Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_6-G9Thzye3-NIXBfK46nwTEV0U.roa
File: _6-G9Thzye3-NIXBfK46nwTEV0U.roa (raw, json)
Hash identifier: Rg+aO72nsMIdHCT+FPtjCoLDqtRKy1zM4q5ZfhlTLS4=
Subject key identifier: FF:AF:86:F5:38:73:C9:ED:FE:34:85:C1:7C:AE:3A:9F:04:C4:57:45
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019123137AAAACB53E5EDA234568504E1757
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_6-G9Thzye3-NIXBfK46nwTEV0U.roa
Signing time: Mon 05 Aug 2024 15:06:04 +0000
ROA not before: Mon 05 Aug 2024 15:06:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50225
IP address blocks: 2a0c:a584::/32 maxlen: 32
2a0c:a586::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Aug 2024 13:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:13:7a:aa:ac:b5:3e:5e:da:23:45:68:50:4e:17:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 5 15:06:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffaf86f53873c9edfe3485c17cae3a9f04c45745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:12:be:73:44:82:ea:85:82:41:ba:e9:55:
13:7d:03:b0:9b:8a:f4:ce:39:38:de:e9:b9:e2:1b:
e5:df:d9:cd:bd:4d:94:e6:56:96:b1:4e:45:97:a1:
84:76:49:f4:86:73:91:5c:74:df:38:d4:3c:b5:6e:
2a:3e:d0:00:02:9c:41:e8:17:38:4b:fd:8b:50:3a:
3b:83:40:b4:cd:28:1b:00:35:45:c1:3e:43:0f:04:
54:b2:06:a8:d1:fb:8d:99:9b:f7:10:ce:82:aa:96:
c5:15:22:04:72:6e:26:03:c7:65:3e:42:f3:69:04:
eb:7a:6a:f2:1e:65:05:94:5d:7b:80:38:92:17:f6:
2b:43:1c:c5:d2:93:77:51:c1:8c:61:1d:17:8c:29:
0a:a3:c7:ce:21:30:94:96:4c:91:07:07:08:f9:f2:
33:d7:1e:50:ea:d8:c6:76:dd:f4:b0:28:a0:33:c3:
b3:3d:4e:c6:e6:f8:2c:90:a4:91:22:21:fc:54:f0:
8e:17:11:1c:7a:18:c1:d2:7c:72:d0:44:56:3f:00:
2a:13:68:37:bb:8c:46:3b:d8:17:1f:0b:c8:0c:79:
4b:cd:81:98:22:d7:9c:79:ce:46:52:b5:67:0d:25:
1e:36:ff:6c:ec:ed:9b:aa:bc:5c:57:6c:a8:08:07:
a3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AF:86:F5:38:73:C9:ED:FE:34:85:C1:7C:AE:3A:9F:04:C4:57:45
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_6-G9Thzye3-NIXBfK46nwTEV0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:a584::/32
2a0c:a586::/32
Signature Algorithm: sha256WithRSAEncryption
74:f0:6c:07:2c:2b:f1:cb:6f:79:ec:9f:7e:e8:70:2f:58:ba:
de:20:08:cb:8f:27:22:84:df:0f:d6:b1:d7:da:4d:0f:92:fd:
d9:dc:0f:64:bd:12:49:31:02:b8:02:be:40:21:92:c6:3f:cc:
63:75:31:d8:27:20:d0:33:8a:78:82:da:32:ac:cd:35:13:bb:
22:28:02:0d:25:54:05:9a:7b:3d:ad:48:a3:fc:3f:e7:23:29:
20:c6:fb:74:5a:2e:5a:3e:11:e1:b4:b8:39:a0:b1:8d:3e:07:
13:27:51:85:fd:ad:1e:7b:65:0e:05:0f:e1:93:e8:23:8d:ca:
a8:e1:b8:0f:a9:60:cb:e7:bb:ea:c2:fd:9d:cf:70:86:9e:32:
15:57:da:16:34:23:10:ff:fd:9e:c7:19:2a:52:36:55:1b:9f:
0a:e8:37:48:4d:33:ca:c8:e4:c9:08:7f:38:ae:68:9b:59:23:
15:ef:45:4f:2e:95:a0:f5:94:46:bb:e1:90:8a:47:11:d0:4a:
cb:cd:58:10:c5:84:21:28:1d:ec:9f:bf:9b:32:73:1e:48:99:
5b:78:4d:1c:81:4b:92:d5:8e:1b:87:a6:98:5f:f1:3f:00:9c:
b0:a6:ca:5a:1c:3d:63:3c:19:37:7a:0c:fe:f8:cf:71:3f:4a:
60:7f:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 14:36:53 2024 by rpki-client on console-fra.rpki-client.org