Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/Q9eGE-wLWwsKXIQHrFP9hdTn8eU.roa
File: Q9eGE-wLWwsKXIQHrFP9hdTn8eU.roa (raw, json)
Hash identifier: qRcZM+YxNhwqmCNA4KAusN6DLOMDHko5EQosJKbWg+A=
Subject key identifier: 43:D7:86:13:EC:0B:5B:0B:0A:5C:84:07:AC:53:FD:85:D4:E7:F1:E5
Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial: 018570674404F932889F422F28A5F02B518D
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/Q9eGE-wLWwsKXIQHrFP9hdTn8eU.roa
Signing time: Mon 02 Jan 2023 02:54:53 +0000
ROA not before: Mon 02 Jan 2023 02:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202728
IP address blocks: 2001:67c:a7c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:44:04:f9:32:88:9f:42:2f:28:a5:f0:2b:51:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Validity
Not Before: Jan 2 02:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43d78613ec0b5b0b0a5c8407ac53fd85d4e7f1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:74:3d:52:32:74:31:59:31:0f:90:6e:9e:
e1:71:ce:ff:6a:a1:7e:8d:51:f8:41:6a:cd:c9:a2:
ae:92:a2:96:64:48:1e:46:1b:41:64:e7:e0:33:d5:
07:4c:2b:93:51:d6:7d:b2:ed:7c:72:5f:aa:81:04:
de:12:0c:60:41:70:75:d3:4f:cf:cc:7c:2e:48:f2:
a3:02:31:2d:d6:6f:fb:b5:78:7a:69:07:08:30:cb:
79:e9:5b:88:bd:fb:9e:29:08:c2:62:af:0a:fd:3b:
09:33:9d:5d:8b:3b:44:c2:ec:52:bb:a4:ad:86:51:
11:14:37:e6:9f:d3:36:30:1a:fc:b3:94:b5:56:14:
be:20:70:5e:77:5c:15:12:0d:69:0b:49:84:a8:eb:
1b:17:0b:0a:ee:04:0f:9d:3c:3c:00:07:e9:dc:0c:
47:0a:92:e8:bb:36:3c:9e:7c:de:f2:cf:d4:a0:e4:
d7:f7:7e:94:9a:b2:1f:09:af:d4:0c:4f:79:e0:de:
ce:07:98:9f:69:1e:b7:75:70:7a:22:ee:3f:6a:45:
12:8c:47:de:3e:4a:68:62:f4:56:50:8f:57:3c:fd:
2d:02:5e:5a:f6:19:ee:7f:b5:ef:03:1f:a1:8e:b3:
cd:fd:91:a5:d9:2e:6b:93:01:e9:cb:27:9d:c5:94:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D7:86:13:EC:0B:5B:0B:0A:5C:84:07:AC:53:FD:85:D4:E7:F1:E5
X509v3 Authority Key Identifier:
keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/Q9eGE-wLWwsKXIQHrFP9hdTn8eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a7c::/48
Signature Algorithm: sha256WithRSAEncryption
1a:12:91:20:cc:b8:e7:be:c6:e3:7a:77:37:82:27:5a:e4:ff:
1a:c1:d0:c1:e0:e5:f5:8d:95:d5:e8:41:f8:48:00:9f:63:e4:
77:7a:61:d5:4d:2c:78:de:7d:51:f7:19:0b:f1:40:a0:88:d1:
93:8f:82:13:bb:5b:35:08:ef:f5:17:a3:5c:ae:1b:f5:15:d5:
a1:49:55:5d:ae:58:30:24:bf:c1:9f:c9:02:af:60:7b:ee:36:
3c:bb:ab:cc:7a:eb:77:2a:f3:b3:a8:00:d1:07:a4:1f:f8:16:
2c:99:37:56:1c:e0:99:eb:80:aa:33:c9:51:03:45:21:ce:89:
35:c2:bb:b9:fb:7c:d0:a9:c5:67:49:ae:21:67:82:84:9a:52:
77:f9:fc:89:c1:1c:db:b2:a8:be:74:2e:cf:66:6b:74:40:41:
b4:48:e4:82:5d:9e:fe:aa:73:80:8a:85:6b:de:77:ea:61:fc:
38:82:a6:6f:cd:dd:be:ee:8c:d2:31:6f:44:50:60:90:da:d0:
a0:b6:32:13:da:6c:a5:00:68:3e:5d:9b:48:41:bb:68:f7:ae:
35:cb:e8:5b:8d:a7:3d:2d:bd:42:ef:3d:2f:4d:5e:eb:46:15:
4f:2b:c1:f4:29:45:54:66:11:ab:6f:2e:0c:35:df:27:11:c7:
dc:a9:35:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:51 2024 by rpki-client on console-ams.rpki-client.org