Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/QmEP52Hg-m8j7OZfYLtphbWbyxQ.roa
File: QmEP52Hg-m8j7OZfYLtphbWbyxQ.roa (raw, json)
Hash identifier: J5Anft/oNaiEdf0zH8TyyW0IcJgq6jcZYh8ybcJyJz4=
Subject key identifier: 42:61:0F:E7:61:E0:FA:6F:23:EC:E6:5F:60:BB:69:85:B5:9B:CB:14
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01887D2C938EBFC56EF3898743750F5C5E04
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/QmEP52Hg-m8j7OZfYLtphbWbyxQ.roa
Signing time: Fri 02 Jun 2023 17:34:13 +0000
ROA not before: Fri 02 Jun 2023 17:34:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203
IP address blocks: 2a03:5000:162::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:1::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Jun 2023 11:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:2c:93:8e:bf:c5:6e:f3:89:87:43:75:0f:5c:5e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jun 2 17:34:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42610fe761e0fa6f23ece65f60bb6985b59bcb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:84:a8:84:7e:95:2f:74:6e:95:4f:fb:6b:
98:50:c0:1b:ed:09:2a:22:12:5d:ae:8c:3a:9e:6b:
e9:69:8f:71:2c:d7:5b:4c:e3:2f:19:58:f3:be:96:
b0:74:f2:14:34:2e:a1:06:16:23:0f:5c:aa:9a:a4:
f4:83:9e:7e:44:1b:0b:1e:fe:a7:06:0b:0f:65:25:
b3:ea:4d:7c:08:8d:95:4e:bf:37:5a:79:42:54:00:
6d:2b:74:86:5a:f9:eb:27:03:0f:62:f9:a7:79:69:
8f:09:38:ea:0b:e6:fe:0b:94:98:54:f8:99:4e:54:
f0:cb:06:c6:8d:ef:3e:02:47:2d:bd:f8:65:e0:92:
87:a2:ea:61:a3:c5:4c:df:3b:15:2c:24:6b:df:f0:
fa:5f:c3:3c:6c:c6:72:26:0b:bf:7f:c0:c5:da:26:
99:fa:a5:c8:39:5f:1b:82:84:24:c8:88:9c:33:f3:
f4:b7:d8:f9:0a:54:ce:e7:80:c3:67:52:ba:14:cf:
db:ff:47:6f:f0:a2:1b:e7:83:59:5a:e5:79:8b:9a:
ce:98:42:36:8d:ef:af:03:e5:26:d1:b4:b8:ef:0f:
b2:55:8d:fc:7f:56:32:a0:26:17:79:19:ce:e8:4b:
6e:80:69:23:c9:8c:ae:8f:e2:9d:19:a6:f6:a9:e4:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:61:0F:E7:61:E0:FA:6F:23:EC:E6:5F:60:BB:69:85:B5:9B:CB:14
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/QmEP52Hg-m8j7OZfYLtphbWbyxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:21::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:31::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::/48
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a1:86:97:8e:d8:b8:4a:0a:26:13:9e:c9:4b:3d:71:1b:e4:69:
96:4a:99:58:7c:8e:1d:92:63:53:ad:8a:7c:c1:13:3c:27:df:
f3:6b:a5:f9:5a:64:eb:27:a5:db:42:26:82:cf:87:7a:83:33:
13:65:55:95:f3:b6:a9:0d:49:17:ce:30:00:d2:66:0b:7b:9e:
f3:f2:e8:e3:10:17:a6:eb:81:21:62:a2:16:1a:9f:9b:e5:04:
48:3b:ea:0e:cb:2c:26:84:26:b9:3a:1c:a1:09:49:f2:0a:3a:
50:06:32:a4:f6:d0:5c:6c:43:3e:a4:b0:4d:b5:5a:98:c5:d0:
ce:b9:34:ec:58:19:1d:d4:6b:98:13:43:18:a1:7b:0c:8e:f0:
9e:9c:6c:01:4a:fc:45:ff:81:66:1e:48:47:54:c8:0b:10:ee:
ed:ab:4b:b6:e7:08:b7:3c:a8:b6:d7:d5:27:38:2e:34:92:7d:
2e:7f:3d:6d:56:57:70:31:4c:6c:cf:3e:f0:80:29:a0:30:bd:
c1:2a:89:68:fc:88:9d:0e:fd:3a:f1:9f:63:80:ff:15:11:cd:
f5:1b:4d:e9:f7:79:ed:df:0b:99:32:1d:ce:03:53:86:fe:37:
4d:78:22:fb:b6:2e:4c:1e:9c:b7:a1:cd:4c:76:8e:1b:65:d2:
da:32:f0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:11 2024 by rpki-client on console-fra.rpki-client.org