Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/TrzlGfPG7G7wDBnHQngIkzhX0dg.roa
File: TrzlGfPG7G7wDBnHQngIkzhX0dg.roa (raw, json)
Hash identifier: fv0m4XXWQ7erQu1gluHagvYGTI0//e44EDnVS646Ndg=
Subject key identifier: 4E:BC:E5:19:F3:C6:EC:6E:F0:0C:19:C7:42:78:08:93:38:57:D1:D8
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018D6B56F15C80C1DF1D0679BFF846D6C51B
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/TrzlGfPG7G7wDBnHQngIkzhX0dg.roa
Signing time: Fri 02 Feb 2024 19:41:16 +0000
ROA not before: Fri 02 Feb 2024 19:41:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216435
IP address blocks: 2a11:f140::/29 maxlen: 48
2a12:28c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Feb 2024 20:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6b:56:f1:5c:80:c1:df:1d:06:79:bf:f8:46:d6:c5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Feb 2 19:41:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ebce519f3c6ec6ef00c19c7427808933857d1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a3:1c:72:cc:44:ea:fa:d7:44:0c:62:f7:94:
f7:19:c6:27:b6:9a:dc:4b:f3:82:1c:3e:1b:b3:1c:
4d:ab:04:49:e1:13:ff:81:38:c7:c8:37:6e:43:c8:
8d:ab:33:6c:dd:82:51:cc:0c:71:20:9c:00:a5:af:
4a:6f:bf:4e:d6:df:d3:d4:a9:30:60:22:a0:c1:db:
70:90:88:f8:8f:7b:42:3d:9e:56:f7:0d:90:35:86:
f4:27:91:a9:72:3d:84:4a:6d:51:6f:36:ab:c9:a3:
cf:6e:1e:24:e9:74:1b:d2:69:a7:b1:0c:29:34:c0:
eb:84:b5:8a:2e:52:0e:a3:6a:fd:07:2d:6e:5e:38:
b5:c7:22:d1:25:2c:78:1a:5a:91:1d:d7:ae:5d:88:
78:9f:ba:f2:8d:8f:7e:d6:af:ff:2d:c4:00:a2:ad:
65:0e:1a:a1:59:b1:a6:88:96:6d:76:bd:fe:40:56:
fd:64:ea:2c:78:b0:6e:3f:d2:be:8e:e2:f1:e5:92:
fc:58:67:da:fa:d4:f9:9a:1a:86:a5:5c:29:ad:99:
b3:f4:bc:51:e6:33:c6:40:3b:14:d7:9a:ac:82:ce:
55:4d:7e:44:d1:4e:37:bc:08:03:63:5d:d9:5e:26:
d4:b2:94:64:87:5e:54:11:e4:04:f6:05:71:b7:d3:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BC:E5:19:F3:C6:EC:6E:F0:0C:19:C7:42:78:08:93:38:57:D1:D8
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/TrzlGfPG7G7wDBnHQngIkzhX0dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f140::/29
2a12:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:a8:34:ac:ee:8e:09:ed:42:61:86:31:2c:06:dd:a4:4b:45:
48:0f:bc:46:f0:18:4f:20:c6:4b:e6:03:4b:9d:89:82:b3:ef:
c3:00:5d:18:3b:4b:b5:10:bb:00:53:20:65:42:01:28:c2:4d:
32:c8:27:42:b1:f0:d4:9c:b7:3a:d7:87:4f:c8:38:0b:16:c5:
89:ef:06:ec:37:c2:5e:14:61:78:e6:e2:86:5e:fc:73:02:d4:
d8:6d:78:58:21:bb:87:0c:9f:61:c1:53:1e:b4:91:b5:4c:55:
f9:93:51:f1:cc:3f:0d:03:67:a4:dc:2e:a1:13:28:0f:99:f5:
db:36:ea:bc:93:7a:15:10:ca:a1:47:44:7f:a8:cd:59:cc:ff:
69:f1:00:7a:98:ac:5e:c5:1f:81:ad:f3:84:bc:2d:3f:4d:28:
33:c0:0c:7a:96:4b:b5:8e:47:5e:38:76:1a:c1:70:01:c7:58:
83:83:18:7a:78:32:fd:44:91:79:f1:61:98:8c:05:63:74:7d:
4d:45:e2:3c:3a:56:9a:08:e6:c7:03:9b:42:2e:1b:81:e4:3a:
e0:50:01:da:22:41:ab:b7:40:99:d3:7f:45:e4:33:c1:83:6e:
17:a0:e4:bf:54:74:b0:aa:33:85:72:9f:16:c2:37:66:d4:eb:
a2:84:2c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org