Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/qVQ8AFmfwMuNGzK-WrFphw90QoM.roa
File: qVQ8AFmfwMuNGzK-WrFphw90QoM.roa (raw, json)
Hash identifier: wLUWOLyVIA8ME3yYWLNxgI9a4KIN7yPRCZjzlaaArzI=
Subject key identifier: A9:54:3C:00:59:9F:C0:CB:8D:1B:32:BE:5A:B1:69:87:0F:74:42:83
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 01856BE5BF6FDAA027F6CB1AE6116E0890C3
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/qVQ8AFmfwMuNGzK-WrFphw90QoM.roa
Signing time: Sun 01 Jan 2023 05:54:56 +0000
ROA not before: Sun 01 Jan 2023 05:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59570
IP address blocks: 2001:678:d30::/48 maxlen: 48
2001:678:d34::/48 maxlen: 48
2001:67c:2148::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:bf:6f:da:a0:27:f6:cb:1a:e6:11:6e:08:90:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Jan 1 05:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9543c00599fc0cb8d1b32be5ab169870f744283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:29:3a:11:ae:ed:8c:46:4a:eb:1f:7a:b3:
20:c0:6b:31:0e:3b:50:af:68:ac:88:c1:6f:7a:03:
98:a1:e1:ae:cb:75:23:31:c7:d0:8b:58:3d:17:75:
0a:c5:7f:08:03:09:e8:8c:0f:a1:d1:3c:f9:00:a4:
3b:97:35:10:75:da:0c:33:54:de:31:32:c5:5c:7d:
a5:f2:b4:e2:a7:26:76:a1:45:6a:91:c8:1c:ea:b9:
3c:0e:07:10:3f:79:f0:1b:1d:0f:c7:b6:60:27:34:
ad:24:54:ab:aa:05:97:7e:50:b7:6d:85:58:46:0f:
10:20:0b:ba:0f:57:f1:f3:60:0f:9b:c6:54:2d:c9:
eb:58:21:5e:a2:b9:5e:d5:57:2b:d3:fe:88:1c:81:
b8:07:8b:8d:b7:0f:77:db:a8:fd:44:ae:79:a9:14:
30:e1:d5:46:88:88:b1:7e:6a:14:17:c6:ca:bb:6e:
58:1f:47:29:39:e4:3f:6c:75:29:be:1b:e0:a2:9c:
50:48:24:b9:8f:52:2f:19:40:12:42:fc:dc:b7:27:
ca:e2:12:05:e4:91:88:7d:42:cc:f4:a7:f7:1a:46:
3b:f4:55:24:e0:8f:ba:bd:dc:01:c2:30:f0:39:92:
a6:2e:6a:60:96:ba:f9:09:02:f0:0b:22:09:55:12:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:54:3C:00:59:9F:C0:CB:8D:1B:32:BE:5A:B1:69:87:0F:74:42:83
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/qVQ8AFmfwMuNGzK-WrFphw90QoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d30::/48
2001:678:d34::/48
2001:67c:2148::/48
Signature Algorithm: sha256WithRSAEncryption
b8:e8:4b:23:ae:e2:ba:e9:06:07:89:eb:1d:ef:39:01:7b:9e:
ac:7a:7b:0e:3e:b2:70:dc:40:10:50:e1:6a:8d:9b:d4:7d:02:
58:af:1a:73:a1:d3:b6:e9:9b:d4:78:c9:fa:65:4f:79:38:dd:
41:3a:83:82:53:ea:7c:49:4a:63:1b:b3:1a:ad:51:d2:4c:52:
22:40:69:0e:e8:30:12:34:97:6d:d9:22:ae:bf:88:0b:d8:5c:
89:c4:5f:80:3a:93:07:94:4b:bd:cf:e2:b2:e7:ad:c3:cc:2e:
64:a0:d6:ab:a0:f6:60:a5:2d:c5:d7:2b:a4:90:7e:ab:32:85:
3c:af:b5:3d:a6:f4:2d:63:79:41:9d:9e:08:a4:4d:ce:e7:56:
81:42:e2:8f:2c:82:6a:70:3e:56:28:a8:07:49:7c:61:8b:fc:
21:d1:f7:c5:14:10:28:f1:95:bc:d4:3d:3f:c9:65:b5:56:58:
42:8f:23:6a:ab:11:43:52:cd:c2:4b:67:a2:8e:bb:f0:dd:65:
80:5f:86:2d:b7:17:96:e5:06:97:80:22:c9:d2:ee:6d:ce:92:
a3:77:0f:7b:65:e5:df:fd:33:7b:ab:07:89:2b:b6:91:78:c7:
2d:ce:44:ab:52:5b:32:34:d7:72:ff:87:af:50:d8:14:0a:77:
1f:75:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:32 2024 by rpki-client on console-fra.rpki-client.org