Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/qrrp_N8cXBtXsbwoOD1T6cMb-OA.roa
File: qrrp_N8cXBtXsbwoOD1T6cMb-OA.roa (raw, json)
Hash identifier: mQ1d+BdvE6Uz8n/Y2o1urf40R5OP5SU1oUrDtkoq6S4=
Subject key identifier: AA:BA:E9:FC:DF:1C:5C:1B:57:B1:BC:28:38:3D:53:E9:C3:1B:F8:E0
Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial: 01856D6F6AF780E218EA75D10B131550BCC2
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/qrrp_N8cXBtXsbwoOD1T6cMb-OA.roa
Signing time: Sun 01 Jan 2023 13:04:56 +0000
ROA not before: Sun 01 Jan 2023 13:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 141.14.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:6a:f7:80:e2:18:ea:75:d1:0b:13:15:50:bc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Validity
Not Before: Jan 1 13:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aabae9fcdf1c5c1b57b1bc28383d53e9c31bf8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:58:cb:95:7f:2e:1f:b6:bd:a2:50:af:31:
e0:64:41:65:ab:0f:1e:fd:d5:e0:85:68:e5:5f:fd:
fd:5d:61:b6:1d:b1:bf:a7:40:bf:d4:82:15:7b:61:
14:fa:d6:ae:8a:1a:88:df:ad:64:b9:58:85:98:4c:
c2:bc:f3:dc:67:39:49:2a:cc:72:71:f2:fa:41:a8:
a8:f4:ad:c0:6f:73:49:ed:4b:1c:58:59:fd:e4:85:
00:c0:ca:59:12:97:3d:6b:5e:be:93:b3:57:2b:bf:
66:2f:a6:b0:3e:eb:f3:65:a3:aa:32:87:d3:f3:51:
b4:cc:8f:b4:8a:79:5c:18:4c:a5:b6:10:19:ed:6b:
48:8c:62:8a:e6:14:da:08:fb:dc:8b:bb:22:b1:66:
44:ce:b4:40:b1:ba:09:02:57:75:63:65:a0:d1:66:
db:51:12:c2:06:2e:6c:86:a0:4c:9b:94:d2:d9:75:
da:86:f9:f0:df:bd:a9:b9:8f:7e:e4:d1:1a:4d:c7:
17:05:35:1c:29:5a:97:55:6c:7c:26:43:a6:76:42:
00:5e:cd:6b:75:06:cd:fc:ac:9a:d3:d4:62:1b:e4:
cf:09:85:4b:d8:bc:84:b0:6d:48:13:f9:41:d9:60:
89:76:fa:b6:f9:25:20:62:99:2b:d1:b4:76:fd:6f:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BA:E9:FC:DF:1C:5C:1B:57:B1:BC:28:38:3D:53:E9:C3:1B:F8:E0
X509v3 Authority Key Identifier:
keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/qrrp_N8cXBtXsbwoOD1T6cMb-OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.14.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:99:54:6c:86:bc:f0:c4:ad:20:67:65:b7:fc:b4:65:c1:64:
66:ea:a5:49:fa:75:be:aa:1b:95:31:7a:c2:5e:4f:b2:7c:7a:
51:af:e8:30:15:4b:75:42:ea:ac:f2:56:08:4a:76:dc:49:e1:
56:92:19:ad:e5:08:c7:d6:8a:6e:00:aa:c5:b6:38:60:9e:e1:
b4:da:d0:c1:a4:8e:9c:95:9b:fb:ac:1d:a8:c8:60:f3:a6:a3:
59:76:5f:fd:38:fa:11:11:c8:11:f3:b8:ae:4d:55:78:47:49:
05:9b:37:fc:c2:1b:73:01:e4:15:89:8a:8d:86:b8:47:98:cc:
63:a7:95:89:dc:20:a1:3a:92:7f:50:f9:d7:9b:d6:cf:33:c3:
2b:08:bf:70:4a:0f:ef:55:85:66:f1:0b:bd:37:26:2d:1d:51:
38:da:73:22:c3:b8:36:89:98:58:cd:d1:34:ab:15:6a:c3:9c:
76:d9:d3:d5:10:1e:e7:d8:ce:cc:27:54:1b:5f:d3:e4:68:2f:
61:64:ef:c5:8d:ba:bf:66:b4:67:c4:15:2f:c7:98:f3:ae:32:
4e:de:97:d3:46:fe:79:55:35:02:c9:ee:09:35:6f:9b:ef:4f:
31:69:84:34:a9:ca:13:b2:88:9f:0e:f7:47:4f:e2:ac:0d:c1:
12:6d:62:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:59 2024 by rpki-client on console-fra.rpki-client.org