Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/FYgIsLdr6RjSLyYkk0ZBW0KLeK0.roa
File: FYgIsLdr6RjSLyYkk0ZBW0KLeK0.roa (raw, json)
Hash identifier: V6KXaSONGsvaz8s/WpigdnVgFp2YpJhS1YLaRxim1BM=
Subject key identifier: 15:88:08:B0:B7:6B:E9:18:D2:2F:26:24:93:46:41:5B:42:8B:78:AD
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 01907E1080B81620DB8A4EB01A126E0D7557
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/FYgIsLdr6RjSLyYkk0ZBW0KLeK0.roa
Signing time: Thu 04 Jul 2024 14:05:28 +0000
ROA not before: Thu 04 Jul 2024 14:05:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214790
IP address blocks: 2a10:c943::/32 maxlen: 32
2a10:c943:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jul 2024 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:10:80:b8:16:20:db:8a:4e:b0:1a:12:6e:0d:75:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Jul 4 14:05:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=158808b0b76be918d22f26249346415b428b78ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:67:1a:34:33:1d:0f:61:40:a0:50:11:84:
f5:8a:a7:e6:1e:03:13:21:7e:ed:5c:b8:4c:5e:1f:
5b:0a:61:bf:62:82:18:51:3e:70:74:51:82:47:da:
df:50:54:e6:56:ba:5e:37:5e:91:cd:cb:b6:cb:93:
57:e9:2a:f5:64:a4:e1:0d:08:de:5f:e0:f0:d9:db:
6b:67:95:4e:d3:a3:4b:fc:dd:5a:be:21:0b:1e:3d:
5c:d1:c9:e6:61:58:65:1d:1f:f9:38:7c:ff:e6:c3:
2f:7d:60:5c:88:c8:54:bc:9b:cf:02:86:65:58:05:
fa:ec:43:0a:c1:3a:97:a9:3b:f7:76:dd:27:13:e6:
89:cf:e5:0f:b0:42:a5:07:15:f3:b6:27:05:b5:e1:
e1:c8:55:dd:55:01:25:50:d5:ed:aa:f0:f4:be:16:
98:09:ae:f8:36:1e:31:1c:ca:17:a4:e3:34:b8:3a:
c1:b2:9f:44:d4:d1:1b:5c:e6:68:c9:6d:51:bb:42:
88:65:d8:7a:ea:d2:2e:47:a7:5f:f6:72:d5:91:a8:
47:8e:8f:4a:1e:fc:88:09:3a:95:40:0d:69:fb:dd:
e6:3b:24:53:14:b1:9f:9e:d4:06:85:4d:0d:f2:f8:
5d:c2:b3:e7:14:ee:49:7b:78:8b:8c:31:51:34:7d:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:88:08:B0:B7:6B:E9:18:D2:2F:26:24:93:46:41:5B:42:8B:78:AD
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/FYgIsLdr6RjSLyYkk0ZBW0KLeK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:c943::/32
Signature Algorithm: sha256WithRSAEncryption
83:1f:28:4c:19:07:fd:5c:86:f3:5e:f8:30:84:2a:3e:97:13:
c1:8e:ac:6c:91:76:f2:b8:6a:dc:28:86:0f:e0:8f:2f:7c:a3:
63:f1:28:d2:ab:98:df:4d:bd:85:e9:13:94:e7:c3:3f:c9:4f:
e9:fa:f6:77:c5:d9:10:68:54:f7:a1:37:ce:81:2c:b1:c7:9c:
cc:88:60:cb:ec:5e:f8:27:dd:6f:d3:29:6c:34:42:3c:f9:bc:
0f:83:56:ea:4e:dd:45:6a:ed:6b:76:99:b4:53:91:27:37:f0:
7b:49:f5:88:d9:02:bf:fa:57:7b:0a:3c:21:c7:51:35:f0:ff:
00:a9:53:79:14:4e:78:b4:fb:9f:ab:26:3d:c8:d8:0d:2d:fa:
0a:70:c9:94:da:90:b7:6c:58:e6:20:e5:c0:a8:15:c8:e5:ec:
b9:9c:50:b5:4d:a4:90:54:84:ec:e5:0c:73:4f:a0:89:ae:2c:
86:fb:8f:2b:87:3b:26:c7:63:3f:48:57:80:8b:57:b4:7a:4e:
ee:fa:fe:51:60:77:b3:27:86:cd:cb:05:0b:98:ab:d7:83:70:
e6:49:3c:ae:d0:8c:f1:b5:b6:d3:2b:de:8d:9c:cc:05:d3:f2:
7f:46:64:29:09:5d:9f:5e:b8:11:64:cd:9c:19:cd:ef:0f:b3:
04:61:b0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 09:50:22 2024 by rpki-client on console-ams.rpki-client.org