Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/QKcIZY5p8VIqoynR3tsjjKn82zE.roa
File: QKcIZY5p8VIqoynR3tsjjKn82zE.roa (raw, json)
Hash identifier: 8h7inRfCxksRqcr/7LcMIjUSENcquWVqQCQsAAt6zT4=
Subject key identifier: 40:A7:08:65:8E:69:F1:52:2A:A3:29:D1:DE:DB:23:8C:A9:FC:DB:31
Certificate issuer: /CN=667d377dd4c830c246cb48a934699699e4b37741
Certificate serial: 01939B441297ABADEF8081737983CCBD067B
Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/QKcIZY5p8VIqoynR3tsjjKn82zE.roa
Signing time: Fri 06 Dec 2024 09:19:09 +0000
ROA not before: Fri 06 Dec 2024 09:19:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1712
IP address blocks: 2a09:6847::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:44:12:97:ab:ad:ef:80:81:73:79:83:cc:bd:06:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741
Validity
Not Before: Dec 6 09:19:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40a708658e69f1522aa329d1dedb238ca9fcdb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:91:70:f8:fb:3f:0c:be:7c:cc:c4:63:b3:
2b:a2:1e:43:a0:9a:ef:18:da:95:0e:b4:78:21:79:
b6:80:38:ad:ed:0d:70:5b:50:9a:1b:a7:b6:89:7a:
03:4d:88:ff:6d:c4:10:8b:c1:2b:7f:54:06:b0:be:
2a:2f:8e:1e:fc:e8:81:b5:78:bf:1e:fb:1b:1c:e3:
36:68:97:a8:26:00:c8:5a:c9:cd:8f:d7:e2:31:07:
2e:5b:91:1d:de:ed:27:e2:07:c5:15:fd:18:1d:f2:
a4:f8:f1:5d:14:ce:e8:4a:58:5c:ac:a7:51:a5:75:
c5:34:e5:2e:20:39:55:e6:7b:2f:fd:b6:df:cc:a2:
c5:6f:b5:50:a7:35:ac:28:ea:87:97:58:5d:e2:d8:
f3:cb:90:1a:d8:54:7c:cc:57:6a:49:dc:7b:23:8d:
b3:7f:47:9c:9c:25:07:22:6c:30:d1:68:a4:3d:be:
4e:29:cf:1f:26:ab:6a:5f:4b:35:20:ca:4d:6e:0f:
27:94:4b:20:fd:b6:13:b6:b8:0a:0a:dc:13:d4:7b:
eb:15:2e:94:04:ca:34:47:6e:90:00:14:dd:70:a6:
44:07:f0:01:8e:e0:35:b1:64:1f:6e:21:60:b6:65:
81:9e:e2:e8:46:53:8f:ed:ef:d7:20:b6:0c:59:f2:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A7:08:65:8E:69:F1:52:2A:A3:29:D1:DE:DB:23:8C:A9:FC:DB:31
X509v3 Authority Key Identifier:
keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/QKcIZY5p8VIqoynR3tsjjKn82zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6847::/32
Signature Algorithm: sha256WithRSAEncryption
36:aa:70:ed:3a:09:6f:8f:f6:e8:81:9b:e0:c0:17:ee:96:64:
94:dd:66:49:62:5a:f9:d7:13:46:01:ba:ce:31:36:88:0c:fd:
41:18:a1:2b:11:41:4a:4f:59:b3:f7:0c:a7:a6:71:d0:a3:11:
6d:2d:60:73:9b:35:e8:aa:78:a6:d4:25:4a:53:19:2d:85:9d:
94:8c:d3:68:6d:e7:5e:17:e2:0d:9a:34:88:81:98:9d:ce:6b:
1c:be:cf:77:22:30:d1:92:16:79:fa:e4:3c:d7:3b:58:f5:3f:
d8:f7:43:92:32:6b:44:6a:50:c6:30:2a:74:bf:55:ac:36:37:
68:6b:2f:cd:cb:6f:c0:86:5b:cd:3b:66:90:98:95:7e:f3:21:
65:1d:b3:60:d0:d6:45:b3:0a:a8:a6:4c:72:ed:51:cb:45:ef:
36:a9:19:eb:5a:75:92:f3:96:4b:8e:8c:e9:b8:ef:37:87:b9:
2b:ce:de:ff:6e:73:6a:7f:3e:7c:8c:2a:25:b0:db:cf:53:0e:
5a:95:a9:4d:76:11:59:3e:7f:90:6e:a7:57:e3:09:cd:16:58:
83:64:3e:ac:73:42:e7:88:01:47:d0:a5:0c:8e:e5:d8:31:6a:
2b:bf:28:99:5f:fc:ef:12:19:68:55:16:09:fb:22:7f:0f:62:
3f:e5:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:42:18 2025 by rpki-client