Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/3TQLPJ6jiQfzucn--uPAlLad5lE.roa
File: 3TQLPJ6jiQfzucn--uPAlLad5lE.roa (raw, json)
Hash identifier: FIHttl/8dK1VpwRrOvr6llM9+Dz7hcjZeBdqCbv6Ib4=
Subject key identifier: DD:34:0B:3C:9E:A3:89:07:F3:B9:C9:FE:FA:E3:C0:94:B6:9D:E6:51
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 0188239ECB68BAFEABB5D26C785B2289F07B
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/3TQLPJ6jiQfzucn--uPAlLad5lE.roa
Signing time: Tue 16 May 2023 08:13:09 +0000
ROA not before: Tue 16 May 2023 08:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21221
IP address blocks: 2a04:d9c0::/32 maxlen: 48
2a05:a640::/29 maxlen: 48
2a03:7e0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:9e:cb:68:ba:fe:ab:b5:d2:6c:78:5b:22:89:f0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: May 16 08:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd340b3c9ea38907f3b9c9fefae3c094b69de651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:c6:b6:cd:04:02:96:cb:de:fe:29:46:e4:
2d:bc:a6:1f:ed:e6:a1:bf:e2:5e:54:fc:6a:f2:17:
5b:f8:43:b5:18:60:cf:f5:60:ab:af:60:06:e5:d0:
a6:4f:2f:c8:23:fa:8d:bd:de:3f:4b:22:cb:6c:e6:
26:96:f0:64:b5:9e:0b:76:59:8f:cf:91:44:45:9d:
63:76:d5:01:89:11:08:19:ff:8a:c4:09:fc:bc:b5:
7f:91:d0:97:c0:4e:28:33:28:39:af:bb:3c:a5:36:
9a:31:06:71:e2:2b:68:e5:4c:8c:00:dd:05:6e:50:
53:05:60:4d:ae:d0:e6:1a:72:6e:44:28:99:f4:ad:
35:52:21:16:ce:b2:cd:75:81:ad:59:64:23:f5:97:
cf:9b:70:db:2e:7d:23:c5:9c:bb:dc:df:7b:b3:02:
13:82:0e:b8:25:89:ce:25:7e:79:e2:38:a1:d8:4f:
06:e8:ea:fc:b9:1a:82:13:7c:a5:b8:5d:c3:b5:2b:
0d:bc:11:f8:d8:cd:7c:c8:75:12:b1:12:61:a3:a8:
82:c3:e7:a0:d6:7a:27:7f:c8:88:9d:e8:0e:f5:41:
cc:3a:9d:7b:34:12:90:a7:22:de:d5:14:c5:0c:ee:
70:4c:dc:a3:a2:77:ba:2a:25:aa:98:80:fa:97:b0:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:34:0B:3C:9E:A3:89:07:F3:B9:C9:FE:FA:E3:C0:94:B6:9D:E6:51
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/3TQLPJ6jiQfzucn--uPAlLad5lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:7e0::/32
2a04:d9c0::/32
2a05:a640::/29
Signature Algorithm: sha256WithRSAEncryption
4c:aa:02:11:81:bd:5e:13:7c:b0:75:25:55:33:16:3e:96:ea:
ba:45:d2:b1:8d:5a:7a:53:72:82:d1:b6:46:d9:0e:69:18:52:
38:2a:92:d6:5e:e8:9c:40:01:2e:ce:cb:1d:c2:e8:b5:ca:11:
4f:c5:23:55:37:89:76:8c:ad:f5:7a:64:e6:a4:58:52:98:e8:
99:25:d6:15:1a:be:d9:5a:46:98:2d:84:5f:2d:96:94:e7:55:
d2:65:13:70:a3:dc:2b:c2:ce:f4:40:25:16:40:5a:62:a0:7b:
76:6f:b1:d5:b9:bc:de:ae:90:16:ab:93:89:3b:a6:43:67:61:
8d:cf:0a:a3:a4:b2:5c:d0:7e:ff:53:5c:be:3f:44:10:c4:bc:
d2:ed:b4:d8:53:b3:33:65:49:82:65:96:74:f7:f2:a8:d8:d9:
b4:10:07:0a:55:fa:af:9a:e7:af:dd:13:6c:0f:13:18:87:af:
e1:60:c4:38:57:91:4d:85:25:aa:10:08:10:d6:77:b9:cd:89:
07:a9:c0:41:3c:f2:5c:a5:b8:fb:96:2e:fb:e1:e7:11:5e:e2:
55:8d:6f:bb:ee:08:63:91:db:02:4e:7c:4b:9e:cb:d5:95:02:
2f:33:e4:3c:dc:f0:36:7a:b2:e4:14:be:c2:85:b9:d0:fa:6c:
97:9e:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:56 2024 by rpki-client on console-fra.rpki-client.org