Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/QgL6zaj66RlpABq2-XGSlB0ZiSI.roa
File: QgL6zaj66RlpABq2-XGSlB0ZiSI.roa (raw, json)
Hash identifier: HZyQu3j96Hy4lwk5ZJYahbm38Tp4sMc0rVZkgj7uInw=
Subject key identifier: 42:02:FA:CD:A8:FA:E9:19:69:00:1A:B6:F9:71:92:94:1D:19:89:22
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 01856CB85902B6BD45E56CC3613649464968
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/QgL6zaj66RlpABq2-XGSlB0ZiSI.roa
Signing time: Sun 01 Jan 2023 09:44:58 +0000
ROA not before: Sun 01 Jan 2023 09:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4785
IP address blocks: 2a06:5040:13::/48 maxlen: 48
2a06:5040:11::/48 maxlen: 48
2a06:5040:14::/48 maxlen: 48
2a06:5040:12::/48 maxlen: 48
2a06:5040:5::/48 maxlen: 48
2a06:5040:10::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:59:02:b6:bd:45:e5:6c:c3:61:36:49:46:49:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 1 09:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4202facda8fae91969001ab6f97192941d198922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:b7:ca:95:75:b8:4b:63:5e:d6:f5:e8:1b:
73:d2:57:9f:97:88:bb:1f:ad:ec:b0:64:f8:d1:80:
8f:0a:7e:5c:61:36:05:39:cc:34:72:68:ab:c3:7e:
d6:c6:93:4a:d4:37:77:23:4e:30:9e:91:72:0b:03:
b6:34:1f:21:f9:93:e9:7c:07:83:26:b3:00:7e:14:
04:dd:90:07:45:22:ef:84:34:43:4e:48:42:91:1d:
0c:da:96:ca:6b:6c:fc:fd:d6:61:cf:f1:e5:39:a7:
dc:43:95:11:34:13:02:d4:4a:a4:37:fa:2c:d0:7d:
c2:8e:7c:f8:85:94:d8:f7:4d:79:09:ce:4e:55:8a:
e7:bc:05:c2:e0:3c:64:19:f4:c6:41:ca:bf:46:6a:
3d:fe:e4:72:8f:41:5c:a6:32:ea:a5:53:39:fe:fe:
48:74:bd:ff:f8:30:5b:76:c4:7f:fe:cc:6e:84:18:
71:c8:6b:95:fc:d3:7f:e0:c2:a6:a1:a5:92:ce:5f:
2c:62:2c:05:3d:88:ce:db:42:b0:45:a8:7a:70:21:
1d:d0:07:af:26:7a:31:16:f5:16:7e:34:95:f3:6b:
ee:e0:8b:64:9b:44:6d:15:ac:3d:e9:f3:08:41:fa:
a7:d7:bc:17:fd:e3:b9:b6:95:58:c6:eb:ef:6c:d3:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:02:FA:CD:A8:FA:E9:19:69:00:1A:B6:F9:71:92:94:1D:19:89:22
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/QgL6zaj66RlpABq2-XGSlB0ZiSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5040:5::/48
2a06:5040:10::-2a06:5040:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
28:39:7b:f6:d7:43:09:48:dd:e5:05:53:ca:fc:c5:7a:b4:3a:
7f:4e:30:a8:5b:bd:b5:85:ee:5e:ca:27:08:a3:74:87:c4:a6:
3e:ce:8a:de:e7:40:37:cf:ef:09:ff:1e:15:58:24:0f:af:81:
3b:8a:8e:ee:a5:40:e0:27:48:e8:53:0d:2a:35:67:71:21:b0:
8e:40:71:3e:3a:26:69:29:d3:68:18:e9:cd:6a:ff:6d:be:fc:
e6:6d:71:1e:27:ea:ce:47:86:3f:11:16:88:82:3e:9c:c6:04:
10:d3:3e:80:a7:6a:19:f7:f1:3a:3f:e0:a6:6b:be:40:70:2e:
19:26:e4:13:6d:db:22:9b:e0:2f:13:17:7d:f9:25:2a:74:db:
a4:49:5b:88:22:3c:5f:03:58:cb:a2:61:78:50:f7:c1:2a:ed:
ee:8a:d1:6d:5f:0d:64:99:e6:d6:53:0a:6b:f0:18:e7:94:ee:
54:50:e4:da:dc:e2:5c:ad:71:9a:0d:f5:d4:2b:91:de:71:5d:
33:57:87:dd:c5:2d:97:48:45:83:e5:4f:3d:19:c1:69:78:ce:
c1:c8:32:1b:06:16:07:96:67:d2:e5:a4:be:4f:2a:4f:6d:a2:
60:88:d1:00:c0:7d:70:c5:28:94:aa:a0:a8:35:47:0a:df:3f:
de:17:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:23 2024 by rpki-client on console-ams.rpki-client.org