Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/q7WVkxi97DKb1Z6MK8sobyfvJ2U.roa
File: q7WVkxi97DKb1Z6MK8sobyfvJ2U.roa (raw, json)
Hash identifier: 2uR+15oKljhnEwlsP0U8zMft5xLNzVeHNCE21k5BBPM=
Subject key identifier: AB:B5:95:93:18:BD:EC:32:9B:D5:9E:8C:2B:CB:28:6F:27:EF:27:65
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 018571F9F570BDCD750D36405891DBA9B0CB
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/q7WVkxi97DKb1Z6MK8sobyfvJ2U.roa
Signing time: Mon 02 Jan 2023 10:14:44 +0000
ROA not before: Mon 02 Jan 2023 10:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8481
IP address blocks: 2a02:158:ffff::/48 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:f5:70:bd:cd:75:0d:36:40:58:91:db:a9:b0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Jan 2 10:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abb5959318bdec329bd59e8c2bcb286f27ef2765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:00:2a:8d:b9:51:4d:ae:f7:e1:89:59:4b:
29:ea:08:99:37:ca:02:14:8d:bf:26:82:11:3f:41:
66:3e:a2:98:7c:53:99:20:89:5f:5a:bb:9b:e5:9d:
fa:a2:f0:2a:a1:0f:a2:ec:6c:b8:9e:27:c4:ac:6a:
44:94:d6:31:e0:40:6a:70:93:1d:8e:a4:0c:56:58:
8a:40:4b:a8:7b:7b:a4:e2:de:9e:a5:7a:41:b5:d8:
cb:37:14:17:62:0f:fa:a6:c9:31:58:b5:a8:30:2c:
0c:bf:31:94:31:a5:84:70:3c:5e:43:e5:15:26:67:
ed:af:6f:fb:2a:09:b0:b0:35:5d:a0:5f:25:8a:6a:
d9:fe:4b:f7:48:6d:a3:9a:f8:f8:4e:2f:6d:f4:13:
73:3c:32:b4:65:f0:af:8a:f1:55:bd:d1:a2:c3:98:
a6:c4:f3:01:52:b2:79:79:26:35:9f:b3:6f:9b:d0:
71:6a:f8:3f:41:a6:ea:5e:a6:c7:10:b4:66:d4:45:
4d:ca:cf:3d:03:2d:c8:54:4f:ba:8d:11:0f:be:34:
b0:71:2b:e8:1b:25:a2:52:a6:65:04:a3:80:fa:05:
7c:06:17:b3:a4:eb:ca:2f:a4:72:73:fe:35:07:66:
24:0c:9b:27:44:c9:e9:13:65:c7:d5:12:a9:39:21:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B5:95:93:18:BD:EC:32:9B:D5:9E:8C:2B:CB:28:6F:27:EF:27:65
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/q7WVkxi97DKb1Z6MK8sobyfvJ2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:158:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
88:fa:d5:31:b8:c4:ec:09:94:bc:ed:9c:03:e0:90:dc:a6:53:
e2:f5:8a:4b:41:bb:64:90:a6:4e:3d:88:da:07:e8:9d:50:1c:
25:0b:8e:47:9a:3f:64:95:e5:29:46:b7:69:58:bd:3d:4f:c6:
be:e4:e4:01:47:b4:bf:d0:55:4b:ad:55:07:0c:24:5d:17:35:
16:6a:ab:7c:be:fb:b5:bc:14:cf:d2:4b:3b:03:ee:3c:c9:31:
fd:3a:26:24:65:94:a8:3e:93:c4:59:f1:c7:ea:f9:6c:ed:79:
36:da:b8:dc:00:03:ff:4e:4a:02:97:61:12:c3:27:cd:6f:87:
01:2c:e9:2f:2e:67:77:2a:1d:7f:27:48:a8:c7:f0:a6:62:b9:
3e:ee:c7:1a:2d:29:22:5f:23:06:d6:46:a4:5a:82:88:db:bf:
cb:8f:c7:36:44:3e:e2:d6:e5:66:6a:a6:10:f0:e5:5e:71:86:
60:c3:22:ba:34:d9:40:b5:43:8e:4e:d0:8f:e6:46:28:db:e7:
99:21:85:83:de:4a:6b:0d:0a:a8:9e:2c:b8:08:c1:cc:db:5c:
bf:ed:bb:12:47:24:47:a4:7c:4e:35:76:9c:8a:e8:99:42:49:
9d:17:88:f5:9f:a3:91:f1:94:a6:ad:c0:87:ed:0a:1c:57:dd:
8c:63:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:08 2024 by rpki-client on console-ams.rpki-client.org