Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/tAxBYMzM6QVbLNVyrup5hhBRLLc.roa
File: tAxBYMzM6QVbLNVyrup5hhBRLLc.roa (raw, json)
Hash identifier: ZLkayz3iELhHaM0R8pGKXQSY3GVbhx+4WgTbVzZNKZY=
Subject key identifier: B4:0C:41:60:CC:CC:E9:05:5B:2C:D5:72:AE:EA:79:86:10:51:2C:B7
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 01856CAF4496A0910D186EDF553FFF3117C6
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/tAxBYMzM6QVbLNVyrup5hhBRLLc.roa
Signing time: Sun 01 Jan 2023 09:35:03 +0000
ROA not before: Sun 01 Jan 2023 09:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 2a0d:8041::/32 maxlen: 32
2a09:5984::/32 maxlen: 32
2a09:f347::/32 maxlen: 32
2a09:5980::/32 maxlen: 32
2a0d:8044::/32 maxlen: 32
2a09:5985::/32 maxlen: 32
2a09:f346::/32 maxlen: 32
2a09:f343::/32 maxlen: 32
2a0d:8045::/32 maxlen: 32
2a09:f340::/32 maxlen: 32
2a0d:8042::/32 maxlen: 32
2a09:5986::/32 maxlen: 32
2a0d:8043::/32 maxlen: 32
2a09:5982::/32 maxlen: 32
2a09:f342::/32 maxlen: 32
2a09:f341::/32 maxlen: 32
2a09:f345::/32 maxlen: 32
2a09:5983::/32 maxlen: 32
2a0d:8047::/32 maxlen: 32
2a0d:8040::/32 maxlen: 32
2a09:f344::/32 maxlen: 32
2a09:5987::/32 maxlen: 32
2a0d:8046::/32 maxlen: 32
2a09:5981::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 13 Jun 2023 10:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:44:96:a0:91:0d:18:6e:df:55:3f:ff:31:17:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Jan 1 09:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b40c4160cccce9055b2cd572aeea798610512cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:5f:74:50:0b:0f:4a:25:5f:71:1a:5d:b5:
91:ff:5d:b9:98:95:bd:2b:4f:9b:8f:2f:4a:3f:78:
ae:6d:ed:bc:f9:bb:00:8b:4a:0f:7b:6d:68:ab:0a:
c4:55:42:96:06:44:93:80:36:a6:c8:ed:f4:00:84:
ae:ce:d3:9a:01:6f:a7:19:be:6d:42:4b:91:56:0b:
99:61:fb:fd:15:cd:a3:21:9d:9a:eb:34:f0:ae:25:
95:94:bd:ec:f5:d4:33:55:09:eb:36:eb:41:ef:c5:
f9:ea:e7:58:81:67:cb:b8:71:65:61:9b:9e:e7:96:
4e:a4:d5:da:b0:94:9d:93:0b:5a:4d:38:fd:9b:23:
e4:c1:13:73:00:7b:49:98:17:7f:0e:3d:90:50:62:
98:11:bb:d5:4a:c9:78:79:c4:fa:0e:d0:22:a3:30:
1e:9f:23:e7:2c:84:16:34:1c:ac:5d:59:d1:61:51:
2a:b1:fc:1e:f5:e7:21:cc:b6:c0:54:d8:f6:b5:1a:
62:be:fd:69:4e:e1:76:e8:e6:aa:c3:23:5d:b2:67:
f7:99:75:ce:9f:da:7f:ed:9f:3f:2a:7a:99:17:d4:
66:b7:3c:03:f0:cd:41:f6:a9:4e:82:1e:ea:22:6f:
c9:2a:b2:3f:ea:f5:7a:2e:ec:8a:4f:93:e2:2f:b1:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:41:60:CC:CC:E9:05:5B:2C:D5:72:AE:EA:79:86:10:51:2C:B7
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/tAxBYMzM6QVbLNVyrup5hhBRLLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5980::/29
2a09:f340::/29
2a0d:8040::/29
Signature Algorithm: sha256WithRSAEncryption
a0:b1:63:be:3b:3b:80:b3:b1:ca:d5:95:d7:63:3e:f9:4a:bb:
3f:9f:bb:fa:5e:f6:75:4c:5a:d2:bf:27:0c:a4:eb:37:01:b7:
36:13:96:b3:7b:b8:e6:af:16:ec:8f:75:77:64:13:71:93:fe:
9d:35:5d:39:ef:c1:25:8a:c0:7a:f3:42:0c:e4:3a:f4:40:85:
98:1a:e7:38:e3:19:9e:53:61:d5:9b:a8:5e:71:88:e5:73:72:
86:89:ba:28:3f:d4:54:f3:bd:e4:c5:6b:05:79:f1:f9:84:13:
12:d7:49:37:9d:b6:b2:c6:81:0b:67:c1:d2:64:41:a8:e4:fa:
8d:68:7b:14:f6:74:21:8f:9e:1a:d7:4a:9b:bc:7a:04:a9:8e:
4a:d5:51:23:7f:78:b9:58:df:66:49:38:ce:10:ef:f4:7b:1a:
b7:5f:1b:0f:71:bd:61:e5:d9:b1:20:3c:37:57:d3:69:12:fc:
74:ce:52:df:5f:09:14:ac:01:5b:87:8d:c1:7d:0a:6a:89:8c:
08:bf:8e:4d:6f:26:75:b9:7c:71:0f:a1:db:07:45:44:be:90:
ea:50:e5:42:93:fa:0d:40:01:3c:94:b0:e9:b9:52:d7:c0:38:
36:d1:3f:a6:b5:5f:8d:47:5d:6f:0b:a5:2f:30:08:23:1d:60:
d2:0e:63:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org