Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Cq7nFHxQZzJ27rJSZOkcxTvV_DY.roa
File: Cq7nFHxQZzJ27rJSZOkcxTvV_DY.roa (raw, json)
Hash identifier: kk3O9j8V0Xx0XQKQRdocnISjJRlJfvzc+uUSVFluzLY=
Subject key identifier: 0A:AE:E7:14:7C:50:67:32:76:EE:B2:52:64:E9:1C:C5:3B:D5:FC:36
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018BB4ACFB3E6CEE8E60BB1E6871D0E750D9
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Cq7nFHxQZzJ27rJSZOkcxTvV_DY.roa
Signing time: Thu 09 Nov 2023 15:21:57 +0000
ROA not before: Thu 09 Nov 2023 15:21:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 2a11:1140::/29 maxlen: 29
2a0f:f400::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 10 Nov 2023 08:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:ac:fb:3e:6c:ee:8e:60:bb:1e:68:71:d0:e7:50:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Nov 9 15:21:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aaee7147c50673276eeb25264e91cc53bd5fc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:d9:fe:71:9b:6a:29:be:44:08:7f:3f:56:
0c:0a:9f:a2:52:03:6c:cd:58:0f:22:51:8a:89:0a:
53:67:13:37:a8:61:14:56:43:ad:d5:db:81:fd:ed:
af:55:ec:96:e0:9e:af:bb:6b:92:be:ea:74:82:ad:
a5:75:ac:22:79:8b:bb:bd:84:34:d5:62:27:7a:96:
08:89:17:41:87:fa:84:78:59:0e:a0:74:9f:65:c3:
39:58:96:a3:26:d9:0a:4a:63:14:7b:c0:54:4c:99:
38:1e:e9:05:08:26:00:06:7a:82:2b:36:c9:b2:29:
2f:7e:54:2c:86:16:67:e8:b3:e3:16:7b:95:f8:9d:
63:ff:1f:a0:04:c3:20:de:53:dc:f6:0e:3f:75:8c:
00:90:38:bf:c8:62:73:e8:5c:bc:ee:74:e0:32:67:
26:10:64:97:96:51:5f:2d:db:e2:21:b3:df:85:32:
8f:ab:1f:d7:0b:54:9e:3e:f3:1d:00:bb:b8:70:c2:
29:18:1b:4e:40:40:83:62:77:bc:b3:25:2b:cf:c0:
50:05:67:a3:24:4a:5b:8b:14:88:b8:db:88:fd:49:
f1:6f:46:89:7e:b2:c2:56:b7:4c:86:af:3c:09:51:
76:cc:b7:d9:8b:60:3e:54:31:19:0a:e2:79:f0:04:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AE:E7:14:7C:50:67:32:76:EE:B2:52:64:E9:1C:C5:3B:D5:FC:36
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Cq7nFHxQZzJ27rJSZOkcxTvV_DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:f400::/29
2a11:1140::/29
Signature Algorithm: sha256WithRSAEncryption
c1:51:3d:59:5e:6c:4c:7f:fc:6e:42:39:c9:ce:ab:12:f3:e7:
b7:57:74:70:b9:04:fb:00:8c:d8:ff:5b:a2:a7:57:d1:8f:69:
12:27:7e:01:51:60:9b:7a:88:5e:85:c8:b7:71:93:44:eb:3d:
9b:b7:23:e8:9b:b5:58:71:5b:de:3b:1d:c6:cd:2e:97:b1:d3:
ed:a7:c6:ff:bd:b8:6f:07:32:9e:bb:c9:e3:69:2a:e9:60:d0:
12:b5:eb:91:09:a1:07:9f:e2:a5:32:74:74:8f:d9:5e:f1:66:
4c:a5:1b:26:2a:29:ec:3d:bd:bd:fc:6d:18:32:43:90:da:9d:
02:af:1f:94:26:fd:c0:cc:32:d2:9b:d2:ab:f6:c1:cb:2d:de:
92:c8:13:7d:f1:a3:b8:c8:ba:3d:d0:bb:fe:c8:dd:83:ef:4e:
c7:e4:d4:6b:a7:32:d7:bf:43:c8:e4:2b:7d:02:c0:3c:a8:13:
90:57:9f:b4:fc:03:3b:94:a5:21:0b:c5:55:53:2c:12:b6:2f:
28:5f:0e:84:65:9e:10:67:35:6d:3b:39:a4:16:7d:c5:77:72:
da:41:48:cf:95:de:b6:3f:cf:53:f9:4b:6b:03:3b:db:a1:df:
4c:26:4b:79:3c:79:e3:96:06:82:5a:54:7c:ae:ba:77:74:0b:
34:7b:cb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:37 2024 by rpki-client on console-fra.rpki-client.org