Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/b4JDVr1f_Qz7FjKtiMkZvwb1CIk.roa
File: b4JDVr1f_Qz7FjKtiMkZvwb1CIk.roa (raw, json)
Hash identifier: nyaozSc0XnEup0PV+O55yFleW8grVckqFzcSFoBEe5Q=
Subject key identifier: 6F:82:43:56:BD:5F:FD:0C:FB:16:32:AD:88:C9:19:BF:06:F5:08:89
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 018EE62BB2143FE9F5427E0C7E7B05A50291
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/b4JDVr1f_Qz7FjKtiMkZvwb1CIk.roa
Signing time: Tue 16 Apr 2024 09:10:07 +0000
ROA not before: Tue 16 Apr 2024 09:10:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 2a11:a580::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 18 Apr 2024 09:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:2b:b2:14:3f:e9:f5:42:7e:0c:7e:7b:05:a5:02:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Apr 16 09:10:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f824356bd5ffd0cfb1632ad88c919bf06f50889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:7e:63:60:f4:26:47:cb:0e:bf:8e:4a:18:
1a:e6:72:61:fd:3b:c7:b0:67:a6:7c:4f:61:76:cc:
82:c9:17:32:1a:75:fc:d1:7c:92:60:e2:c5:d4:d8:
6f:fc:1c:14:ef:e7:27:3c:63:d2:39:d6:5a:ac:6c:
f1:c0:b6:f8:cc:3c:0d:b7:37:b0:ed:4c:34:13:e4:
7a:c4:53:d2:39:2f:af:ba:c7:ba:9e:b0:7d:f3:e5:
5a:40:65:3e:c6:88:cf:bc:40:ba:fb:f6:e4:22:5f:
fb:48:f0:05:20:25:54:62:69:86:e2:45:09:cf:47:
d3:a9:6b:40:46:99:af:5f:b1:5e:8f:d1:d8:89:6f:
16:eb:e9:59:d8:62:77:a1:e8:6c:fe:21:07:54:27:
cb:b2:16:ab:26:16:7e:aa:c0:b5:36:91:24:21:71:
60:21:a4:8f:3f:b6:2b:cc:73:65:ff:9c:c4:e7:fa:
a7:e8:d4:55:82:9a:08:0d:24:5e:c0:24:23:5f:db:
d4:17:31:93:25:6a:23:94:92:72:8d:e3:e8:f9:2b:
51:2a:62:b0:66:a2:8a:87:12:4c:69:51:03:78:b7:
d0:81:69:11:af:ec:0e:a4:1a:ad:1d:e4:64:ec:d8:
83:68:0a:db:61:93:23:3f:5f:b1:ff:a5:5f:44:8c:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:82:43:56:BD:5F:FD:0C:FB:16:32:AD:88:C9:19:BF:06:F5:08:89
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/b4JDVr1f_Qz7FjKtiMkZvwb1CIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a580::/32
Signature Algorithm: sha256WithRSAEncryption
6e:35:5a:73:f1:31:5a:4c:2b:e5:64:8b:59:a8:8d:6e:f7:40:
29:d1:48:7d:50:0c:a7:2b:f3:e7:f8:57:a5:3b:8b:68:a0:d0:
c5:e0:29:d9:6b:c9:2b:10:62:4e:de:f5:6f:d7:6d:e3:40:4c:
e9:3a:26:17:8d:26:e5:d8:de:c3:dc:f8:e9:02:0a:ac:a3:95:
62:32:78:ae:63:da:35:4c:f7:4f:f4:3f:91:a8:a6:e5:a9:9f:
8d:b5:b8:c1:af:2c:a9:4c:3c:0c:a3:7d:5d:53:ce:6b:5f:1e:
7f:75:48:60:b1:4f:b0:5a:01:a8:62:82:06:19:27:f1:54:87:
75:a1:0d:c9:44:a4:fc:29:11:ba:be:e9:c0:1d:91:d1:0c:39:
6c:3f:80:96:be:4e:b0:5e:8d:b2:e3:78:99:fd:5b:56:b5:d8:
c4:fe:3c:f0:de:d8:b9:ab:7a:dd:89:10:50:df:cf:62:8d:26:
5b:fd:df:e2:8c:8b:f6:d1:5f:42:84:a0:d2:47:f6:03:96:92:
a6:19:db:0f:e7:4e:78:e0:85:35:64:cd:57:0e:52:59:f4:05:
52:1e:e4:28:d7:d3:17:f9:f4:d4:27:de:7c:7b:16:5e:e6:ec:
e1:8a:cd:65:93:ea:e9:c3:40:81:88:f3:b8:13:f6:50:13:17:
87:df:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org