Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/q3wcxyb_lxkR4_JhYqhX1cuiFK4.roa
File: q3wcxyb_lxkR4_JhYqhX1cuiFK4.roa (raw, json)
Hash identifier: 1LDieR72Dybns6Ki++OcUvJu4jxOoa9NNGMcvsB7K7U=
Subject key identifier: AB:7C:1C:C7:26:FF:97:19:11:E3:F2:61:62:A8:57:D5:CB:A2:14:AE
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01856C1CA3C462EE61FA2DDEBC1C1B00290C
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/q3wcxyb_lxkR4_JhYqhX1cuiFK4.roa
Signing time: Sun 01 Jan 2023 06:54:54 +0000
ROA not before: Sun 01 Jan 2023 06:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212144
IP address blocks: 2a12:7700::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a3:c4:62:ee:61:fa:2d:de:bc:1c:1b:00:29:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 06:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab7c1cc726ff971911e3f26162a857d5cba214ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:95:57:f0:15:3c:c0:54:56:43:8d:c8:2e:
c9:04:db:19:33:07:02:9f:2d:7b:38:b0:f7:65:fd:
c7:d8:32:05:e6:3c:98:7a:11:75:df:2d:d1:15:b1:
ab:45:9c:08:f2:b6:62:78:66:d2:f8:dd:3a:6b:96:
e3:57:55:63:21:08:99:02:81:a5:6e:37:12:f3:32:
d1:1d:74:52:c7:6c:68:e4:39:04:dc:de:1f:e1:3c:
6a:62:b3:41:01:cd:22:18:6a:81:5a:f9:d2:ba:4d:
a8:ab:04:da:00:a7:0e:a3:4d:79:08:01:68:f5:8f:
bb:5d:03:15:1c:2d:7a:6e:ad:7e:9e:96:7e:b8:57:
cc:45:5e:24:8d:7c:a8:8b:6b:63:58:55:0d:78:64:
36:8d:cd:0b:62:50:55:f4:5c:35:35:0a:4e:00:fd:
09:a8:b1:86:e6:62:92:73:b0:8e:3d:ff:6e:ca:29:
11:51:c6:72:d2:57:5f:af:01:d5:a3:74:de:04:70:
51:ef:19:2b:c9:d8:38:1d:7a:f1:79:44:36:38:77:
60:90:b7:b4:c7:c8:4f:12:2e:ee:ef:73:3c:f8:bc:
6f:ac:5f:b5:11:5f:6e:7b:6f:26:3e:98:8f:5b:10:
e2:85:58:04:6a:b3:de:c2:10:f6:33:ad:e6:5a:c1:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7C:1C:C7:26:FF:97:19:11:E3:F2:61:62:A8:57:D5:CB:A2:14:AE
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/q3wcxyb_lxkR4_JhYqhX1cuiFK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7700::/29
Signature Algorithm: sha256WithRSAEncryption
25:20:aa:12:68:3a:8f:7b:58:05:14:f9:ae:51:60:e7:1c:21:
73:0d:1b:f4:ad:78:83:cc:ff:e1:c2:f6:9c:84:ca:7a:2f:89:
4c:40:89:dd:97:53:98:ee:89:fb:84:24:9e:25:95:4f:6a:99:
a1:c7:7f:0c:45:8d:3b:12:62:23:fc:90:78:4a:30:33:5e:6d:
15:f9:00:1f:e6:4c:57:2b:7e:12:82:f2:0f:43:1e:eb:0d:49:
10:91:f6:4e:91:58:5e:dc:62:ff:cb:71:44:cb:6a:48:04:e3:
a2:2e:70:c3:91:89:e3:1a:c6:9a:25:fe:3d:7a:94:a0:ea:e3:
f9:f1:b3:e2:dd:9f:0d:28:b0:c1:f8:28:9c:45:5d:82:50:0d:
32:e4:35:79:d4:41:0b:29:b1:e3:b2:a9:f6:e1:be:19:8d:ad:
f2:d3:61:00:47:24:9d:bd:c3:86:55:5b:00:d2:ec:9c:5b:78:
65:ab:a0:f6:1c:ff:58:1f:01:bb:16:3f:dd:ef:57:ec:20:a9:
cf:83:ad:ef:f0:5a:ee:86:79:e8:b9:98:e8:55:ff:0b:6f:68:
2b:64:ed:9f:72:a1:ee:66:b9:2b:c6:87:8b:1c:62:fd:2d:79:
8f:52:e2:25:c1:a6:82:13:57:46:41:6a:d8:bc:7b:60:7a:63:
aa:c9:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:35 2024 by rpki-client on console-ams.rpki-client.org