Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/hqEO0OiVPoEPUcXTJEsFTxdZAM0.roa
File: hqEO0OiVPoEPUcXTJEsFTxdZAM0.roa (raw, json)
Hash identifier: 24K3W9BsKhgODzaDUGpMTWdJQxMz5gbDladJVFUS/bw=
Subject key identifier: 86:A1:0E:D0:E8:95:3E:81:0F:51:C5:D3:24:4B:05:4F:17:59:00:CD
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 019266BC72DE5B09F1F909FB31F68E2F1050
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/hqEO0OiVPoEPUcXTJEsFTxdZAM0.roa
Signing time: Mon 07 Oct 2024 11:27:59 +0000
ROA not before: Mon 07 Oct 2024 11:27:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50907
IP address blocks: 2a12:bc0:5::/48 maxlen: 48
2a12:bc0:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Oct 2024 15:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:bc:72:de:5b:09:f1:f9:09:fb:31:f6:8e:2f:10:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: Oct 7 11:27:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86a10ed0e8953e810f51c5d3244b054f175900cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:89:d8:54:a6:b3:bc:b6:52:97:66:45:a8:
2c:2c:26:64:bb:42:ad:3b:02:64:90:9a:23:7f:34:
48:48:05:6e:12:8d:a1:1f:b4:25:ab:2c:7c:e2:7c:
da:2b:6a:84:f1:4c:c7:ca:a0:45:e7:d4:14:bd:2b:
fc:d8:d9:52:c7:61:bb:a7:97:d0:c0:fb:4d:13:e9:
58:ea:37:6d:12:06:79:04:3f:57:14:c8:b2:9b:0b:
52:12:83:94:ed:51:72:dc:37:56:44:33:8a:d6:45:
ec:ef:fe:a9:f3:c1:a0:cb:c1:e5:a0:e7:81:b3:d3:
05:ca:04:d2:fe:80:2e:83:71:ac:c1:d4:9e:41:cd:
2a:5b:c0:25:75:05:5b:c1:bd:ee:7a:c9:ec:64:dc:
26:55:4e:af:da:6a:59:f5:d8:16:12:3c:1f:a5:26:
b8:d9:b6:a8:f3:da:a7:67:11:c2:05:76:91:7c:39:
ce:7c:ff:13:d2:43:2e:cd:3f:2e:35:db:77:87:14:
cf:78:a8:79:19:18:ae:44:c9:c9:73:a4:81:4b:01:
92:0c:74:e7:c6:6a:23:5f:fe:a0:9b:66:8d:3a:46:
f4:bc:9f:0f:58:08:92:32:c3:92:c5:ac:13:31:d5:
ed:cb:bd:14:b3:b5:1c:f2:f4:bd:f5:40:e0:ae:a8:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A1:0E:D0:E8:95:3E:81:0F:51:C5:D3:24:4B:05:4F:17:59:00:CD
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/hqEO0OiVPoEPUcXTJEsFTxdZAM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bc0:5::-2a12:bc0:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
66:d0:49:45:3f:df:8a:e7:57:dc:26:ce:cd:99:59:85:41:e1:
64:87:20:91:55:ae:5b:7c:2f:50:f8:6d:64:19:5e:4a:72:c4:
9c:59:36:ba:98:ac:47:c8:88:af:dc:60:97:ac:d6:71:12:d1:
25:7e:dd:81:60:4b:f4:9a:78:98:6a:87:d3:1e:03:ea:4f:83:
00:de:0d:97:5f:be:59:4f:c2:eb:dd:9a:94:d6:6d:d9:d6:75:
1a:ea:21:a1:57:3e:96:10:30:5c:eb:a8:0b:f7:e1:6c:12:d9:
82:e0:4f:3c:06:1f:05:69:f7:8c:05:2b:1a:81:87:f0:44:1d:
5e:4e:0c:66:03:01:d8:94:aa:3b:09:03:40:a2:02:6b:6a:bf:
4e:3f:58:98:3d:1c:f2:eb:4f:57:6b:a9:1d:d1:91:78:dd:e6:
22:dc:ec:0c:01:7b:aa:4b:bc:76:67:59:50:16:91:5d:52:b7:
2e:00:c3:61:98:10:a0:a1:dd:04:7d:f7:1d:3f:b6:b2:b6:e8:
d3:71:22:dd:83:41:a8:62:42:77:09:be:6b:03:f2:1b:f3:02:
2a:3a:20:d0:07:74:8d:aa:d3:e0:d0:90:98:71:a5:bf:0a:54:
db:71:99:4b:5d:9d:f4:95:99:67:3f:05:ef:3d:cb:04:aa:5d:
93:06:a8:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 7 19:10:56 2024 by rpki-client on console-ams.rpki-client.org