80:58:c4:c1:0f:16:b8:d6:5b:65:b2:37:8b:81:4c:
cf:87:09:87:91:2e:d8:eb:6b:77:5a:f9:76:ff:e1:1e:a1:41:
c5:19:b7:25:7f:5c:3e:26:cc:d2:e3:b2:a8:cc:15:a9:be:b2:
23:33:f6:9a:22:be:c0:57:74:1e:f8:eb:dd:04:d2:54:27:55:
06:26:3b:72:54:58:fa:27:ba:08:4f:51:56:0e:84:2e:c1:6e:
f9:2a:87:c8:6a:c6:e7:2b:98:45:f9:80:b4:98:af:0d:05:82:
46:07:d6:7b:87:8e:e9:75:2f:4d:30:c9:8b:74:7a:49:2e:c7:
5e:93:53:08:71:2c:69:cd:aa:dc:be:74:a8:26:75:2f:b7:34:
e5:34:0a:5c:51:da:3c:bf:9b:69:3c:5e:3a:67:1a:3f:c3:39:
88:2b:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org