Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QKL44is92OeWdJ-3dkqyl_7e6cg.roa
File: QKL44is92OeWdJ-3dkqyl_7e6cg.roa (raw, json)
Hash identifier: Lq/U0GKQe4FmQiuRUJIeMb13fKH0tM1gKfp+70j37DM=
Subject key identifier: 40:A2:F8:E2:2B:3D:D8:E7:96:74:9F:B7:76:4A:B2:97:FE:DE:E9:C8
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01888BF8173A88697731B38486BCF94C490A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QKL44is92OeWdJ-3dkqyl_7e6cg.roa
Signing time: Mon 05 Jun 2023 14:31:11 +0000
ROA not before: Mon 05 Jun 2023 14:31:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207304
IP address blocks: 2a12:bec0:360::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:f8:17:3a:88:69:77:31:b3:84:86:bc:f9:4c:49:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 5 14:31:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40a2f8e22b3dd8e796749fb7764ab297fedee9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:b2:f5:3a:fb:cc:ba:b8:79:ce:e5:65:65:
08:c8:c2:19:70:e9:50:67:7b:34:c2:1a:b5:45:54:
71:4e:63:37:88:b6:99:2e:13:a9:6c:e6:93:bc:22:
79:04:32:9a:91:09:04:13:63:7b:8d:c1:1b:85:e8:
5c:25:9d:dc:db:e6:df:d8:8c:54:8d:13:6d:de:55:
ff:07:6b:e7:5a:d1:0f:0b:c5:36:14:6d:77:3a:0b:
c2:e5:60:08:54:88:c7:ed:34:6b:59:85:63:fe:b8:
fe:3f:76:0a:71:55:2f:f9:c2:03:e3:02:0e:3a:82:
7c:de:91:3a:e5:6f:45:89:54:9f:df:67:8d:92:e3:
73:18:4e:25:c1:f0:d6:a2:17:75:7f:6c:d0:ca:f5:
1f:b2:94:cc:33:a9:32:54:ea:83:34:20:9e:56:0a:
3c:04:e0:77:99:72:48:fe:80:e7:5e:06:2c:25:52:
8d:a9:8d:81:83:d7:bd:d5:fb:bf:27:5b:bf:26:d4:
3f:4f:1e:2b:5a:03:81:d0:a2:17:9d:9d:a7:1d:b6:
93:d7:27:e5:6c:8d:90:71:f8:6b:c7:62:3f:6d:4e:
5b:27:92:dc:35:8c:a1:77:f3:30:e5:77:e4:7c:4b:
36:b2:fd:b5:d2:b5:5f:2d:9c:de:ac:77:1f:17:1d:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A2:F8:E2:2B:3D:D8:E7:96:74:9F:B7:76:4A:B2:97:FE:DE:E9:C8
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QKL44is92OeWdJ-3dkqyl_7e6cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:360::/44
Signature Algorithm: sha256WithRSAEncryption
7e:4d:de:24:6a:2b:8d:28:60:8a:2d:f8:85:4e:3f:59:7a:88:
3e:34:4f:59:0a:87:3f:a1:3d:8e:14:12:ed:4f:71:34:de:f9:
ac:b5:53:2f:44:ec:2c:cd:52:30:ac:a6:f0:47:2c:51:10:3c:
2b:13:15:1b:f8:97:6f:65:a3:f6:1f:8c:04:2d:d9:2d:9a:03:
27:9b:e8:e0:11:3a:19:46:18:88:8a:53:eb:e3:5d:d5:dd:58:
63:7d:87:0d:70:dc:eb:10:ca:d0:c5:e6:96:67:61:2b:2a:ba:
17:02:17:67:dd:cc:bb:74:6b:d6:ad:47:2a:f1:e8:b9:44:77:
24:3c:a8:48:eb:db:85:01:55:42:0d:ce:e7:57:ff:79:00:57:
e4:0d:56:7a:da:70:c1:2d:05:1e:e9:2c:df:bd:ca:b6:0d:8b:
92:86:43:e0:c3:8c:b8:41:bc:ec:e8:7d:2f:b3:db:d6:c0:4c:
77:e4:c4:7b:01:b3:35:fa:15:9d:e4:17:da:cb:5f:3e:ee:c4:
ed:7f:9b:59:cc:81:f5:cd:6c:89:b1:7a:4c:07:26:46:93:66:
d2:d7:e4:f2:b2:cc:0f:39:0d:95:71:3d:f0:56:ed:c1:e0:e9:
de:b4:6b:40:6d:3a:3f:f2:a0:6d:84:5a:68:2c:29:c8:ef:02:
47:28:73:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYiL+Bc6iGl3MbOEhrz5TEkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwNjA1MTQzMTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGEyZjhlMjJiM2RkOGU3OTY3NDlmYjc3NjRhYjI5N2ZlZGVlOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXay9Tr7zLq4ec7lZWUIyMIZcOlQ
Z3s0whq1RVRxTmM3iLaZLhOpbOaTvCJ5BDKakQkEE2N7jcEbhehcJZ3c2+bf2IxU
jRNt3lX/B2vnWtEPC8U2FG13OgvC5WAIVIjH7TRrWYVj/rj+P3YKcVUv+cID4wIO
OoJ83pE65W9FiVSf32eNkuNzGE4lwfDWohd1f2zQyvUfspTMM6kyVOqDNCCeVgo8
BOB3mXJI/oDnXgYsJVKNqY2Bg9e91fu/J1u/JtQ/Tx4rWgOB0KIXnZ2nHbaT1yfl
bI2Qcfhrx2I/bU5bJ5LcNYyhd/Mw5XfkfEs2sv210rVfLZzerHcfFx1w6QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFECi+OIrPdjnlnSft3ZKspf+3unIMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvUUtMNDRpczkyT2VXZEotM2RrcXlsXzdlNmNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wANg
MA0GCSqGSIb3DQEBCwUAA4IBAQB+Td4kaiuNKGCKLfiFTj9Zeog+NE9ZCoc/oT2O
FBLtT3E03vmstVMvROwszVIwrKbwRyxREDwrExUb+JdvZaP2H4wELdktmgMnm+jg
EToZRhiIilPr413V3VhjfYcNcNzrEMrQxeaWZ2ErKroXAhdn3cy7dGvWrUcq8ei5
RHckPKhI69uFAVVCDc7nV/95AFfkDVZ62nDBLQUe6Szfvcq2DYuShkPgw4y4Qbzs
6H0vs9vWwEx35MR7AbM1+hWd5Bfay18+7sTtf5tZzIH1zWyJsXpMByZGk2bS1+Ty
sswPOQ2VcT3wVu3B4OnetGtAbTo/8qBthFpoLCnI7wJHKHMg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org