Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/qJ2cD7UIT0CZ6KrU1EEyZg9HhVs.roa
File: qJ2cD7UIT0CZ6KrU1EEyZg9HhVs.roa (raw, json)
Hash identifier: +BUmNqTTPLf+U/h/2KSJF/0kHpwCX/oIaWsxYp9rrIA=
Subject key identifier: A8:9D:9C:0F:B5:08:4F:40:99:E8:AA:D4:D4:41:32:66:0F:47:85:5B
Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial: 0185715E81033A7F5565BF532BCE19EA14EF
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/qJ2cD7UIT0CZ6KrU1EEyZg9HhVs.roa
Signing time: Mon 02 Jan 2023 07:24:56 +0000
ROA not before: Mon 02 Jan 2023 07:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197942
IP address blocks: 2001:67c:9c4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:81:03:3a:7f:55:65:bf:53:2b:ce:19:ea:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Validity
Not Before: Jan 2 07:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a89d9c0fb5084f4099e8aad4d44132660f47855b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:09:6b:0b:13:0b:80:28:70:b8:47:aa:c7:2d:
15:57:20:cc:d7:53:ad:0f:cc:7a:ed:e1:8d:39:7b:
20:30:f6:d4:39:51:da:94:13:29:4f:a2:99:a0:1e:
f0:09:b3:d0:83:d0:be:85:87:06:6e:78:30:2b:56:
45:9d:ba:8b:67:5c:a3:5d:8f:59:b6:1c:84:96:ee:
03:e3:36:2a:20:c5:ba:6f:be:50:0a:97:e5:a7:db:
e6:aa:38:46:ee:b5:36:a1:a5:02:cb:5c:79:92:7c:
10:d8:10:8c:ed:b2:c5:a8:15:f0:db:d9:8f:5e:97:
e0:46:d0:4c:86:b5:30:99:4d:f8:b3:79:23:f1:58:
36:bf:9c:ef:fb:c9:b9:2b:4a:9f:45:37:b0:8b:1f:
b9:86:40:84:6b:35:a6:a6:b3:29:33:2d:8c:a1:2f:
c9:3d:09:fb:5c:29:db:9f:cf:f3:55:ec:c1:b7:3a:
3a:ec:66:d1:f4:87:33:be:71:d3:b1:0a:53:2b:26:
65:84:d8:c8:fd:41:4b:ef:7b:2d:1e:d1:57:6d:2e:
a9:6d:9c:71:2f:00:28:c2:53:f2:2e:8d:cc:0b:ea:
63:71:c8:d4:5a:e7:bc:0f:21:37:a6:44:37:50:7e:
8f:0d:a6:a3:50:05:b2:fb:7a:b0:b9:7d:97:ac:0e:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:9C:0F:B5:08:4F:40:99:E8:AA:D4:D4:41:32:66:0F:47:85:5B
X509v3 Authority Key Identifier:
keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/qJ2cD7UIT0CZ6KrU1EEyZg9HhVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9c4::/48
Signature Algorithm: sha256WithRSAEncryption
25:3d:68:02:a6:f9:19:19:12:98:62:bf:8c:cf:9e:cf:9f:62:
3c:d3:26:96:f6:92:6d:16:ea:d5:0a:12:59:28:f4:dd:3e:22:
eb:ab:f1:29:e2:64:d7:ea:17:67:01:f8:9b:d4:3d:65:64:b9:
fe:38:46:c5:3a:40:2d:ce:4e:53:2f:a1:29:5e:6c:2c:9a:2c:
9b:91:14:ca:d6:65:9b:a0:cd:b7:e7:49:a9:54:22:c4:f2:d2:
0d:4c:9c:22:8b:f7:93:0b:a6:57:87:0a:6b:09:04:a6:c1:a1:
ca:3d:00:72:f0:89:18:d2:23:c9:a1:cc:f8:db:b1:be:a1:1b:
8c:d5:7c:19:c7:22:21:56:90:88:bd:ca:08:97:bd:7b:75:2c:
e0:0c:c2:c1:ce:24:a5:ed:50:88:5c:60:e5:35:d4:0a:58:77:
c2:b8:f2:1d:c0:a2:43:41:6b:9b:85:68:54:9b:90:cb:2e:ec:
85:c7:e7:94:4e:4c:cd:18:d5:0c:4e:0f:a7:12:c1:4d:a1:87:
c4:45:37:67:0a:cd:3e:53:f6:8b:9d:4f:bf:0a:6f:9d:7c:93:
c3:79:c8:f1:1f:bc:6f:36:74:db:87:47:a6:b8:99:d8:d1:93:
ea:3a:eb:e3:0f:44:27:3f:23:c2:27:fd:6d:98:2c:c9:f0:f8:
53:28:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:48 2024 by rpki-client on console-ams.rpki-client.org