Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/JTHsFkZ8EZCt1yDHl_zveW5m7us.roa
File: JTHsFkZ8EZCt1yDHl_zveW5m7us.roa (raw, json)
Hash identifier: PEc1rpzpJty4gK+Koj4Y7raHwhBqSy+3PeRH/MlqHbI=
Subject key identifier: 25:31:EC:16:46:7C:11:90:AD:D7:20:C7:97:FC:EF:79:6E:66:EE:EB
Certificate issuer: /CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Certificate serial: 0193ABDC5175A453A6584F73C008B64BEA61
Authority key identifier: F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/JTHsFkZ8EZCt1yDHl_zveW5m7us.roa
Signing time: Mon 09 Dec 2024 14:39:22 +0000
ROA not before: Mon 09 Dec 2024 14:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34222
IP address blocks: 2a00:19a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 11 Dec 2024 09:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:dc:51:75:a4:53:a6:58:4f:73:c0:08:b6:4b:ea:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Validity
Not Before: Dec 9 14:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2531ec16467c1190add720c797fcef796e66eeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:91:6d:d1:01:fa:55:71:ba:ab:d6:0a:55:
1d:b9:11:6c:2c:3b:60:d7:6d:d2:8f:a6:68:a3:e0:
92:ee:f7:5b:27:d6:3c:4f:a9:15:48:20:87:45:eb:
bb:f1:cf:9c:14:e0:c2:14:cb:78:bf:96:e6:92:64:
8f:50:5d:34:70:21:b7:bb:a2:70:fa:6f:0f:c4:18:
c6:c2:0c:29:cd:b2:f8:b8:a5:18:0b:97:41:bb:7e:
a9:9b:8b:4f:87:0a:91:49:e2:b6:b6:71:7f:54:ca:
94:89:0a:f4:0a:b8:f4:cb:09:11:81:dc:50:ff:b5:
c6:fb:53:c8:d0:ec:05:24:31:d2:1d:69:63:b9:ad:
8a:2b:c8:ec:67:19:9c:41:83:ef:a9:a8:74:be:44:
e8:64:d7:74:08:cb:bb:bc:20:16:75:33:e5:55:09:
dd:cd:3a:ad:f8:f4:a9:1d:a6:01:0a:85:85:88:10:
88:9b:ef:1f:7f:36:b4:7c:f0:5b:3f:af:f2:04:cc:
7d:b0:15:d4:77:75:b6:30:7c:35:e4:25:f1:88:f8:
8f:38:f3:8f:7d:54:4c:00:9d:e2:86:20:de:93:38:
a2:bf:0c:69:44:4b:4d:21:ed:5c:08:a1:97:0d:37:
bd:8a:1f:ab:22:23:e9:3d:29:0a:c9:9e:bb:b7:6f:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:EC:16:46:7C:11:90:AD:D7:20:C7:97:FC:EF:79:6E:66:EE:EB
X509v3 Authority Key Identifier:
keyid:F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/JTHsFkZ8EZCt1yDHl_zveW5m7us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:19a0::/32
Signature Algorithm: sha256WithRSAEncryption
bb:75:f4:de:32:f5:fd:dc:89:b7:67:a9:6f:4d:34:3c:9e:f4:
42:39:9b:52:7a:36:f5:e7:be:0f:92:77:ee:17:0f:79:42:5a:
66:4b:ec:cd:90:c5:3b:c6:ad:ce:3c:46:1e:48:b9:c9:18:62:
48:8a:9f:f4:5f:da:4e:3a:ac:63:c4:99:70:fd:b9:bc:83:6b:
56:ed:5d:b4:e3:b7:ba:5a:63:e9:15:fc:f7:34:17:33:89:1a:
e8:24:f7:14:01:c9:33:b2:14:ca:af:af:bd:ba:32:91:6d:e5:
55:89:27:45:a0:c9:84:36:b3:8e:3d:48:60:45:f3:d3:df:93:
f4:6f:18:d6:a9:c1:0d:10:45:2a:35:1b:f0:3e:80:28:95:c8:
d8:4b:34:d6:27:cb:35:91:31:dd:56:87:28:db:c0:db:bd:28:
18:05:8a:3e:5a:c9:31:a9:62:45:81:94:92:39:5a:b5:6d:b8:
de:60:92:44:01:7e:cc:fa:0b:a2:20:ee:9a:b8:be:31:1e:bb:
9b:85:76:8e:66:5b:aa:35:ee:84:ce:76:a8:53:dd:06:c8:ae:
04:d9:4c:5b:8e:ed:1c:d2:d0:cd:01:a0:89:1d:8a:1c:7f:4a:
1f:d1:6e:59:d6:0e:f6:30:fb:76:a3:35:68:bc:25:15:29:be:
78:78:56:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 11 13:39:08 2024 by rpki-client on console-fra.rpki-client.org