Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QhP0K7GQF1EJHoV7RLiavpKM-MM.roa
File: QhP0K7GQF1EJHoV7RLiavpKM-MM.roa (raw, json)
Hash identifier: Ie7k9GNaOX6jsQ7t5TxTYqI+6qF/1a7OK9UKGZ7LF/g=
Subject key identifier: 42:13:F4:2B:B1:90:17:51:09:1E:85:7B:44:B8:9A:BE:92:8C:F8:C3
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018737EDA873A3E53A4B9863E6EDEE770E6E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QhP0K7GQF1EJHoV7RLiavpKM-MM.roa
Signing time: Fri 31 Mar 2023 13:48:54 +0000
ROA not before: Fri 31 Mar 2023 13:48:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3292
IP address blocks: 2a12:bec0:18d::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Apr 2023 14:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:ed:a8:73:a3:e5:3a:4b:98:63:e6:ed:ee:77:0e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 31 13:48:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4213f42bb1901751091e857b44b89abe928cf8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:84:2a:0c:18:57:20:a2:22:31:46:5d:80:
f6:34:65:3c:84:0e:30:cb:f3:1d:7a:e8:67:8d:6a:
c9:35:94:48:82:f5:e8:92:fc:9e:b8:66:ab:44:ab:
56:e7:4e:c1:61:a3:61:da:5c:a2:39:ab:36:a4:71:
63:27:7e:a1:1f:0c:5a:58:75:17:fa:64:ac:1d:cb:
74:ee:46:da:ce:59:f6:9f:6c:59:fd:7b:12:ac:76:
45:4d:e1:d6:7c:2d:72:e1:39:76:95:8d:9c:c9:46:
a0:22:67:ed:50:9e:d0:df:e7:f3:16:7d:52:84:95:
e3:54:43:45:e7:7f:bf:1c:1c:38:bb:12:94:c8:07:
d3:dc:24:5d:d4:51:64:f5:38:7c:a4:52:02:b0:ce:
35:09:fa:ee:93:04:5d:db:65:54:b0:3c:fe:12:3d:
03:46:d8:45:6e:b6:46:91:50:cd:e9:1d:7c:92:cc:
b4:1f:fc:09:66:fc:d2:da:4e:db:c0:04:c9:75:ec:
42:a3:50:95:d5:71:74:7f:da:5f:f8:2d:01:12:d4:
4a:85:34:55:08:50:3b:e3:41:3c:d9:70:81:53:b6:
26:36:80:27:a9:39:dd:4f:a4:93:bc:94:45:86:5d:
9c:83:dc:d1:e2:00:ed:f7:3f:71:ea:16:cf:d0:94:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:13:F4:2B:B1:90:17:51:09:1E:85:7B:44:B8:9A:BE:92:8C:F8:C3
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QhP0K7GQF1EJHoV7RLiavpKM-MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:18d::/48
Signature Algorithm: sha256WithRSAEncryption
50:52:51:42:e6:c9:d2:23:28:bd:88:9b:32:8c:44:25:ea:5a:
9c:a1:e6:43:cd:5f:49:49:e1:ac:7a:61:10:97:9e:cb:d4:a3:
3a:d9:fe:f9:84:98:2a:b8:52:2e:9d:60:ce:ac:db:1d:0c:8b:
ba:02:2f:7b:d8:16:0d:8a:0d:01:5d:8a:e9:02:a3:df:b9:49:
7f:0f:a5:ae:cf:b5:fe:2b:cd:ae:b4:bd:6f:e1:85:1a:16:b2:
81:4c:cd:a3:23:aa:f2:14:98:3d:a4:21:75:03:8d:09:00:a5:
11:c4:6a:70:18:2a:1e:33:2d:69:40:e0:41:1f:45:0f:0e:78:
4c:71:4e:a6:0d:c7:b1:81:0e:03:b6:61:b6:e5:1e:db:2f:1c:
82:cf:4f:b2:86:df:47:cb:79:40:e5:e1:f1:e4:39:fe:92:d5:
5c:ff:d9:7b:a6:9e:90:95:9f:3e:cc:93:bb:4e:0e:e6:f7:42:
d9:cc:64:9d:6b:a8:ba:24:60:94:b3:d7:a8:b5:f0:98:34:41:
77:61:03:58:33:be:0c:7e:3a:b8:b8:2c:02:be:a2:42:88:10:
dc:42:a3:0e:30:d8:cd:3d:43:a6:ed:34:ab:21:7b:ee:3c:cb:
d3:08:52:41:f9:73:e6:d6:a8:e1:c2:6d:6a:86:30:59:60:e1:
55:6d:e7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org