Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/f21yAdLBugWFXgOm_Zgj_tRfcZ8.roa
File: f21yAdLBugWFXgOm_Zgj_tRfcZ8.roa (raw, json)
Hash identifier: VlgPKi9DI4YhzKx++RPsFfBTWfZ0j0oXSJJ2ShFeDiA=
Subject key identifier: 7F:6D:72:01:D2:C1:BA:05:85:5E:03:A6:FD:98:23:FE:D4:5F:71:9F
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01930F360F815FE2B1C71300B3A2E12BE399
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/f21yAdLBugWFXgOm_Zgj_tRfcZ8.roa
Signing time: Sat 09 Nov 2024 04:37:01 +0000
ROA not before: Sat 09 Nov 2024 04:37:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213893
IP address blocks: 2a0d:d940:10::/44 maxlen: 44
2a0d:d940:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Nov 2024 22:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0f:36:0f:81:5f:e2:b1:c7:13:00:b3:a2:e1:2b:e3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Nov 9 04:37:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f6d7201d2c1ba05855e03a6fd9823fed45f719f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:02:85:fd:10:7b:b2:b1:b8:11:a7:a5:b8:c7:
31:3a:f6:7b:e4:49:98:89:91:1a:35:92:a6:78:97:
5f:5d:80:c4:22:0d:be:af:cb:e7:ca:11:af:c3:ea:
98:b9:83:6c:ff:08:f6:49:06:ee:f7:10:ae:c7:d0:
7b:da:a9:12:5a:9c:67:22:66:44:70:59:fa:72:5d:
15:b0:c2:62:f1:93:a9:82:65:9f:ee:72:88:b1:49:
ca:82:e6:0f:75:3b:6a:a3:ad:4b:62:c9:bf:cc:fd:
aa:93:14:ee:dd:d6:f1:d1:51:00:be:30:d8:fd:dd:
45:73:88:02:2e:7a:0b:8b:9c:8b:d8:21:8e:9f:73:
4a:d0:53:fd:64:3f:33:6a:ef:fb:21:ef:ca:90:fe:
90:54:da:63:06:96:f7:c8:49:47:b7:41:12:52:68:
77:56:91:c5:75:d8:87:c5:d6:ba:50:cd:ec:7c:a0:
a4:42:bf:6e:de:b3:3b:c4:27:e6:34:dc:00:80:25:
3d:00:94:73:d7:01:67:00:df:75:9c:a6:a0:64:59:
e5:4d:6a:6e:9d:2f:4d:3c:da:e4:7c:d3:c1:ce:82:
ab:d2:d3:d3:80:19:9b:a4:63:7c:0f:e3:03:52:d2:
95:13:ca:59:b3:d4:33:e3:df:ec:f6:0a:7a:44:fe:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6D:72:01:D2:C1:BA:05:85:5E:03:A6:FD:98:23:FE:D4:5F:71:9F
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/f21yAdLBugWFXgOm_Zgj_tRfcZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:10::/44
Signature Algorithm: sha256WithRSAEncryption
99:fb:88:1c:7a:5f:35:d0:44:dd:af:22:01:54:d7:e9:21:97:
e3:cd:c4:b4:1a:fd:8a:b3:ef:70:7c:5f:96:f0:a6:65:d5:a7:
30:4d:5d:30:25:32:ed:80:0d:c7:d4:53:12:8f:3a:2c:d8:4c:
2d:ab:4f:28:93:32:b0:3f:b4:ac:1e:a2:2c:43:6d:ee:ca:8c:
7e:06:6b:34:b0:51:70:d0:c3:e4:5f:5e:e2:f2:3d:36:2e:38:
80:67:e2:0e:4d:50:e2:dd:c8:00:5d:a0:a5:c9:2a:f7:bb:a7:
74:17:ef:fc:d2:fe:1c:44:40:8c:b6:42:88:c2:ef:07:dd:37:
bb:04:93:4f:a3:81:b0:25:07:d8:d1:66:7d:ed:87:a9:c2:78:
bf:a3:04:be:65:46:96:39:cc:67:af:2c:d4:28:6b:0a:d1:35:
1d:ca:ff:10:fb:92:dd:b5:22:03:65:d8:2b:31:6a:36:64:51:
10:a0:de:2f:83:d7:75:45:f0:ad:3f:9f:b2:74:39:64:e8:e0:
e6:50:56:ba:ac:c4:bd:f6:a0:f2:e3:97:79:f8:d3:28:98:3c:
3a:52:9f:f0:98:e4:9f:55:0c:b8:fc:5f:0c:02:46:06:cd:c6:
97:26:8f:65:3a:e0:99:c8:9c:11:59:b7:41:ea:22:14:22:9b:
8e:6f:3b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 00:23:18 2024 by rpki-client on console-fra.rpki-client.org