Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/oN6gZadec5CpIAqx_Fd-X3AcqUk.roa
File: oN6gZadec5CpIAqx_Fd-X3AcqUk.roa (raw, json)
Hash identifier: 85KBnRX53OlKPYEimEL0Qa601iBqmBjEdkPl71h0nvo=
Subject key identifier: A0:DE:A0:65:A7:5E:73:90:A9:20:0A:B1:FC:57:7E:5F:70:1C:A9:49
Certificate issuer: /CN=0fa8fb5399a27a430ae727c532cd224999e8864f
Certificate serial: 01936E413EE049DE1850D57FA614E1F093E6
Authority key identifier: 0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/oN6gZadec5CpIAqx_Fd-X3AcqUk.roa
Signing time: Wed 27 Nov 2024 15:33:09 +0000
ROA not before: Wed 27 Nov 2024 15:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30811
IP address blocks: 2a00:1c50:1::/48 maxlen: 48
2a00:1c50:5::/48 maxlen: 48
2a00:1c50:6::/48 maxlen: 48
2a00:1c50:7::/48 maxlen: 48
2a00:1c50:2002::/48 maxlen: 48
2a00:1c50:2003::/48 maxlen: 48
2a00:1c50:2004::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Dec 2024 08:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:41:3e:e0:49:de:18:50:d5:7f:a6:14:e1:f0:93:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fa8fb5399a27a430ae727c532cd224999e8864f
Validity
Not Before: Nov 27 15:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0dea065a75e7390a9200ab1fc577e5f701ca949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:63:b1:8f:16:56:7c:75:8f:19:e5:a6:5f:
41:c4:ae:9a:c7:6c:26:8b:35:23:28:78:fe:91:6b:
fc:ed:ee:3a:32:dd:f5:de:cf:bb:83:47:58:c3:37:
93:89:9d:2f:53:52:39:c9:67:7e:2f:74:9b:2c:16:
f4:d5:ac:f8:56:dd:a5:10:ec:c8:1a:cc:38:dc:8e:
dd:f9:2a:04:52:f4:35:cd:cb:d9:6d:7a:a2:8c:0a:
5e:1d:e1:d6:b4:6d:b8:1a:58:86:13:cc:bf:6d:05:
c7:14:38:56:df:fb:f1:c9:5d:2a:03:52:61:e6:64:
84:17:7a:25:4f:10:b8:d8:a5:26:4d:04:e8:13:e8:
a1:53:d4:c0:a7:57:47:cf:ae:64:56:d8:b9:db:77:
73:2b:35:d3:16:a5:8f:e0:73:ab:67:a9:7b:54:74:
f3:ad:22:44:78:fc:7c:56:23:9b:5c:10:2f:8c:ed:
08:61:8b:74:90:91:d2:49:61:f4:5d:f3:b3:97:ad:
3e:a7:85:ef:7f:9d:8d:3f:23:30:ac:e0:e7:f0:d7:
7d:5f:3a:1b:02:c1:64:0d:3c:4f:d9:a6:ba:76:8a:
c2:76:aa:40:ac:b7:f7:68:1a:e4:62:c2:46:df:1d:
58:4d:8d:68:5a:97:e8:25:1c:64:06:b2:49:41:f6:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DE:A0:65:A7:5E:73:90:A9:20:0A:B1:FC:57:7E:5F:70:1C:A9:49
X509v3 Authority Key Identifier:
keyid:0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/oN6gZadec5CpIAqx_Fd-X3AcqUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1c50:1::/48
2a00:1c50:5::-2a00:1c50:7:ffff:ffff:ffff:ffff:ffff
2a00:1c50:2002::-2a00:1c50:2004:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a2:04:f2:04:04:b3:20:0a:b6:2a:bb:a5:20:c5:e7:33:77:b4:
eb:ff:cc:15:73:c0:77:27:fe:ba:ce:cb:a8:0f:f7:f8:47:ca:
8e:9a:6f:e1:46:74:6e:17:fd:84:a5:f5:2a:40:28:d7:c1:82:
99:cd:26:90:ae:43:36:8f:ca:82:87:7a:fc:73:30:73:96:08:
2b:23:5f:14:4b:cd:7a:25:95:40:f0:99:f8:24:0e:d8:08:18:
95:fe:a4:11:e8:16:df:f0:7a:f0:da:27:e7:85:0c:12:2f:e5:
51:88:28:2c:a0:de:b8:c4:bd:c9:60:de:0d:1b:5d:e3:a4:a1:
aa:68:bc:8d:21:89:3a:28:43:38:a2:11:6c:f3:78:62:9a:64:
b9:f6:ad:e3:26:07:92:1d:98:96:29:5b:0f:76:bd:b6:eb:2d:
88:62:a1:04:4b:2d:74:bf:ec:27:e5:f6:cd:89:8a:7d:e3:c7:
e4:34:3f:59:13:18:e2:c0:ac:ae:fa:8d:77:1a:86:73:1a:09:
3a:99:35:8c:1b:65:f1:44:21:46:26:36:18:6a:e4:06:d5:aa:
cd:ca:2c:73:d3:9c:3d:b0:c5:be:39:01:14:0e:cf:ed:84:d4:
bb:86:95:3a:4a:c1:77:e1:34:79:4a:2f:64:b7:35:5b:17:ab:
fd:06:e3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 2 09:28:30 2024 by rpki-client on console-fra.rpki-client.org