Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/Qg6GhXz7EJ2LqFOE2WYw-jqnqf4.roa
File: Qg6GhXz7EJ2LqFOE2WYw-jqnqf4.roa (raw, json)
Hash identifier: jlCNafMmJ3eAp/yZkfk58JSwqueLdPqL3e0GEpV5rJY=
Subject key identifier: 42:0E:86:85:7C:FB:10:9D:8B:A8:53:84:D9:66:30:FA:3A:A7:A9:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 01856F66D9DCA97760A9B8E9779E2805C921
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/Qg6GhXz7EJ2LqFOE2WYw-jqnqf4.roa
Signing time: Sun 01 Jan 2023 22:14:49 +0000
ROA not before: Sun 01 Jan 2023 22:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204896
IP address blocks: 2001:67c:1384::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:d9:dc:a9:77:60:a9:b8:e9:77:9e:28:05:c9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Jan 1 22:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=420e86857cfb109d8ba85384d96630fa3aa7a9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:0c:66:ea:f0:ad:71:61:59:3f:78:20:75:
77:75:84:d0:a5:ca:69:fe:b4:54:e3:94:2f:c7:41:
db:ad:ba:24:89:4e:fc:d2:c8:87:a8:64:4d:bc:09:
5d:26:eb:52:02:4f:20:ea:42:b2:d3:7d:55:38:40:
d6:25:1e:8f:80:31:61:fd:ed:4b:94:1c:29:3f:0d:
c6:c5:ef:1b:7e:1c:79:1d:36:1b:13:d4:a2:d9:8e:
44:e9:4f:20:eb:32:56:ff:a4:86:bc:0c:bc:56:d1:
f2:08:04:da:57:23:11:bf:32:36:2d:88:74:7a:4b:
31:9b:09:b8:0a:90:0a:c6:d4:bc:5b:f1:0b:a8:4f:
ad:f6:77:01:1d:aa:1a:15:ac:17:06:3f:09:9e:2a:
4d:cb:5c:23:66:24:65:09:a7:cd:e1:51:60:6b:a1:
99:fc:27:42:6d:85:9d:11:4d:88:84:44:09:94:45:
59:4a:bd:8d:90:6a:6a:1b:01:bc:4b:7e:79:b8:91:
17:8f:1e:24:a7:96:55:ca:77:aa:c3:c6:f1:e1:d9:
76:27:12:49:73:51:ad:48:c4:6f:65:b7:78:26:0a:
10:5a:4c:d8:40:6f:d7:a4:2a:29:7f:0a:08:3c:e8:
5a:1e:18:72:c1:14:33:05:29:ab:26:bc:a2:60:07:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:86:85:7C:FB:10:9D:8B:A8:53:84:D9:66:30:FA:3A:A7:A9:FE
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/Qg6GhXz7EJ2LqFOE2WYw-jqnqf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1384::/48
Signature Algorithm: sha256WithRSAEncryption
75:f8:b7:a5:6e:37:8b:4c:af:6b:81:66:0b:0f:39:df:de:f9:
d0:63:93:ef:20:58:be:e2:ce:a6:e5:dc:94:1a:4b:5f:a8:86:
13:93:d2:e5:17:8c:36:b3:00:65:91:2d:45:b2:d1:25:6f:e6:
a9:f2:fb:88:b8:3c:88:94:89:2d:a0:06:27:9c:99:b5:5d:b3:
43:93:f6:bd:26:2c:f3:da:49:97:9f:92:51:05:b8:8e:36:01:
52:97:f8:bf:97:77:ed:96:61:08:84:0f:8c:fd:63:e1:bf:c6:
a5:b5:52:8c:68:55:e4:fb:7b:8b:b8:7d:de:aa:2c:ea:09:f0:
20:9e:33:ff:14:7c:e5:34:14:f4:4e:08:58:83:6a:0a:3f:cf:
c7:09:a8:eb:80:8a:94:a9:62:39:88:b8:43:85:98:bb:ee:5e:
dc:ca:f7:7c:d0:9e:87:0b:70:07:86:a8:71:f5:51:46:10:8c:
17:38:0f:9e:10:71:22:85:3d:93:13:c4:f9:e0:26:6b:4a:8c:
5b:2b:76:86:a4:02:5e:d6:20:83:4c:96:41:6b:44:3f:29:58:
66:be:fe:ed:8d:21:15:e8:b4:ff:e4:30:55:18:be:bd:70:95:
fe:c0:e4:0d:e4:71:b4:de:2f:06:14:ad:28:88:21:1c:0c:38:
ee:df:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:57 2024 by rpki-client on console-fra.rpki-client.org