Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/QFMh0qYHE8er6hwIuwaR3fyGhMA.roa
File: QFMh0qYHE8er6hwIuwaR3fyGhMA.roa (raw, json)
Hash identifier: QFKvZQcHujQvsQBLBP8Mi8ps5H7RwswqAIgyg0CuBvg=
Subject key identifier: 40:53:21:D2:A6:07:13:C7:AB:EA:1C:08:BB:06:91:DD:FC:86:84:C0
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 018BA8DB738258D831237C6A6575368C74FC
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/QFMh0qYHE8er6hwIuwaR3fyGhMA.roa
Signing time: Tue 07 Nov 2023 08:17:16 +0000
ROA not before: Tue 07 Nov 2023 08:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 2a13:cb40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 07 Nov 2023 09:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:db:73:82:58:d8:31:23:7c:6a:65:75:36:8c:74:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Nov 7 08:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=405321d2a60713c7abea1c08bb0691ddfc8684c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6d:2c:a8:72:21:d2:ee:10:ea:7d:d6:84:d0:
4e:74:a5:6b:96:25:a8:4a:54:a5:a0:ba:c2:dd:7f:
6c:10:2f:e6:e2:7e:f4:77:f5:6b:41:df:25:de:08:
63:8f:25:4d:b2:92:f3:23:af:06:85:8d:59:64:65:
e8:1f:e7:f0:17:81:28:c5:ce:cb:05:dc:6a:05:3f:
c6:50:b1:5e:43:72:61:7c:f0:2a:c1:29:54:7b:7c:
d7:bb:6c:d9:d1:2c:58:ac:86:78:f4:7e:e3:11:4f:
d4:7b:2d:6e:55:81:02:81:ae:90:b7:c5:70:27:85:
49:1c:0a:24:65:cc:d7:b2:0e:42:9f:c3:05:2d:99:
cd:a8:79:5b:33:ae:e6:fa:b4:f9:30:8c:bd:b9:8e:
8b:77:f1:4c:5a:43:9b:11:a5:00:c1:bb:9a:a1:cf:
3c:d9:30:ee:6e:a9:e1:28:93:5d:9a:a1:45:50:fa:
6f:62:ae:2a:45:84:51:7b:d5:37:8a:15:10:34:f2:
f5:51:ac:29:5b:00:8b:84:e9:10:7d:f8:7e:b7:71:
3a:d9:9d:70:36:c0:53:ff:24:a2:5b:25:a5:a4:c1:
e7:4e:ff:f4:ab:c1:26:a2:80:cf:83:8d:a8:dc:6c:
8d:44:67:ab:39:df:e9:dd:4a:64:6d:95:9c:99:ea:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:53:21:D2:A6:07:13:C7:AB:EA:1C:08:BB:06:91:DD:FC:86:84:C0
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/QFMh0qYHE8er6hwIuwaR3fyGhMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
43:22:70:04:13:65:37:f8:44:cb:b0:bd:25:bf:e6:dc:13:2c:
0d:69:18:e4:2b:ba:38:e0:ed:6f:a9:59:47:c9:8e:1d:58:b5:
5e:df:db:0e:83:ca:db:6d:1a:b9:21:24:cb:f5:21:f0:d1:86:
2a:57:55:6e:a7:97:2d:9a:77:1e:ff:ba:f9:dd:3a:45:4b:1f:
c1:55:00:8f:49:65:5c:ea:80:bb:c4:fa:bf:d9:37:44:d2:3a:
f0:33:b7:00:c2:21:33:ac:a6:eb:8a:95:ba:a4:51:c3:e1:c0:
66:49:a6:0b:5e:6a:d6:b1:bc:fd:17:57:cc:5a:2f:43:e1:65:
57:60:d3:31:b3:05:66:6f:85:08:49:02:19:9d:3b:82:ce:31:
af:e7:53:5a:cf:6e:aa:19:1c:34:33:67:fc:82:0f:b9:27:e4:
0d:7b:87:cf:23:9d:93:37:0e:c8:08:48:d7:7f:c3:da:d1:d4:
c9:bd:27:32:5a:52:b0:9a:e8:48:99:06:8a:9c:f7:ea:d8:a2:
76:8e:c4:21:b3:12:57:9b:35:d0:00:51:bd:b4:08:66:00:16:
a3:83:bb:8e:13:f1:e3:7a:fb:a8:09:e8:e9:53:a4:79:cb:4a:
9b:89:a1:eb:6f:07:b2:a4:08:0f:a0:16:d4:48:b2:cf:0c:7e:
ba:ec:a2:10
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYuo23OCWNgxI3xqZXU2jHT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjMxMTA3MDgxNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDUzMjFkMmE2MDcxM2M3YWJlYTFjMDhiYjA2OTFkZGZjODY4NGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh20sqHIh0u4Q6n3WhNBOdKVrliWo
SlSloLrC3X9sEC/m4n70d/VrQd8l3ghjjyVNspLzI68GhY1ZZGXoH+fwF4Eoxc7L
BdxqBT/GULFeQ3JhfPAqwSlUe3zXu2zZ0SxYrIZ49H7jEU/Uey1uVYECga6Qt8Vw
J4VJHAokZczXsg5Cn8MFLZnNqHlbM67m+rT5MIy9uY6Ld/FMWkObEaUAwbuaoc88
2TDubqnhKJNdmqFFUPpvYq4qRYRRe9U3ihUQNPL1UawpWwCLhOkQffh+t3E62Z1w
NsBT/ySiWyWlpMHnTv/0q8EmooDPg42o3GyNRGerOd/p3UpkbZWcmeocBQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEBTIdKmBxPHq+ocCLsGkd38hoTAMB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvUUZNaDBxWUhFOGVyNmh3SXV3YVIzZnlHaE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPLQDAN
BgkqhkiG9w0BAQsFAAOCAQEAQyJwBBNlN/hEy7C9Jb/m3BMsDWkY5Cu6OODtb6lZ
R8mOHVi1Xt/bDoPK220auSEky/Uh8NGGKldVbqeXLZp3Hv+6+d06RUsfwVUAj0ll
XOqAu8T6v9k3RNI68DO3AMIhM6ym64qVuqRRw+HAZkmmC15q1rG8/RdXzFovQ+Fl
V2DTMbMFZm+FCEkCGZ07gs4xr+dTWs9uqhkcNDNn/IIPuSfkDXuHzyOdkzcOyAhI
13/D2tHUyb0nMlpSsJroSJkGipz36tiido7EIbMSV5s10ABRvbQIZgAWo4O7jhPx
43r7qAno6VOkectKm4mh628HsqQID6AW1Eiyzwx+uuyiEA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:22 2024 by rpki-client on console-fra.rpki-client.org