Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/qkEV5H1XNScSaPU4DUtgyx6S65Y.roa
File: qkEV5H1XNScSaPU4DUtgyx6S65Y.roa (raw, json)
Hash identifier: 5aHnjvIKRKjLdHy+o9liXoOnAMkNnIdNKz5+1ROz8V8=
Subject key identifier: AA:41:15:E4:7D:57:35:27:12:68:F5:38:0D:4B:60:CB:1E:92:EB:96
Certificate issuer: /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial: 018570D4F66274814D9667A7F1B4E0FC487D
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/qkEV5H1XNScSaPU4DUtgyx6S65Y.roa
Signing time: Mon 02 Jan 2023 04:54:42 +0000
ROA not before: Mon 02 Jan 2023 04:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50376
IP address blocks: 212.6.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d4:f6:62:74:81:4d:96:67:a7:f1:b4:e0:fc:48:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Validity
Not Before: Jan 2 04:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa4115e47d5735271268f5380d4b60cb1e92eb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e9:88:d5:37:27:b5:11:f6:80:67:c5:f1:7e:
24:93:60:9c:78:dc:b4:a2:3d:c5:c5:07:49:60:f6:
b1:f9:68:05:3d:1e:8d:26:d6:82:f9:61:ce:e5:82:
c7:40:fd:61:86:48:08:6b:f4:26:59:e1:cf:7b:42:
b8:36:32:70:5e:4d:e5:83:80:eb:c0:7b:a9:2a:0c:
65:50:ad:c3:c9:6b:bb:5f:04:d1:b8:3b:d6:bb:c3:
a0:a4:eb:d7:7c:b3:80:08:7d:f0:fa:45:bc:b3:0b:
57:45:d8:12:a4:84:e0:1c:18:52:28:b8:82:69:b1:
a9:00:c1:fa:e8:b4:78:bd:8e:89:71:0c:fb:33:ed:
a7:ed:dc:d4:61:9b:2d:ab:95:8d:73:c3:92:39:e5:
53:68:64:49:de:e7:ce:a8:fd:1b:17:7e:a4:10:8f:
11:ab:53:b0:34:f8:56:0e:4e:50:dd:19:38:bf:94:
7e:26:f4:98:a6:7d:c7:2d:50:87:c8:8d:93:9e:28:
d3:90:0c:bf:bf:67:ea:bc:ae:12:cb:e5:af:a6:bc:
08:63:57:72:5f:51:39:01:8a:23:a7:16:9d:7c:d0:
a8:c4:75:88:78:15:e1:1e:5f:ec:eb:8c:0f:6b:3b:
82:35:25:65:85:78:44:78:06:e9:fb:82:c5:41:fb:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:41:15:E4:7D:57:35:27:12:68:F5:38:0D:4B:60:CB:1E:92:EB:96
X509v3 Authority Key Identifier:
keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/qkEV5H1XNScSaPU4DUtgyx6S65Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
12:50:f8:8d:b3:72:93:7a:28:89:d4:c3:78:23:e4:c6:dc:11:
9b:30:15:2d:df:82:b7:29:47:e7:d5:ff:68:3f:eb:64:e5:7d:
7a:27:b1:4c:97:61:05:64:68:e0:fd:23:9e:b0:14:37:86:a6:
29:06:60:ce:ca:2b:1c:e9:81:81:7c:7b:be:c5:28:1e:ba:81:
9b:5e:fc:ad:2b:71:75:d7:6b:9a:89:ff:fc:5e:cc:4d:38:37:
ac:62:ad:e9:7e:ea:8b:8e:16:95:03:bc:57:b8:af:9c:dc:12:
cf:13:87:b0:3a:95:73:d0:13:da:0c:7a:df:d7:53:92:55:cf:
dc:68:9b:62:8b:6f:00:01:68:6e:90:cc:63:34:26:a8:cc:e4:
1c:c5:dc:a7:c5:85:19:1a:bb:7e:bf:ab:42:be:e9:c4:1f:13:
5f:eb:fb:aa:54:8c:5b:a7:78:d5:bc:29:f2:67:b0:47:68:a1:
18:10:ce:67:1d:49:24:18:6d:02:98:48:84:bc:e3:3e:3c:bb:
ba:26:f6:38:be:02:ee:9d:9f:16:fc:b7:26:50:5d:25:b3:59:
63:f5:ee:27:25:9e:c4:60:cd:b3:57:0b:96:24:2a:c7:67:5a:
da:81:49:10:f4:97:7e:18:29:71:fa:93:50:54:6f:c3:7e:13:
c6:5f:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:52 2024 by rpki-client on console-ams.rpki-client.org