Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/QNa4pf_AmhsS3BYVmmkOp40bynU.roa
File: QNa4pf_AmhsS3BYVmmkOp40bynU.roa (raw, json)
Hash identifier: X5vfFw2sY0XuhhDlBWXtcOka/ku36dzjY9lwVAMaC9Y=
Subject key identifier: 40:D6:B8:A5:FF:C0:9A:1B:12:DC:16:15:9A:69:0E:A7:8D:1B:CA:75
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191321D452EC34CAA133DA28BD2A472219B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/QNa4pf_AmhsS3BYVmmkOp40bynU.roa
Signing time: Thu 08 Aug 2024 13:11:04 +0000
ROA not before: Thu 08 Aug 2024 13:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 08 Aug 2024 14:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:1d:45:2e:c3:4c:aa:13:3d:a2:8b:d2:a4:72:21:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 8 13:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40d6b8a5ffc09a1b12dc16159a690ea78d1bca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:95:d3:33:3c:c8:ab:c2:8b:06:7f:4c:78:
d3:9d:12:3f:82:4a:7f:fd:0f:11:b3:e6:97:11:c7:
a7:b6:bf:e5:2f:aa:17:a4:0d:62:b4:72:90:42:fe:
af:10:65:08:ea:04:3b:26:21:68:9c:7c:a6:fa:7e:
38:4d:23:52:47:d7:53:8e:f1:07:bd:6e:35:d8:d6:
6d:d4:5c:d9:e9:13:7b:b9:82:c1:64:2a:01:0c:20:
79:16:da:bb:8c:99:c7:90:1c:10:98:5c:46:f6:6a:
83:c7:43:be:2d:ae:57:30:5b:2d:42:1a:4c:65:1b:
47:c1:4f:b5:36:ce:f6:e8:8b:b4:15:0b:38:08:5e:
49:47:13:f9:ee:70:44:c4:a4:53:bb:01:b9:51:46:
40:20:51:0c:cd:02:35:a5:13:c6:db:f2:b6:96:90:
9b:5b:05:fa:b3:01:6d:7e:f1:4c:2a:4b:42:b3:e7:
aa:92:42:83:6d:35:49:8e:a4:38:4f:92:6b:f9:4f:
ff:37:65:a4:55:67:cd:90:18:9e:e1:bb:9d:45:61:
0f:73:c5:92:ce:1e:5b:c7:31:c6:7f:fb:1c:76:d6:
7d:0f:57:5f:81:61:6f:03:f5:a1:0a:37:3f:ca:11:
b1:84:d0:a2:49:30:02:93:6a:ed:22:f1:ae:a2:6a:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:B8:A5:FF:C0:9A:1B:12:DC:16:15:9A:69:0E:A7:8D:1B:CA:75
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/QNa4pf_AmhsS3BYVmmkOp40bynU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
36:2b:25:f0:49:d1:76:4b:7d:f5:18:fa:50:29:48:df:42:41:
bf:0f:99:b5:2e:13:49:57:d7:db:ca:51:12:12:92:e9:55:59:
d3:1f:d4:e2:fc:e7:25:0d:98:9c:ab:60:33:4f:45:44:15:9e:
1f:7e:7b:7f:d4:04:2b:35:be:c9:01:d8:0b:e8:95:e1:a0:15:
55:58:55:c4:10:05:e8:01:90:80:57:35:b5:0f:ff:87:53:a6:
61:96:94:b1:c8:3e:9b:5a:dd:73:44:df:a8:1d:93:2d:83:0a:
bd:31:0b:94:c2:6f:e4:9d:f3:5d:e8:9b:82:3c:95:c3:bc:fa:
1b:77:79:90:bd:0a:15:05:59:92:09:48:75:82:88:54:30:43:
e7:f2:af:15:14:ac:25:59:30:57:9f:d8:25:0e:e1:8b:e5:bf:
25:83:cf:6d:b7:3e:9f:1d:79:e9:97:a5:91:e5:cd:c9:57:da:
6b:85:43:8c:42:f4:17:62:2c:f0:40:56:31:b1:2b:19:4b:ae:
a8:d1:89:64:d6:56:b7:5d:44:35:c5:d4:6c:ad:ce:a9:38:cc:
35:05:1b:72:2e:b7:c0:e5:88:32:40:c8:19:a9:46:26:88:9e:
b9:2d:14:94:b7:aa:69:da:6d:20:48:9f:d3:ed:fe:85:2e:4b:
bc:4f:1b:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:10 2025 by rpki-client