Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QHgd9dEMjdvpwDtUphBc6tGoHdU.roa
File: QHgd9dEMjdvpwDtUphBc6tGoHdU.roa (raw, json)
Hash identifier: 49Gx1SgruQIWo8q0w3d5C73oHj4JlDZKNa83GdTSod0=
Subject key identifier: 40:78:1D:F5:D1:0C:8D:DB:E9:C0:3B:54:A6:10:5C:EA:D1:A8:1D:D5
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0188448C4B88F4D95B4A273C07E911781566
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QHgd9dEMjdvpwDtUphBc6tGoHdU.roa
Signing time: Mon 22 May 2023 17:40:24 +0000
ROA not before: Mon 22 May 2023 17:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58052
IP address blocks: 2a12:bec0:190::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:44:8c:4b:88:f4:d9:5b:4a:27:3c:07:e9:11:78:15:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 22 17:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40781df5d10c8ddbe9c03b54a6105cead1a81dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:f7:62:06:70:00:e1:22:f8:42:49:30:79:
90:09:ec:71:77:5a:75:19:5c:eb:5e:36:c9:3c:2b:
ac:64:6c:90:4f:d2:5a:fa:34:cd:db:2a:c3:34:c2:
a9:ec:6c:3f:f4:f4:34:fe:b1:ce:38:13:18:86:38:
9c:99:71:e8:67:45:4e:43:1d:e1:70:1f:f8:cc:74:
b4:b3:9d:7a:cc:9d:e3:70:13:df:dd:52:85:91:f6:
5a:20:31:0b:92:31:ab:0e:29:a9:37:f7:69:52:73:
34:01:b7:77:82:5b:20:f3:fe:63:c9:eb:ab:83:b6:
8c:4c:69:a5:b6:2e:4d:92:87:17:05:b4:a3:c3:96:
99:40:ab:a2:98:8f:d0:69:17:4f:8e:61:63:02:aa:
95:55:f3:80:66:9b:a1:a1:8b:35:fb:cb:43:57:c7:
ae:d2:ae:4c:96:14:33:51:fb:92:f7:6b:ab:5b:1f:
88:b5:6f:c3:97:48:93:34:a2:d4:33:a3:8c:44:fa:
c4:1c:ce:b6:ae:a8:49:ed:f7:d9:7d:f4:94:4e:3e:
43:75:cf:1a:40:fd:7c:0c:f0:9c:b8:fd:a7:2f:01:
a1:09:9e:a1:2b:88:31:3e:67:38:9e:84:08:f5:d8:
68:3e:0b:e2:6e:e6:b1:0d:9d:fc:8e:c3:4e:87:a9:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:1D:F5:D1:0C:8D:DB:E9:C0:3B:54:A6:10:5C:EA:D1:A8:1D:D5
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QHgd9dEMjdvpwDtUphBc6tGoHdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:190::/44
Signature Algorithm: sha256WithRSAEncryption
c0:65:2e:56:2c:7c:83:b1:a7:27:b1:ef:03:c0:40:00:ff:47:
6d:c4:65:07:8c:ea:1e:52:1d:94:40:4b:ad:71:aa:f5:41:9f:
d8:3b:92:9d:c9:05:2d:7c:5f:bd:e0:b8:7d:f7:5b:c3:03:45:
d7:d6:94:7a:15:6f:6b:8d:59:1c:4f:23:88:d5:94:f8:71:bc:
b9:0d:96:e9:a4:3d:c4:33:c7:04:9d:17:91:63:23:a9:bb:13:
73:15:53:87:da:db:80:e1:67:00:96:b1:8e:25:e9:47:c0:bf:
1a:3a:59:a5:55:25:e7:ad:54:84:77:a4:0c:1d:cc:15:7c:aa:
83:13:be:1a:41:1e:00:3f:b3:57:96:12:43:b3:dd:f8:e2:2e:
8f:f0:b5:3a:a7:41:e1:78:da:b5:29:64:df:67:01:80:9f:db:
2a:07:32:49:c0:c7:86:89:d0:36:8e:f4:4f:7e:a0:93:f3:37:
87:81:31:5e:07:07:d6:d3:1b:49:fa:f9:76:38:44:8a:57:41:
8d:fa:dd:b3:07:d8:b1:7d:b5:1b:cb:00:e7:1a:14:27:9b:fb:
76:91:b2:7a:09:a0:9e:40:39:b6:90:42:36:e0:7f:13:b6:e1:
aa:5b:45:0e:d4:02:f6:8a:5e:bf:79:f1:c0:1f:55:f9:f3:2d:
69:22:6c:53
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYhEjEuI9NlbSic8B+kReBVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwNTIyMTc0MDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDc4MWRmNWQxMGM4ZGRiZTljMDNiNTRhNjEwNWNlYWQxYTgxZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oj3YgZwAOEi+EJJMHmQCexxd1p1
GVzrXjbJPCusZGyQT9Ja+jTN2yrDNMKp7Gw/9PQ0/rHOOBMYhjicmXHoZ0VOQx3h
cB/4zHS0s516zJ3jcBPf3VKFkfZaIDELkjGrDimpN/dpUnM0Abd3glsg8/5jyeur
g7aMTGmlti5NkocXBbSjw5aZQKuimI/QaRdPjmFjAqqVVfOAZpuhoYs1+8tDV8eu
0q5MlhQzUfuS92urWx+ItW/Dl0iTNKLUM6OMRPrEHM62rqhJ7ffZffSUTj5Ddc8a
QP18DPCcuP2nLwGhCZ6hK4gxPmc4noQI9dhoPgvibuaxDZ38jsNOh6m5bQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEB4HfXRDI3b6cA7VKYQXOrRqB3VMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvUUhnZDlkRU1qZHZwd0R0VXBoQmM2dEdvSGRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAGQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDAZS5WLHyDsacnse8DwEAA/0dtxGUHjOoeUh2U
QEutcar1QZ/YO5KdyQUtfF+94Lh991vDA0XX1pR6FW9rjVkcTyOI1ZT4cby5DZbp
pD3EM8cEnReRYyOpuxNzFVOH2tuA4WcAlrGOJelHwL8aOlmlVSXnrVSEd6QMHcwV
fKqDE74aQR4AP7NXlhJDs9344i6P8LU6p0HheNq1KWTfZwGAn9sqBzJJwMeGidA2
jvRPfqCT8zeHgTFeBwfW0xtJ+vl2OESKV0GN+t2zB9ixfbUbywDnGhQnm/t2kbJ6
CaCeQDm2kEI24H8TtuGqW0UO1AL2il6/efHAH1X58y1pImxT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org