Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Qaovx4YJ1C36uj7jm8llln8CS-U.roa
File: Qaovx4YJ1C36uj7jm8llln8CS-U.roa (raw, json)
Hash identifier: jODsEmQVuxByNAw74dVaqyq5KzQiyq6QfvvPYYqUh3k=
Subject key identifier: 41:AA:2F:C7:86:09:D4:2D:FA:BA:3E:E3:9B:C9:65:96:7F:02:4B:E5
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018EF6076E3EE648CDC26FA84CB845258FFD
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Qaovx4YJ1C36uj7jm8llln8CS-U.roa
Signing time: Fri 19 Apr 2024 11:04:25 +0000
ROA not before: Fri 19 Apr 2024 11:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29470
IP address blocks: 2a0e:5380::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 24 Apr 2024 18:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:07:6e:3e:e6:48:cd:c2:6f:a8:4c:b8:45:25:8f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Apr 19 11:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41aa2fc78609d42dfaba3ee39bc965967f024be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:d5:d5:ca:99:4c:7f:7d:c1:c1:e8:a5:86:
0b:b9:6f:13:9e:6a:36:54:9e:32:20:b3:e6:e7:22:
b0:38:24:e9:18:b1:46:f8:5c:0d:39:de:ac:0f:db:
26:09:6d:1a:ed:78:aa:c5:2b:ea:c9:1f:f7:64:7c:
89:b9:9b:3b:d0:68:9e:aa:95:03:62:3a:5c:67:94:
1c:06:67:52:53:b9:cc:6c:0b:c5:cc:74:64:31:b5:
a9:3c:af:c6:5d:4d:91:ba:fa:8f:3b:34:5f:60:db:
3c:2b:0b:3f:b2:38:ce:e3:6e:21:a1:7f:dd:f1:6d:
60:d2:ba:3d:87:3f:ed:0f:37:65:e5:81:5a:1a:7e:
3b:ee:d2:1c:45:5e:f2:60:cb:c8:de:7f:4c:5a:1e:
91:d9:36:84:b7:a3:b4:c2:63:c5:ee:65:4e:c4:e7:
9b:e8:09:dd:94:60:ef:e8:41:d9:bc:d5:93:93:50:
d4:7a:30:67:84:57:53:fd:32:e0:97:44:a0:61:7b:
74:7f:cd:33:3c:ee:0e:34:24:24:bd:ab:4f:64:ab:
a2:26:9a:90:f3:f6:0a:a5:f7:ac:fb:8b:a0:48:11:
55:7f:ef:28:23:f3:e2:0f:bd:ca:18:6b:8c:bc:2e:
7c:3d:cf:13:7f:bb:26:b5:f3:e3:00:93:61:64:30:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AA:2F:C7:86:09:D4:2D:FA:BA:3E:E3:9B:C9:65:96:7F:02:4B:E5
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Qaovx4YJ1C36uj7jm8llln8CS-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5380::/32
Signature Algorithm: sha256WithRSAEncryption
26:ef:d4:19:48:e4:ac:fa:c3:f6:2e:83:1b:8f:0c:cf:a5:67:
41:ed:0f:89:39:08:de:f5:ec:45:ea:54:9b:18:1a:bb:de:04:
ad:55:ec:5a:18:fb:a6:25:af:a3:43:5a:0b:b4:2f:6d:d3:9c:
b0:e2:d4:c0:16:59:b6:eb:50:86:04:98:2d:5d:1e:6b:a7:9c:
cb:80:04:56:7e:ab:3a:37:b6:62:5b:7e:2e:c3:70:87:f4:c6:
8f:4b:92:10:49:01:de:51:cd:e1:67:67:bc:28:79:41:ad:04:
28:ec:f4:76:4a:48:c8:24:8e:1d:18:87:91:a3:eb:9a:32:ae:
23:e5:f0:ed:1c:77:ba:74:3d:24:8b:bc:52:64:1e:d0:9f:e7:
bf:86:e2:5c:db:9d:e4:6e:89:4c:d6:57:1d:54:1c:20:bc:dc:
9a:b6:4e:8e:72:41:ee:9e:e6:3c:71:0b:f2:29:66:23:de:0e:
8c:e7:75:11:5c:c9:99:bf:48:56:12:90:f0:e6:86:ad:30:9c:
b3:87:36:ab:c1:10:2a:e6:83:c3:59:4c:92:fe:30:40:29:60:
21:00:8a:9e:92:59:5f:1d:ad:dc:be:82:b6:e7:f6:be:0a:ec:
1a:cc:4a:7d:00:bb:85:bc:95:5e:eb:5c:85:a7:bc:fc:45:f4:
ff:f3:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org