Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QXwd_9bfyAminCC_D4cMqarEnl8.roa
File: QXwd_9bfyAminCC_D4cMqarEnl8.roa (raw, json)
Hash identifier: krXt5yjXEBk5qU+8FO9a4p/vAFx2KZrV2b09lZ3O7SY=
Subject key identifier: 41:7C:1D:FF:D6:DF:C8:09:A2:9C:20:BF:0F:87:0C:A9:AA:C4:9E:5F
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0187DE89DCAD67680302A7FBCBD61EA77BF6
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QXwd_9bfyAminCC_D4cMqarEnl8.roa
Signing time: Tue 02 May 2023 22:16:29 +0000
ROA not before: Tue 02 May 2023 22:16:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198889
IP address blocks: 2a12:bec0:2c0::/44 maxlen: 48
2a12:bec0:2ce::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:de:89:dc:ad:67:68:03:02:a7:fb:cb:d6:1e:a7:7b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 2 22:16:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=417c1dffd6dfc809a29c20bf0f870ca9aac49e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:fe:c0:d6:ba:e5:a5:c2:cd:6c:84:32:c1:
eb:25:35:ac:fd:d4:49:56:e0:ae:be:70:b9:81:02:
9d:8e:88:c2:37:05:59:5f:8f:61:a9:29:9d:06:f7:
51:20:6f:94:6d:84:03:1d:1e:f4:f8:e6:5e:1d:e3:
e6:bc:c1:62:88:37:f1:10:4c:6c:8b:97:4a:8f:11:
d2:71:fb:08:a2:19:e1:32:3d:53:89:ef:0a:d9:0b:
6b:f0:d5:f7:02:c0:4c:1e:a1:6f:a6:97:ea:62:56:
b4:5c:3a:a2:90:99:d3:b5:d3:e9:95:7a:ba:56:c7:
40:90:02:52:11:bb:72:e4:8a:2b:10:42:2a:4c:a9:
f7:a8:87:5e:1f:c9:67:a5:d2:49:be:f4:70:8e:7d:
9b:70:f1:52:f2:ee:83:a2:38:fd:7f:eb:98:c6:e9:
84:e5:15:83:55:04:11:7e:43:1d:ac:8b:31:67:d4:
a3:55:e6:94:dd:f1:13:9e:de:7e:e3:93:58:0c:c8:
f4:74:89:5e:31:25:2f:47:ad:d1:08:78:c8:2d:ad:
96:d0:53:ec:9d:35:9e:81:4d:00:87:c6:c0:43:ea:
3b:aa:d8:cf:4f:61:0d:1b:fe:11:8f:8b:1a:61:24:
20:cb:18:fb:fa:9f:b3:c9:4a:44:86:5d:db:81:72:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7C:1D:FF:D6:DF:C8:09:A2:9C:20:BF:0F:87:0C:A9:AA:C4:9E:5F
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QXwd_9bfyAminCC_D4cMqarEnl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2c0::/44
Signature Algorithm: sha256WithRSAEncryption
99:26:08:dc:52:51:2d:2e:73:20:d7:c9:69:76:93:fa:a9:38:
85:41:1b:38:d6:a0:22:d4:8b:74:3b:54:8e:ee:29:36:e6:04:
6a:ab:4e:3c:ed:59:40:b9:fc:8a:bf:c8:a5:d6:a6:57:cc:1e:
fe:bb:65:1c:66:24:c0:2f:73:c7:ab:14:eb:c1:8f:26:05:22:
38:03:bf:c7:79:41:01:30:77:a3:34:00:1c:67:ee:26:ce:c3:
41:ca:2b:41:b4:0d:ab:32:73:0e:4d:14:cd:59:83:26:f2:96:
61:ff:e6:30:21:27:04:cc:8f:28:a9:b1:e8:c3:8d:cf:1f:36:
93:02:d7:3b:d1:51:44:91:c0:ec:45:da:a7:39:75:6c:0c:3e:
a4:f4:51:9d:c8:a3:e7:5e:a1:bb:14:cc:16:98:37:14:c7:db:
08:96:70:e3:2d:30:7b:f3:fc:17:6e:95:99:3d:de:4a:5b:62:
ed:05:d1:9d:e4:4a:b1:7d:bb:37:0b:61:53:58:aa:6d:28:2f:
63:b1:6e:99:5f:d8:02:93:9f:57:1d:aa:a8:9f:02:3d:f4:4d:
00:7b:91:66:37:7d:fe:8c:9b:2e:59:42:76:f9:4b:64:e9:ad:
b0:4a:12:63:65:cc:32:0b:8c:12:21:a8:6d:a0:56:c0:bd:c8:
a4:a1:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org