Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/QgeiiF5pbcal_55yA7gGF1tgAOQ.roa
File: QgeiiF5pbcal_55yA7gGF1tgAOQ.roa (raw, json)
Hash identifier: 3i3ChyohCXiZm8VbE6qrliB0bf+hWTVxqNlNP1ZlZdk=
Subject key identifier: 42:07:A2:88:5E:69:6D:C6:A5:FF:9E:72:03:B8:06:17:5B:60:00:E4
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 018CC64B6D1876B6DFF7E6FB4AEE71EA2F13
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/QgeiiF5pbcal_55yA7gGF1tgAOQ.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12540
IP address blocks: 212.64.160.0/19 maxlen: 19
2a0d:fc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 20 Feb 2024 10:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6d:18:76:b6:df:f7:e6:fb:4a:ee:71:ea:2f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4207a2885e696dc6a5ff9e7203b806175b6000e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:d0:79:69:50:0f:cd:8b:54:ee:f1:a8:c5:
9e:0c:ff:70:18:78:7f:64:62:53:23:c3:7d:81:04:
c3:3f:64:96:fa:1a:ac:06:44:09:85:db:5e:09:0e:
f0:52:37:18:6d:48:14:5d:ed:91:51:2e:8f:5a:ce:
51:74:9b:c5:d1:23:5e:f4:d7:47:c1:ca:04:07:e5:
11:4e:a4:d7:90:1a:d6:8c:f8:7c:d1:da:31:fb:21:
48:bc:56:ff:c6:92:73:0e:b1:71:07:05:48:81:41:
f0:1b:cc:1f:96:b8:ee:45:cc:fd:f9:a5:6b:cc:08:
10:2c:f9:a9:ca:9c:f3:03:ba:2f:21:42:47:4d:47:
8a:29:a4:93:ea:19:ef:16:72:31:c4:1c:7c:87:19:
f5:e0:08:8e:68:47:ab:0c:9f:be:40:55:c7:76:a5:
70:2f:10:b3:0b:00:24:06:24:45:f8:a4:90:43:8c:
30:6d:92:38:7e:6e:5e:eb:b1:5c:7f:2b:b9:79:b4:
04:51:cf:a4:2d:c4:d9:00:50:a4:85:df:2f:df:c9:
03:c9:b1:7c:2c:82:80:12:93:3c:48:bf:22:cb:db:
63:ba:65:2b:ec:a6:21:72:14:23:37:cf:ac:fd:a2:
43:54:3a:c1:13:fc:8a:5c:3f:9e:da:e2:cf:61:9d:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:07:A2:88:5E:69:6D:C6:A5:FF:9E:72:03:B8:06:17:5B:60:00:E4
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/QgeiiF5pbcal_55yA7gGF1tgAOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.160.0/19
IPv6:
2a0d:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:28:c9:82:79:6c:5d:39:51:b4:41:32:f3:33:23:d1:b4:93:
a2:0c:1b:f8:95:25:ee:3c:d6:35:de:8f:81:69:61:c7:ab:14:
5c:29:87:8a:dd:02:bd:53:12:97:8e:2c:cc:ed:a2:8a:3e:cb:
bf:5c:f6:8b:df:42:92:0d:87:cd:03:7c:15:9f:0b:80:54:ba:
09:bd:e2:e5:8e:91:71:1b:0a:de:a2:e1:44:30:1c:f8:39:57:
3e:0e:f0:e2:05:0a:ad:ab:4d:ca:0e:78:a0:f3:55:1d:0c:08:
a3:c6:1d:04:5d:85:ed:c2:0e:bb:12:c8:d9:7e:2a:c2:b7:3a:
c9:d9:db:98:85:05:70:b2:46:1c:f6:d0:22:e2:c5:9f:7c:82:
47:bc:83:ac:02:5b:eb:77:c2:80:c4:b1:90:0f:85:f3:8b:52:
b0:4f:57:a9:1d:ea:aa:6e:80:40:bb:82:33:cd:e8:0d:ad:22:
5f:90:3e:ad:d2:5c:1c:d2:81:20:14:0b:3b:0c:15:da:22:56:
87:b4:d4:b6:e3:fa:f4:03:3f:5f:3a:da:1b:b2:5c:28:ab:9a:
3f:29:c5:1e:78:d2:00:4b:6e:a4:b9:45:e8:b3:0c:e5:a1:92:
5b:da:79:6f:25:8d:41:0f:e6:79:df:88:5c:0c:84:a9:b2:6a:
ae:d3:06:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:43 2024 by rpki-client on console-fra.rpki-client.org