Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/bxJk4Fmtu7rzr_bLmSQ1N5VCevg.roa
File: bxJk4Fmtu7rzr_bLmSQ1N5VCevg.roa (raw, json)
Hash identifier: 5pLFqutwFXlucctk8JWFNy3LvXhfMCQplLfYKvC7M74=
Subject key identifier: 6F:12:64:E0:59:AD:BB:BA:F3:AF:F6:CB:99:24:35:37:95:42:7A:F8
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 018FE4B217391143215AAECBD9D3154090E9
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/bxJk4Fmtu7rzr_bLmSQ1N5VCevg.roa
Signing time: Tue 04 Jun 2024 19:20:27 +0000
ROA not before: Tue 04 Jun 2024 19:20:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:645::/32 maxlen: 32
2a11:b681::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 11 Jun 2024 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:b2:17:39:11:43:21:5a:ae:cb:d9:d3:15:40:90:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Jun 4 19:20:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f1264e059adbbbaf3aff6cb9924353795427af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:20:f1:dd:94:f4:8e:52:a2:a8:cf:4c:20:
dc:5d:db:82:9a:6c:38:b3:75:0c:2d:36:a0:64:23:
a2:9f:eb:ea:1a:18:9d:a3:67:b2:5a:43:14:f9:ad:
d1:cf:de:9a:20:b3:e8:c3:c5:aa:c3:12:8f:69:8e:
46:9a:f9:8c:15:89:e7:0a:d4:8b:8d:b7:1d:7f:af:
f4:ec:6e:f5:d5:60:25:fd:e8:53:61:15:31:62:37:
46:a6:81:26:eb:29:65:d2:70:22:68:87:28:90:e2:
f5:cd:c5:48:6e:33:a6:7a:4b:17:39:39:92:41:04:
96:d1:01:5f:80:1f:c5:ac:d8:7d:90:09:b6:c1:d0:
af:8c:04:c2:f0:9a:3b:8c:c6:07:2b:0a:99:2c:64:
17:a1:ae:91:71:80:9b:52:bb:76:92:aa:be:0a:10:
b9:c3:96:c1:94:e4:03:90:2a:1b:e0:78:cb:1a:bd:
e8:9d:24:31:0b:a8:f0:34:8d:9d:e8:e5:83:84:7f:
d7:c3:a3:12:51:e9:93:af:87:78:f2:b9:fe:82:73:
75:fc:75:ee:df:91:71:17:b9:d3:a1:08:d9:b0:01:
e4:34:85:c0:3d:6e:e2:a3:b2:57:4e:34:a9:64:36:
d0:6a:4a:10:ee:0e:4f:e8:89:98:96:36:3e:fe:83:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:64:E0:59:AD:BB:BA:F3:AF:F6:CB:99:24:35:37:95:42:7A:F8
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/bxJk4Fmtu7rzr_bLmSQ1N5VCevg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:645::/32
2a11:b681::/32
Signature Algorithm: sha256WithRSAEncryption
aa:87:eb:28:90:81:88:5d:12:be:1c:f2:1c:0f:66:8d:42:4e:
4b:7e:c6:d9:19:28:82:67:bc:38:df:c2:59:63:ba:a6:a8:c9:
72:97:6b:5c:c8:d2:46:95:92:7f:71:81:3b:65:95:58:10:7e:
af:59:58:d2:8b:7e:55:82:7b:2a:85:66:18:9e:ff:a1:3e:22:
b6:59:b4:35:f0:a3:0f:cf:39:37:46:23:5b:f5:ff:b6:a4:0f:
7e:e0:b7:c6:c1:d4:c0:5a:b9:97:3d:f8:08:9c:f1:1c:27:dd:
89:bb:22:bb:d5:07:68:ed:74:bd:a8:cd:09:a8:5a:e8:39:0e:
c0:89:33:ca:79:2e:8a:bd:38:31:9e:d4:65:0e:2f:39:2d:3a:
3c:22:72:d3:c4:18:b2:19:c2:93:b4:e0:13:5c:bd:2d:50:1f:
b1:d5:28:93:e3:2c:2d:ca:ae:6a:03:51:f4:85:d0:8b:4c:66:
cb:82:88:76:8a:ba:b0:7f:2f:0b:c4:1f:95:9c:fe:f0:80:d6:
ff:5c:cd:6f:01:5e:f4:86:c3:25:34:ed:47:c4:21:7c:e8:17:
e1:76:50:ec:87:15:3a:ef:3e:e4:d4:d5:cc:a4:01:c9:4d:4c:
08:41:7b:52:61:08:ff:17:76:c6:ba:76:20:0e:0f:d8:59:3e:
3c:1b:43:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 19:46:37 2024 by rpki-client on console-fra.rpki-client.org