Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QKV-fZIXLm0OHjI5wlPpteiiczw.roa
File: QKV-fZIXLm0OHjI5wlPpteiiczw.roa (raw, json)
Hash identifier: BIX4FgHur5JEcAjpELzqDf6uFwLEwKUpOvbiyeUChIA=
Subject key identifier: 40:A5:7E:7D:92:17:2E:6D:0E:1E:32:39:C2:53:E9:B5:E8:A2:73:3C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018B047F27475260AEDE6827034F0A6C4B8B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QKV-fZIXLm0OHjI5wlPpteiiczw.roa
Signing time: Fri 06 Oct 2023 10:18:43 +0000
ROA not before: Fri 06 Oct 2023 10:18:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216201
IP address blocks: 2a12:bec0:530::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:7f:27:47:52:60:ae:de:68:27:03:4f:0a:6c:4b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 6 10:18:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40a57e7d92172e6d0e1e3239c253e9b5e8a2733c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:71:2a:2b:9a:5a:60:95:0d:88:c8:02:bc:
ce:7b:0c:d7:03:42:c9:cc:a1:02:2f:be:4b:5d:3a:
90:71:ce:e4:a8:21:9d:c6:da:12:a8:03:2a:d1:96:
f0:74:de:dd:6f:80:36:6f:9e:44:16:2c:88:ad:97:
a4:67:3a:19:3d:0b:f3:fb:36:0c:e4:a6:2d:cf:51:
ae:5e:4c:2d:e0:15:c7:f7:a8:f1:7e:4c:43:19:49:
15:de:f8:09:7a:fa:87:43:bd:d1:ac:31:a5:bb:da:
96:ea:84:8b:16:3d:e9:00:dc:ee:51:28:20:48:e8:
f8:03:6a:eb:41:0e:39:be:3b:74:35:f4:15:65:b4:
6f:be:01:04:7d:f1:0a:32:8f:5b:d7:47:1a:43:cd:
30:fe:1f:cc:48:de:64:d3:5d:31:a3:aa:4b:fc:11:
21:f0:a0:b0:8c:71:dd:08:e0:a3:cb:48:ec:c2:3a:
80:11:16:29:ae:13:09:64:65:df:a3:c9:a2:cf:3a:
3d:8e:6d:65:e7:cd:1f:d8:1b:fd:86:54:42:26:8a:
5d:f5:de:8d:b1:79:04:71:40:0a:e8:37:b7:c9:38:
c6:cd:02:16:b2:a5:35:52:b7:09:6e:49:4e:64:1d:
20:24:ee:74:da:2c:62:5c:bb:c9:49:71:48:08:1d:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:7E:7D:92:17:2E:6D:0E:1E:32:39:C2:53:E9:B5:E8:A2:73:3C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QKV-fZIXLm0OHjI5wlPpteiiczw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:530::/44
Signature Algorithm: sha256WithRSAEncryption
5e:17:24:02:fc:91:fe:b9:c5:49:a3:d1:cc:fd:8d:23:6a:49:
73:12:ef:fa:2f:cf:3e:72:61:00:d5:ad:4b:b6:20:13:4e:ec:
e8:22:e7:b4:9b:a8:38:86:6f:c0:3a:a4:a5:b7:f8:f1:44:3f:
0a:a5:2d:81:99:df:b1:2b:14:76:bc:df:cd:c1:62:0a:6d:8b:
92:91:95:0d:b7:cf:8c:a5:f5:09:cc:9e:25:4f:78:9d:06:81:
d5:55:d1:fc:88:a1:1c:7a:64:e5:f9:17:d1:3d:5c:34:c4:f3:
e1:71:0a:68:64:e6:47:1a:b4:e5:94:76:dc:68:48:65:36:fd:
36:27:ec:fe:5e:66:b1:4f:74:3e:7f:6b:a2:d5:45:e8:80:3f:
05:06:75:27:d7:8c:36:18:9d:8d:8d:84:ec:f7:cf:d9:d4:d1:
28:da:8c:eb:57:98:5b:02:de:13:cf:38:c2:44:84:3c:7e:b6:
dc:14:6d:19:a1:52:64:8c:6d:8c:a4:c9:16:e8:a8:f8:6e:0f:
2a:ba:75:8e:c5:c2:d1:fa:fd:60:91:a4:14:34:d4:81:c1:6e:
b9:4b:12:50:1e:55:69:8b:50:59:d6:bb:af:c6:de:0a:1e:6b:
a6:05:b2:c0:88:26:0f:bb:b8:b9:f3:ec:59:12:62:2e:fc:05:
65:0f:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org