Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-DSs4xPJhnc-DhisXkDF76NoAug.roa
File: 1-DSs4xPJhnc-DhisXkDF76NoAug.roa (raw, json)
Hash identifier: qxDeQzaPUclRABZjwOhW8OSupc9tiGpyYiapShyzW1w=
Subject key identifier: F8:34:AC:E3:13:C9:86:77:3E:0E:18:AC:5E:40:C5:EF:A3:68:02:E8
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01910F28E81567CA0F566FC97F2A03D7355F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-DSs4xPJhnc-DhisXkDF76NoAug.roa
Signing time: Thu 01 Aug 2024 18:17:04 +0000
ROA not before: Thu 01 Aug 2024 18:17:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214967
IP address blocks: 2a10:3c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 11 Sep 2024 16:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0f:28:e8:15:67:ca:0f:56:6f:c9:7f:2a:03:d7:35:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 1 18:17:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f834ace313c986773e0e18ac5e40c5efa36802e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:68:86:28:85:c3:f2:17:e7:c1:e8:2e:6a:
a1:3f:94:5a:67:73:7b:c2:d6:1c:04:e6:ec:d5:98:
49:36:d5:1c:8c:87:74:64:d0:f5:6a:f2:d6:9f:43:
34:12:98:d9:6e:d0:8e:12:5f:6f:e4:14:13:3e:61:
42:d4:ba:f4:e2:d7:ad:64:75:57:7a:21:33:4f:8b:
2e:7a:57:87:0b:ee:50:3f:9a:e0:79:fb:7b:2d:20:
90:8f:35:3c:f4:59:68:77:bd:75:df:19:35:46:7a:
54:f7:a4:27:4b:c6:1b:33:0f:01:ff:32:5b:c0:81:
8f:90:e0:23:b4:1c:8c:61:3b:0a:ce:e4:52:75:ec:
74:da:c8:c1:e6:86:ad:f7:ea:98:17:93:de:82:5f:
90:ed:b9:ad:bf:12:ca:d6:03:5a:d6:8c:a2:9d:03:
72:21:f6:14:e2:dd:06:f9:33:5b:57:ff:5d:2c:d0:
20:37:0c:40:8a:6c:c8:42:71:60:20:89:55:47:14:
78:74:64:a4:8c:b1:54:08:b5:77:49:af:a4:a0:d1:
32:ab:34:97:f9:e4:a7:49:ad:f1:8f:eb:e9:1c:f0:
f8:01:77:71:69:77:41:ba:eb:4c:a3:49:63:e5:e9:
10:95:80:9b:2e:70:c6:fe:4e:86:d8:c3:cb:c6:e9:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:34:AC:E3:13:C9:86:77:3E:0E:18:AC:5E:40:C5:EF:A3:68:02:E8
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-DSs4xPJhnc-DhisXkDF76NoAug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c80::/29
Signature Algorithm: sha256WithRSAEncryption
6f:9c:24:1d:be:f2:07:2f:f6:05:b6:3d:cc:49:13:9e:d6:9b:
e2:ee:96:c9:3f:69:99:39:64:82:f6:12:e3:87:97:ac:c1:d7:
2b:11:0b:69:6e:07:66:df:5d:b1:c7:0a:74:4e:a4:18:89:fe:
5e:4b:03:8f:b5:da:4b:ef:c7:67:4d:c8:14:27:55:e8:b5:0c:
2a:87:98:12:5a:f7:3b:b8:e9:58:e2:7c:35:2f:f1:65:04:ea:
17:0f:7b:7a:3e:cd:30:a3:cc:41:f7:36:8d:71:f2:0f:ae:7d:
db:32:b8:9a:4a:fd:98:18:2e:db:41:4c:7d:a2:53:75:4f:0a:
b9:6d:01:c3:50:72:08:2d:e8:4a:cd:90:9a:61:8f:6d:82:7c:
55:80:01:cf:f8:51:cf:31:75:a4:b7:be:78:a4:83:7e:10:38:
f4:ec:f6:d9:ab:dc:a4:5f:a4:2e:a1:09:79:3a:da:69:00:02:
ce:15:3e:32:fb:ab:65:06:58:d2:ab:5b:da:fe:70:2f:52:a5:
ab:87:e1:a5:c7:27:3d:d3:c8:35:91:dc:af:9f:99:2b:49:83:
e1:a9:b1:54:2b:7e:42:3f:c8:eb:38:f8:f6:98:1a:59:f7:c8:
77:74:11:43:35:2e:f7:2d:91:a5:f3:c7:0f:f0:2f:85:e6:11:
89:44:42:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 18:35:55 2024 by rpki-client on console-ams.rpki-client.org