Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/TqNEDi9y14geRN8awmrCQPmf_mY.roa
File: TqNEDi9y14geRN8awmrCQPmf_mY.roa (raw, json)
Hash identifier: 0kaAjnR01AmDy5eZDeRkzMDSCGOBsxq75sGsJzNYlt8=
Subject key identifier: 4E:A3:44:0E:2F:72:D7:88:1E:44:DF:1A:C2:6A:C2:40:F9:9F:FE:66
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018BB8416D33BEB739589B70DF0C002A6CF3
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/TqNEDi9y14geRN8awmrCQPmf_mY.roa
Signing time: Fri 10 Nov 2023 08:02:57 +0000
ROA not before: Fri 10 Nov 2023 08:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43641
IP address blocks: 2a11:1140::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:41:6d:33:be:b7:39:58:9b:70:df:0c:00:2a:6c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Nov 10 08:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ea3440e2f72d7881e44df1ac26ac240f99ffe66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1a:3d:6e:da:27:81:3a:d4:13:e2:1b:fa:18:
b2:b7:ed:00:b5:77:f0:0d:d7:1a:59:83:a6:33:7d:
1a:9d:9f:fc:05:ee:7b:c7:98:36:1a:19:7b:c1:9e:
1a:84:ea:3e:a0:98:de:33:6e:18:bd:06:c8:5f:39:
52:9e:8a:14:23:75:1c:ef:bc:1a:ee:23:af:b5:1b:
15:f1:7f:70:ed:2b:70:2d:d4:27:1e:00:ae:55:58:
45:8c:45:64:34:ad:1e:09:cd:cf:40:7f:b0:3b:dd:
ac:9c:61:63:b4:b9:e6:70:44:c1:8c:13:f7:a0:e1:
37:f8:8c:6e:3b:7e:91:88:76:cd:f7:1a:30:cc:72:
11:a6:2f:af:78:95:0e:be:db:4d:d4:c6:46:2e:63:
9e:9e:6a:92:c4:af:d4:88:d8:a8:48:5a:4b:33:25:
19:69:e1:01:f2:3d:a5:49:0b:21:d8:cc:25:b9:71:
af:59:7f:3c:d5:4f:c6:22:72:52:5f:5f:18:82:8a:
4a:80:47:5a:d9:e6:6c:5b:f1:f9:75:ef:e1:ec:bd:
84:45:cb:7a:16:ec:8e:65:dd:cd:2c:de:15:c0:6c:
73:1f:14:ea:db:18:25:70:3b:9a:3e:f7:1c:8c:c2:
ea:4f:87:b4:c2:20:ee:0a:61:52:05:1f:73:d1:67:
d8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A3:44:0E:2F:72:D7:88:1E:44:DF:1A:C2:6A:C2:40:F9:9F:FE:66
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/TqNEDi9y14geRN8awmrCQPmf_mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1140::/29
Signature Algorithm: sha256WithRSAEncryption
30:69:d1:14:1c:f2:5b:5d:16:ac:d8:64:89:fa:a8:2c:67:7d:
fd:14:e3:c7:ac:4a:8d:0d:41:b1:93:70:55:8e:42:e1:ae:0c:
9a:a3:53:63:88:ba:50:99:75:01:08:84:c1:c4:95:86:3c:d9:
99:19:a1:18:49:4d:a5:58:ec:51:03:98:2f:76:cd:90:0f:1b:
ac:80:00:76:45:fb:c3:e6:96:39:83:ad:e1:e4:48:22:e0:f0:
d3:65:9c:6d:62:35:d4:69:73:d2:a2:a6:47:07:df:59:ae:c1:
f5:38:67:0b:ef:bd:e5:9d:25:2e:cf:4d:28:e8:e1:66:fc:85:
c4:82:58:63:2a:37:3e:a6:af:3f:39:4f:7e:1b:30:88:9d:bc:
7b:aa:e4:ed:cc:93:a6:79:67:01:73:f6:29:5a:92:38:80:ed:
5f:14:5b:6c:54:cc:2b:9b:34:31:b7:af:f6:d4:ff:2e:e1:c1:
60:3e:94:87:c9:6d:b8:ec:ce:3d:62:ce:25:c4:36:39:50:b5:
5a:5f:3f:5f:4b:2b:a3:37:a1:b9:da:50:c8:d6:0a:d5:ac:9e:
1e:61:1c:25:0c:d4:c7:e5:fa:2d:25:c2:e2:45:05:17:0f:70:
44:d6:9d:a2:6f:57:ef:f4:6b:18:06:29:64:84:69:9f:d2:e3:
b7:f2:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org