Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Q3LFe65B7y8LHQRrAATwfwBnxLw.roa
File: Q3LFe65B7y8LHQRrAATwfwBnxLw.roa (raw, json)
Hash identifier: 21wEkgs2KKlEgdssYUHHOEnzhVzsNAFxIC456m5CfJA=
Subject key identifier: 43:72:C5:7B:AE:41:EF:2F:0B:1D:04:6B:00:04:F0:7F:00:67:C4:BC
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA444F7AEF36A7DBC86F8211C81C73
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Q3LFe65B7y8LHQRrAATwfwBnxLw.roa
Signing time: Mon 02 Jan 2023 13:44:47 +0000
ROA not before: Mon 02 Jan 2023 13:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8672
IP address blocks: 2001:648:2c10::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:44:4f:7a:ef:36:a7:db:c8:6f:82:11:c8:1c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4372c57bae41ef2f0b1d046b0004f07f0067c4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:88:81:5a:60:9c:65:f4:40:aa:de:91:4d:
d0:25:ee:fd:62:7e:5b:5a:cf:5d:43:2b:9c:87:a9:
cd:63:71:01:d4:04:be:4d:4c:85:0b:30:f6:74:7a:
c7:e7:56:0f:01:96:92:c1:c1:9e:06:15:14:c1:96:
47:98:4a:8d:fa:71:24:9a:65:8c:81:09:99:83:be:
44:d1:9a:92:8f:c7:8c:f2:68:be:af:a7:50:af:a8:
f4:28:71:06:83:43:5e:fb:9c:6d:97:10:b7:87:16:
06:c2:b4:44:f3:29:8f:1e:f5:b6:0c:89:06:40:a7:
0b:5e:8e:e4:9a:7b:6b:13:e3:fd:ea:dd:fc:0d:98:
03:59:38:c5:99:e8:02:74:ef:ae:6f:e5:3b:6f:72:
aa:e8:de:b1:24:98:a9:f8:7e:1f:68:26:5a:f1:20:
4f:70:6f:4e:da:6d:99:57:2c:e5:1c:e1:be:90:19:
a8:10:24:61:ce:53:9e:09:42:c8:db:28:b0:c6:87:
96:a4:39:32:20:a9:6e:e3:81:7a:60:dd:1f:53:0a:
36:98:dd:97:89:2a:5a:ac:d8:65:ec:d0:a4:d8:01:
c7:c4:5f:0c:b1:68:cb:7c:db:a8:6c:43:11:4e:44:
52:50:4c:79:b6:15:de:e7:43:ed:5c:f0:b5:9f:53:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:72:C5:7B:AE:41:EF:2F:0B:1D:04:6B:00:04:F0:7F:00:67:C4:BC
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Q3LFe65B7y8LHQRrAATwfwBnxLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:648:2c10::/48
Signature Algorithm: sha256WithRSAEncryption
33:53:73:c5:0f:1a:02:61:c1:76:f1:d0:2e:d8:ee:96:0f:09:
77:cc:9f:dd:79:da:07:63:af:75:e5:dd:2b:96:ba:7a:8b:87:
7c:ca:d9:bb:4f:0a:14:64:86:ec:58:8e:39:66:c7:28:4a:56:
54:a7:ff:76:a7:94:23:f2:2f:9a:5f:7c:89:55:ae:84:fb:cd:
2c:21:c8:03:b0:c5:cd:c2:58:50:07:35:47:37:2c:be:82:13:
93:86:60:e8:5d:4f:6a:a8:d1:de:99:76:64:20:53:99:64:e1:
55:bc:77:fe:9d:34:02:4c:3b:bf:c3:bf:29:69:2a:3f:a6:e6:
30:3c:49:2f:3c:2a:f1:de:ce:4e:96:72:f9:99:90:3a:2f:4b:
c2:4c:8e:81:c3:93:f1:2d:ff:e7:b4:b5:65:aa:a1:b8:19:b2:
2b:80:84:cc:cc:af:1c:f2:2f:34:f7:9e:ca:d3:c2:bb:c2:9c:
4c:80:ca:19:dc:3d:ce:cf:ea:15:2b:e9:00:66:4c:6d:73:9b:
cb:fb:62:00:b8:09:4e:5b:00:4d:cb:93:3c:5a:c2:95:57:92:
2a:4f:c2:83:f9:d9:12:71:84:3f:96:f3:92:c4:7b:60:e0:16:
76:89:20:64:39:58:53:96:2f:7a:76:d6:db:30:a3:a3:b9:94:
b7:9f:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org