Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/qgs1lQdJSDJSfumP3KAg4z6dKm4.roa
File: qgs1lQdJSDJSfumP3KAg4z6dKm4.roa (raw, json)
Hash identifier: Yax9JuJ5MJBC2W6Ka0GoF8wHroyIIvc5gBXv9mkUklI=
Subject key identifier: AA:0B:35:95:07:49:48:32:52:7E:E9:8F:DC:A0:20:E3:3E:9D:2A:6E
Certificate issuer: /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial: 018AD5D34413333B306491950339CC03EA79
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/qgs1lQdJSDJSfumP3KAg4z6dKm4.roa
Signing time: Wed 27 Sep 2023 08:48:27 +0000
ROA not before: Wed 27 Sep 2023 08:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216352
IP address blocks: 2a10:a642:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:d3:44:13:33:3b:30:64:91:95:03:39:cc:03:ea:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Validity
Not Before: Sep 27 08:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa0b359507494832527ee98fdca020e33e9d2a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:98:9e:83:8c:37:95:0f:1c:f4:bb:31:08:
25:37:81:3c:e8:de:88:c3:c4:07:a1:ee:21:b8:b1:
83:61:a1:01:cf:10:86:d9:7c:79:ff:d4:b6:65:3d:
79:f9:41:0a:42:7b:4a:1c:c0:c3:b7:16:f4:45:62:
94:50:64:bf:d3:f6:a8:29:95:e5:84:c9:cf:0b:40:
08:af:46:ed:cf:5b:66:f4:2f:5f:f4:75:da:43:f1:
2b:6b:23:35:53:b3:23:d9:91:22:df:61:0b:87:8d:
18:f2:ad:90:1b:32:4e:0f:a5:3c:91:e1:75:63:d2:
0f:41:c4:e6:ae:c3:54:aa:02:c9:5a:05:30:cf:89:
8c:ff:0e:65:35:87:53:f5:7a:bb:cc:a1:63:e3:85:
54:68:40:3f:b7:64:eb:aa:8e:30:c4:e0:9c:17:1c:
5a:fd:a4:49:70:8b:d4:d9:f3:4d:18:a7:e0:c0:3f:
83:8f:d5:9a:3a:45:f5:b5:e3:14:be:26:e8:9b:06:
91:cf:79:46:4d:c0:da:10:6d:5c:d6:20:f4:dc:b3:
c2:00:c0:85:fd:2b:62:53:b6:fe:5d:dd:a0:53:94:
a1:f2:74:63:e5:0c:d7:48:18:3f:bf:04:d1:e7:68:
a5:32:e0:93:15:98:0d:e0:55:61:2c:e6:8f:ef:fb:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0B:35:95:07:49:48:32:52:7E:E9:8F:DC:A0:20:E3:3E:9D:2A:6E
X509v3 Authority Key Identifier:
keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/qgs1lQdJSDJSfumP3KAg4z6dKm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a642:100::/40
Signature Algorithm: sha256WithRSAEncryption
5e:9f:11:9f:8f:66:e0:49:e1:e5:70:8a:f3:b5:71:c8:12:08:
ae:11:43:f1:57:57:8f:49:1a:c5:e3:ce:7e:cc:2e:de:11:75:
3c:2f:df:07:ee:8f:b6:90:40:47:df:d0:dd:82:91:94:c0:05:
1f:d5:36:b8:0f:04:b2:8c:f8:ea:89:35:92:e6:29:42:a9:7d:
6b:7b:12:96:34:48:d5:d9:48:44:0c:96:a3:be:e8:6f:44:07:
87:b1:04:24:68:4f:64:14:3b:99:56:25:39:38:6b:37:4c:2b:
42:96:d1:3d:59:11:98:6f:d0:07:4f:39:6d:24:c7:32:0e:65:
dc:8b:48:b5:e3:47:05:f5:b7:80:5b:73:06:91:d3:70:3f:c3:
ec:52:92:b8:19:e2:bd:42:cd:c3:29:86:1c:50:d3:c6:95:89:
ae:f9:55:4d:75:db:4a:b7:0b:de:29:f3:8f:bf:35:35:32:20:
8d:ff:e8:83:46:c4:96:9b:65:da:28:ef:5e:a1:56:3f:ac:c1:
a1:36:d4:55:4c:40:50:f9:75:b4:fe:48:a4:0b:4e:03:77:cc:
5d:23:fc:be:9a:68:23:b4:46:a6:52:8c:b1:ff:19:50:5e:54:
3c:f1:4e:20:fa:c4:9d:f0:8d:a3:ff:18:30:45:a7:2d:d1:f2:
60:47:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:59 2024 by rpki-client on console-ams.rpki-client.org