Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QId2XWt8CYR6W74RaIzagYXBBKU.roa
File: QId2XWt8CYR6W74RaIzagYXBBKU.roa (raw, json)
Hash identifier: o+f3vRUqf2rPT1sfeiN3iOopWZ3qxuJJakJvG/bteCU=
Subject key identifier: 40:87:76:5D:6B:7C:09:84:7A:5B:BE:11:68:8C:DA:81:85:C1:04:A5
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0189E3DB2C18FE27CD2CD16601C1B8E24B13
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QId2XWt8CYR6W74RaIzagYXBBKU.roa
Signing time: Fri 11 Aug 2023 09:08:58 +0000
ROA not before: Fri 11 Aug 2023 09:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207862
IP address blocks: 2a12:bec0:420::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:db:2c:18:fe:27:cd:2c:d1:66:01:c1:b8:e2:4b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Aug 11 09:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4087765d6b7c09847a5bbe11688cda8185c104a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:6a:fc:6b:4b:f4:fe:41:b9:ab:e8:61:4c:
42:06:2e:22:6b:65:8b:ee:c0:63:49:a3:76:17:33:
26:77:99:cf:99:23:81:c5:08:5e:b1:84:d9:f2:db:
df:21:3a:ac:68:6d:be:f0:a8:10:24:39:60:ba:3b:
de:9a:90:2e:58:81:fa:98:4b:fe:49:37:33:34:e7:
92:95:8e:11:02:55:14:27:45:c0:e0:ee:41:3c:f8:
56:92:74:a7:16:e3:28:52:f4:98:a1:f0:45:72:67:
7a:dd:74:fd:97:be:c8:78:3b:1f:17:21:b2:0f:ba:
a3:04:70:20:55:a6:d2:79:6f:64:ae:cc:d0:08:53:
58:33:31:36:d5:f3:63:40:e8:8c:e5:1a:aa:46:36:
1b:77:74:39:46:fa:c3:bc:91:16:6c:a5:de:f1:88:
23:72:1b:d7:92:8c:4c:71:bf:62:95:bb:aa:4f:de:
51:92:62:aa:ec:be:a6:77:c2:1e:07:06:b7:cf:12:
d0:77:99:cc:a0:ae:ba:b7:59:11:1e:64:24:4a:07:
b8:54:7c:81:d4:e3:70:1a:2c:3e:f5:1f:68:be:cb:
5e:15:d2:ab:fa:d9:29:6a:5f:af:f9:a7:54:7b:2e:
a4:b8:01:06:40:b3:65:08:5a:02:26:07:d1:17:ec:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:87:76:5D:6B:7C:09:84:7A:5B:BE:11:68:8C:DA:81:85:C1:04:A5
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QId2XWt8CYR6W74RaIzagYXBBKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:420::/44
Signature Algorithm: sha256WithRSAEncryption
22:3e:c1:9f:c6:eb:b0:26:51:c7:a5:c4:4f:e5:18:85:d4:77:
43:de:d1:ba:65:ab:62:db:15:2e:d7:c5:61:4e:e9:74:3b:41:
53:02:76:15:8b:1a:18:c5:45:ef:60:e2:31:e5:65:7c:69:6c:
2a:78:c6:6a:0c:2c:08:ae:44:cc:b2:0b:cb:4a:66:ca:dd:3c:
05:28:da:16:09:88:76:65:e0:02:55:2c:c9:ad:dd:cc:13:49:
4b:f0:ec:75:8e:5d:c2:e5:fc:de:62:5b:df:12:1b:77:06:91:
c4:27:35:b2:f3:fa:30:09:81:e6:d5:e9:6c:d6:0c:e5:4f:e5:
c2:29:7a:93:a1:8c:85:d1:95:21:80:0f:bb:7c:51:38:a0:83:
c3:bc:05:7c:ea:e0:e0:56:bd:8b:40:79:7c:0d:ef:49:42:0f:
5d:0a:97:48:3a:07:10:d5:23:ac:c3:3c:75:88:25:5b:51:29:
ff:19:84:e9:a5:46:41:90:7c:f5:4c:3a:b2:c9:bf:58:e2:4c:
a1:dd:45:e9:5b:a0:2f:ff:5a:c3:45:1e:30:e3:8b:11:f6:5c:
c3:df:43:c3:fa:97:39:7a:0f:3f:5b:7a:72:b3:35:ff:b7:e8:
f6:b2:5c:54:e2:37:39:24:b8:4f:0f:9d:8b:3d:d0:cf:aa:02:
57:57:a3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org