Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/SqT-j8l-g0QSZHWgH5_uGN6sCYg.roa
File: SqT-j8l-g0QSZHWgH5_uGN6sCYg.roa (raw, json)
Hash identifier: Hbg+gfwD/HyivpFypE7DvOC4lozyOKL6zGTYdnOo5g8=
Subject key identifier: 4A:A4:FE:8F:C9:7E:83:44:12:64:75:A0:1F:9F:EE:18:DE:AC:09:88
Certificate issuer: /CN=1083a6411796bf726387f7a55cf84b57ca899beb
Certificate serial: 01870482B3EC1C5407266A58B4282593BAB4
Authority key identifier: 10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/SqT-j8l-g0QSZHWgH5_uGN6sCYg.roa
Signing time: Tue 21 Mar 2023 14:11:27 +0000
ROA not before: Tue 21 Mar 2023 14:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199285
IP address blocks: 2a13:ce80::/32 maxlen: 48
2a13:ce80:f000::/48 maxlen: 48
2a13:ce80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 17 Apr 2023 13:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:82:b3:ec:1c:54:07:26:6a:58:b4:28:25:93:ba:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083a6411796bf726387f7a55cf84b57ca899beb
Validity
Not Before: Mar 21 14:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aa4fe8fc97e8344126475a01f9fee18deac0988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:f4:9e:98:a0:f6:0a:93:e8:f7:49:b6:15:
5d:b2:84:91:73:4d:78:be:c7:2a:d7:81:02:97:8c:
c0:0a:7d:4d:80:de:63:0c:d9:a8:79:4f:2c:2f:16:
45:57:a5:da:36:0a:48:3f:23:77:f1:77:80:5c:c1:
58:4a:44:d1:92:60:65:db:9c:a5:fd:bc:82:0a:9e:
d1:87:b3:73:46:c5:f7:9e:45:06:54:6f:86:90:e9:
15:c5:97:c9:ea:80:f0:86:6a:f6:32:73:57:e1:1e:
7c:02:ca:a5:1c:a4:21:41:50:ce:62:e8:7e:92:e5:
bc:ef:4e:ac:a2:4d:69:3c:97:44:22:da:4c:c8:b0:
62:19:d3:18:74:f9:51:c8:00:8e:57:29:4f:87:95:
ad:a8:b7:36:5f:60:fc:43:69:9a:ec:2e:8e:33:53:
bb:a8:a0:bd:9b:24:f6:bd:47:c2:6c:64:14:2a:29:
21:4e:68:77:00:fc:60:39:02:e1:f8:c5:25:7e:c0:
a1:91:65:92:f7:c3:94:32:0c:2d:5f:d7:74:d9:ad:
bf:8b:6d:4d:00:f7:e1:1c:3e:e4:55:ae:05:bb:82:
f0:d5:5f:fb:39:10:d7:30:ab:04:82:55:3a:41:31:
54:34:d6:1b:3c:c5:94:d0:66:e5:b8:56:11:2f:d8:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:FE:8F:C9:7E:83:44:12:64:75:A0:1F:9F:EE:18:DE:AC:09:88
X509v3 Authority Key Identifier:
keyid:10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/SqT-j8l-g0QSZHWgH5_uGN6sCYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ce80::/29
Signature Algorithm: sha256WithRSAEncryption
55:4b:b8:9e:d3:9f:d6:04:1a:fe:94:44:ee:27:8c:de:66:30:
e7:aa:aa:ad:63:3e:90:68:8e:a0:89:c5:44:15:b6:af:1f:11:
80:62:ca:f6:ee:31:e1:00:42:d7:4c:cb:73:0d:14:23:cf:ee:
6b:17:32:b8:04:87:84:d4:bb:06:c4:df:9b:e4:fa:98:08:2d:
92:e9:6a:36:e6:0b:01:c5:e3:b2:c3:f4:9a:f9:74:ff:15:e7:
5d:cc:50:8b:2d:dd:c5:c0:b8:e0:ba:32:78:8e:84:d3:53:4b:
ec:35:9c:15:cc:e8:0a:bf:37:4a:77:bc:ba:f3:a0:ad:7d:59:
53:58:93:71:4b:69:d9:63:b5:b5:5d:da:b8:18:fc:74:b1:d3:
d4:50:50:1a:29:de:fb:6d:06:0b:93:7e:99:2d:cb:f9:05:03:
51:f2:02:36:4f:86:ab:6d:fa:3e:a3:9f:6f:6d:a4:58:bd:c6:
f4:50:70:0a:44:0e:e6:20:9a:d3:e3:da:2e:85:0e:31:13:6e:
8f:67:d2:01:dc:49:0d:42:c2:8b:cc:4c:88:c7:b0:2a:50:22:
22:2f:f0:65:3d:5c:ac:94:bf:ab:6d:35:65:87:d0:2b:fa:0b:
a9:22:9d:10:2b:a5:2d:b0:7e:8c:4d:a7:0e:c4:ab:c5:74:ce:
de:3c:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:14 2024 by rpki-client on console-fra.rpki-client.org