Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/QufpbbCTlff2FZ3iMFgvaHIG9Ic.roa
File: QufpbbCTlff2FZ3iMFgvaHIG9Ic.roa (raw, json)
Hash identifier: AwOGb7Wc9V0PWSyS5R9JEm00TAIB0pFfj5N2cLb9SbU=
Subject key identifier: 42:E7:E9:6D:B0:93:95:F7:F6:15:9D:E2:30:58:2F:68:72:06:F4:87
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 0190436BC5C776EFE097CD29A069CDD97A57
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/QufpbbCTlff2FZ3iMFgvaHIG9Ic.roa
Signing time: Sun 23 Jun 2024 04:47:34 +0000
ROA not before: Sun 23 Jun 2024 04:47:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60262
IP address blocks: 2a05:b1c0::/29 maxlen: 29
2a09:3940::/29 maxlen: 29
2a10:3c00::/29 maxlen: 29
2a11:4fc0::/29 maxlen: 29
2a11:5680::/29 maxlen: 29
2a11:7940::/29 maxlen: 29
2a11:99c0::/29 maxlen: 29
2a11:9a80::/29 maxlen: 29
2a11:a400::/29 maxlen: 29
2a11:d3c0::/29 maxlen: 29
2a11:f3c0::/29 maxlen: 29
2a12:5f80::/29 maxlen: 29
2a12:9b80::/29 maxlen: 29
2a12:dc80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 24 Jun 2024 04:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:43:6b:c5:c7:76:ef:e0:97:cd:29:a0:69:cd:d9:7a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jun 23 04:47:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42e7e96db09395f7f6159de230582f687206f487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:bb:d0:94:46:60:b5:d4:85:cd:f3:19:58:
c1:71:62:44:8c:1d:eb:4d:b9:53:2b:b9:97:1d:f6:
d0:47:1f:fe:ca:3b:4d:2d:1e:eb:20:be:b6:ab:b2:
73:76:17:0e:d8:70:8b:d2:fc:b2:ab:a6:3e:0b:0c:
9c:7e:9d:89:1f:52:c9:0f:f8:72:83:31:30:49:e3:
46:cb:6b:4e:10:6c:4d:71:7f:1f:4f:1b:6b:e4:62:
e6:37:e7:e4:2d:84:83:c1:6f:21:e5:cc:50:c5:33:
63:51:12:f4:8b:82:03:75:b9:e8:7b:52:57:2b:52:
05:29:18:30:69:b5:03:8e:58:9d:6f:72:96:32:31:
a9:00:aa:68:1d:5c:95:e3:eb:37:b0:fc:fe:19:45:
84:ea:cc:1c:73:de:f6:06:76:ff:76:11:39:b2:60:
bb:4d:b4:e9:2e:0a:b1:ca:ea:23:67:88:f6:a0:a8:
66:2e:2a:b9:4a:97:2a:ba:92:b7:9d:50:b8:f4:b8:
7a:61:e6:4c:5d:c3:69:72:c6:cb:2c:80:02:e0:c1:
95:e9:bd:94:2f:e3:b0:2b:7c:63:f5:0a:06:70:ef:
b3:96:c2:c0:3c:46:95:ca:31:94:43:af:3a:a2:12:
9d:46:f7:42:2a:49:70:4b:3c:03:da:38:3d:7b:93:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:E9:6D:B0:93:95:F7:F6:15:9D:E2:30:58:2F:68:72:06:F4:87
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/QufpbbCTlff2FZ3iMFgvaHIG9Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b1c0::/29
2a09:3940::/29
2a10:3c00::/29
2a11:4fc0::/29
2a11:5680::/29
2a11:7940::/29
2a11:99c0::/29
2a11:9a80::/29
2a11:a400::/29
2a11:d3c0::/29
2a11:f3c0::/29
2a12:5f80::/29
2a12:9b80::/29
2a12:dc80::/29
Signature Algorithm: sha256WithRSAEncryption
20:8d:a5:7b:2a:02:bc:c1:ec:8b:ba:89:5a:b3:35:ad:1f:21:
ab:c0:a4:9e:e9:66:73:77:8c:a9:93:ad:39:99:5b:32:8d:4a:
3d:ca:dd:90:a4:f6:8e:4e:b5:d8:cd:ac:7d:b9:fd:56:e9:f9:
ee:f9:bf:d5:ae:f5:f4:44:42:28:e5:ae:ee:b4:00:51:ac:d8:
94:97:1a:ab:90:e5:e8:e7:22:5d:7b:43:3d:db:b8:ad:aa:5b:
57:91:a9:b0:62:dd:5f:37:45:09:46:c7:c3:a0:48:a9:01:11:
7d:10:5f:53:41:e8:1a:e4:51:eb:cf:dc:e0:42:37:b2:14:f9:
a0:5b:2e:19:aa:67:d8:a0:99:7c:ad:d8:74:38:e9:0a:92:0d:
95:5f:f4:96:16:52:7f:dd:be:a1:c6:c1:04:63:7a:84:c0:b8:
f0:c3:cb:9b:c8:d4:e0:74:1a:34:6a:d6:80:da:56:bc:d3:b1:
45:88:ea:60:d3:f2:aa:4a:70:e3:ca:cf:4f:87:04:ff:64:a2:
9f:74:12:f4:9b:7c:af:bd:d2:f2:54:06:99:76:c7:18:bd:d6:
41:ed:c3:29:95:18:77:db:49:6a:36:f3:8d:35:20:cd:8e:a6:
5f:82:5f:36:ff:bf:0b:b8:49:1d:1b:74:78:f0:ed:5a:b0:28:
77:c7:d0:11
-----BEGIN CERTIFICATE-----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Generated at Mon Jun 24 06:25:48 2024 by rpki-client on console-ams.rpki-client.org