Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/Ql_t9T3E18xRsdvzzhArDP62O9Y.roa
File: Ql_t9T3E18xRsdvzzhArDP62O9Y.roa (raw, json)
Hash identifier: lVdtXN5qZoOW4vWsXAQhlaURER7cZ7dl+ezaUGkoK/I=
Subject key identifier: 42:5F:ED:F5:3D:C4:D7:CC:51:B1:DB:F3:CE:10:2B:0C:FE:B6:3B:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 01856F796C4B95A3DBA00A524E79E0B9D48D
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/Ql_t9T3E18xRsdvzzhArDP62O9Y.roa
Signing time: Sun 01 Jan 2023 22:35:06 +0000
ROA not before: Sun 01 Jan 2023 22:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42845
IP address blocks: 2a00:7200::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 14 Mar 2023 15:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:6c:4b:95:a3:db:a0:0a:52:4e:79:e0:b9:d4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Jan 1 22:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=425fedf53dc4d7cc51b1dbf3ce102b0cfeb63bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:f7:4e:79:31:a7:eb:5f:29:ff:27:64:bc:
a8:09:c9:62:80:9e:bd:8a:2f:f5:b2:6b:5b:53:e3:
bc:4f:f0:76:c3:7f:15:94:1e:1d:10:7b:4e:0d:b3:
ef:60:d9:25:70:ed:dd:a9:68:83:eb:65:99:d5:f9:
aa:9e:91:a4:70:e5:90:c3:db:13:be:6d:63:e3:c3:
73:2a:02:13:35:c7:98:d9:d9:71:ad:a4:cc:14:55:
fb:b0:55:2f:d2:99:f6:56:91:0c:16:a7:a4:c2:95:
57:2f:6f:68:63:d3:04:7c:81:85:f1:ac:51:2f:a0:
58:67:73:52:54:fa:2e:01:7e:ff:b2:76:09:47:05:
27:1e:b6:71:9c:6d:09:dd:5e:6a:38:ba:24:56:e1:
20:35:d2:94:26:d3:43:82:1f:05:9c:fe:31:8e:0a:
0b:ef:ef:47:5d:d2:71:1b:16:38:55:c6:6a:be:9d:
1b:a1:2c:f9:9e:44:66:b8:c8:4d:f4:ff:4c:8c:4d:
34:3c:5a:c7:56:e5:d9:f2:46:b2:06:c8:7a:0a:7f:
31:af:3d:aa:b0:32:03:61:01:85:d0:95:5b:6d:1d:
ea:29:ef:4c:f5:4a:54:0e:ac:0a:a2:df:2c:2c:a9:
6c:d0:a9:9a:f2:83:69:ee:df:73:0a:d2:77:66:ae:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5F:ED:F5:3D:C4:D7:CC:51:B1:DB:F3:CE:10:2B:0C:FE:B6:3B:D6
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/Ql_t9T3E18xRsdvzzhArDP62O9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7200::/32
Signature Algorithm: sha256WithRSAEncryption
55:56:66:e6:5a:9a:ed:b7:55:1f:ff:7a:98:47:45:2c:2d:36:
8c:37:35:b8:45:78:2a:e9:76:7a:ae:8b:9e:ca:c0:5c:42:c0:
6d:27:28:79:c0:9e:5f:d7:06:cf:0a:ad:5b:37:9d:30:b7:e2:
31:41:74:f7:9b:76:fc:31:9c:9a:ed:a1:79:7d:bc:a7:72:19:
e1:96:36:16:94:69:89:35:7f:1a:fd:2a:fb:68:2e:6e:4a:ed:
89:23:cb:45:cb:39:cc:13:ba:d0:ce:a9:4b:a1:7b:7e:d8:d5:
0c:a1:30:a5:d8:6b:11:e0:89:bc:73:76:34:1f:b2:10:54:8b:
8b:b2:3c:4c:2c:7e:e2:75:43:e6:60:b9:5a:13:27:99:2e:42:
b9:3a:54:13:2e:33:8d:71:9b:60:c7:3a:02:2a:eb:01:06:57:
9e:b5:32:0b:6b:20:64:05:1a:1b:31:a0:0e:6a:7f:37:20:50:
1f:00:56:ef:0f:73:ce:5d:4c:e0:2f:60:b6:3d:ac:9f:ec:e3:
27:01:05:08:e5:30:a1:40:38:de:7e:7a:27:50:65:a4:d9:d8:
5b:07:2a:95:58:a9:67:7b:1d:7d:ec:d1:05:b1:34:bf:b1:1d:
da:8a:d8:e8:23:6b:cf:5c:b9:79:41:6d:d9:d8:c7:5c:48:88:
88:7a:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:23 2024 by rpki-client on console-ams.rpki-client.org