Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cqaJO_lAMu416oOR8kAhGeIvIBY.roa
File: cqaJO_lAMu416oOR8kAhGeIvIBY.roa (raw, json)
Hash identifier: /UxvKoYHccIEfHjeldmOTzcUr6Qq0cE+dIZA6/LozT4=
Subject key identifier: 72:A6:89:3B:F9:40:32:EE:35:EA:83:91:F2:40:21:19:E2:2F:20:16
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F796FBF426647F18B0FA9CDDF09A324
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cqaJO_lAMu416oOR8kAhGeIvIBY.roa
Signing time: Sun 01 Jan 2023 22:35:07 +0000
ROA not before: Sun 01 Jan 2023 22:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 2a0f:e381::/32 maxlen: 32
2a07:e343::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 27 Jan 2023 11:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:6f:bf:42:66:47:f1:8b:0f:a9:cd:df:09:a3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72a6893bf94032ee35ea8391f2402119e22f2016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:b5:fa:e2:d4:78:e8:ba:69:2b:ba:5e:2e:
36:17:3a:73:92:41:7b:f2:22:b7:97:6d:37:04:aa:
bb:00:37:ab:c9:a9:d3:20:95:d2:6a:b2:7d:0f:e9:
91:50:ca:63:8a:47:17:10:aa:b5:b1:c4:54:b1:11:
1c:60:ff:77:d7:1b:7f:cc:09:37:cb:46:71:1c:16:
ec:ea:57:e0:0c:2d:6e:1e:1e:42:09:dd:b3:e8:91:
69:b7:5d:ff:b1:ec:69:28:7c:f4:e7:7c:d4:21:0a:
4f:d8:d4:65:44:3d:6c:08:e7:e7:f6:42:09:fc:ce:
1f:77:db:3f:25:c4:90:3f:1a:31:c6:b6:da:fa:e4:
4a:92:ec:a3:6d:eb:23:65:10:35:68:6a:9a:2d:02:
af:6c:c3:8e:0d:46:d6:3a:7c:73:6f:a7:5d:18:c1:
53:a5:d8:cc:70:4b:38:bc:39:b4:5a:f8:f8:4a:97:
fd:15:f2:af:e5:e5:23:17:21:7b:0c:86:69:70:ba:
92:2e:ce:cd:aa:f4:e8:ad:a6:09:cb:91:9a:4b:80:
5d:da:82:f6:40:d9:17:e3:e9:09:31:53:cb:6e:b3:
e5:51:d0:24:99:73:ce:ea:c3:a6:0d:6e:f5:ed:ce:
37:16:91:ab:b9:5f:b5:62:55:df:01:1d:b5:9c:6d:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A6:89:3B:F9:40:32:EE:35:EA:83:91:F2:40:21:19:E2:2F:20:16
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cqaJO_lAMu416oOR8kAhGeIvIBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e343::/32
2a0f:e381::/32
Signature Algorithm: sha256WithRSAEncryption
3d:65:98:dd:53:77:61:2c:ce:a4:d9:4f:a6:10:ed:d0:f6:db:
87:6b:60:4e:a2:c4:17:f4:5b:b9:28:ac:fc:43:02:6e:12:ae:
3a:7e:03:71:ca:58:f1:8f:90:7b:5a:d1:71:fb:00:7a:72:ef:
a6:a2:e2:a8:51:50:8c:9f:ff:fd:8a:ea:30:59:a5:bc:36:8d:
a2:de:49:de:97:6b:23:eb:43:f7:db:b4:47:80:a7:b5:63:4b:
f4:e8:6f:e9:2f:33:5d:1c:6c:d4:12:e6:aa:1b:b3:6d:7f:f4:
77:ce:50:54:b8:48:d7:bb:c4:cf:9b:65:8d:44:fd:fd:32:97:
71:f2:b6:7e:51:ce:e7:59:8a:45:3f:6e:c8:29:6d:53:89:e2:
b5:24:d0:0b:76:c9:83:64:2d:bc:22:8a:bd:6e:b8:37:32:80:
3f:49:f5:0a:54:c5:8c:13:f5:b9:bd:bd:cc:20:71:96:5b:50:
09:81:60:5a:cc:fd:53:7e:a9:17:2a:98:22:56:fe:ed:c5:c5:
23:d6:82:99:6e:c9:2c:65:c7:9a:f5:19:ec:1f:b0:20:bb:75:
38:52:e6:da:1f:a7:c4:45:b1:75:89:79:86:90:5b:b7:84:ea:
61:70:01:3d:d9:0d:c1:dd:c6:f9:08:a7:5a:bd:bb:9c:3b:29:
82:a1:0f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:52 2024 by rpki-client on console-fra.rpki-client.org