Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UO3X0PWF3JtlWH6eYKOjewy1JpE.roa
File: UO3X0PWF3JtlWH6eYKOjewy1JpE.roa (raw, json)
Hash identifier: LCknWv4B23297h+VH0PleIRFFGdi+d5r81cyr+yk864=
Subject key identifier: 50:ED:D7:D0:F5:85:DC:9B:65:58:7E:9E:60:A3:A3:7B:0C:B5:26:91
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018F9CCB10DD1D3087253E73E8D83DA467A3
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UO3X0PWF3JtlWH6eYKOjewy1JpE.roa
Signing time: Tue 21 May 2024 20:15:04 +0000
ROA not before: Tue 21 May 2024 20:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216407
IP address blocks: 2a0d:6f80:2303::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 01 Sep 2024 10:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9c:cb:10:dd:1d:30:87:25:3e:73:e8:d8:3d:a4:67:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 21 20:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50edd7d0f585dc9b65587e9e60a3a37b0cb52691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:40:37:19:83:23:06:f6:77:d1:f0:67:c4:
2e:09:7c:36:d7:a3:05:62:7b:20:c5:10:54:8c:39:
fb:c7:14:a3:76:e4:f8:99:38:37:ae:3c:3d:4b:54:
e1:70:1e:ab:bd:b6:5b:5e:0d:42:f3:e7:1b:7f:7b:
fd:42:52:27:e1:ee:95:58:a8:2b:2c:1e:fa:79:e6:
e6:5d:a3:97:ad:23:86:2a:08:c7:dc:1e:00:15:f2:
96:5c:b7:53:12:e1:49:26:0b:1d:a7:41:00:66:90:
22:ed:ec:17:53:38:a7:96:34:e7:3e:e6:16:8e:63:
46:a0:ad:73:8e:b3:2e:1d:d5:48:68:d7:0f:e7:1d:
b3:fb:b9:e1:2b:6f:5f:32:3b:ee:34:23:9c:16:c3:
c4:f6:5f:81:60:9f:1a:95:a2:a9:38:2c:0d:d9:bc:
8f:ce:28:0e:51:58:f5:7a:c8:21:c6:c2:0e:26:e6:
fd:0a:49:20:0a:64:41:84:0a:60:aa:14:35:eb:27:
74:f6:38:53:11:ca:15:39:2a:2d:25:4f:4e:d3:11:
c7:d0:8f:79:b9:da:db:0a:81:34:ff:11:4e:27:37:
7b:44:18:61:0e:ac:bd:43:51:9a:b3:25:e9:aa:0f:
bc:f7:2d:8c:4e:31:94:3a:40:cc:48:9c:c1:61:34:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:ED:D7:D0:F5:85:DC:9B:65:58:7E:9E:60:A3:A3:7B:0C:B5:26:91
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UO3X0PWF3JtlWH6eYKOjewy1JpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:2303::/48
Signature Algorithm: sha256WithRSAEncryption
0b:dc:34:c7:5e:5a:e5:1b:30:99:33:f8:84:32:56:a9:46:81:
20:02:99:44:6b:25:72:a7:ab:f8:dc:20:d7:c0:6f:33:7d:9a:
a0:2a:d2:27:07:2d:b4:f5:13:26:0c:65:66:61:69:a8:b3:09:
b8:31:35:49:c6:6a:14:8f:75:7c:c3:2e:37:0e:17:06:a2:76:
7d:da:19:d0:fd:e8:53:d4:0d:03:a2:02:49:98:73:b6:e7:6b:
a7:21:ed:19:74:be:bc:3c:99:79:f7:1b:0b:30:dd:a7:79:10:
9c:d4:3f:64:1e:85:d4:eb:05:cb:fb:77:b1:08:ee:31:c8:fa:
f8:44:cc:8a:a0:63:4d:c7:70:a2:40:08:1c:de:25:fe:c2:30:
f2:10:66:d2:3b:90:a3:0c:79:13:2a:68:95:fb:48:08:e6:40:
0a:eb:b1:86:74:d5:07:2b:40:fd:32:23:c3:34:d1:70:e0:a7:
bf:81:a2:3a:91:ab:8a:41:6e:ae:1f:b7:ab:53:cd:30:82:0b:
71:49:b4:bd:d3:f0:97:aa:3d:57:e1:c4:78:15:e5:8e:4b:5c:
44:7b:3e:eb:20:86:c4:f5:6c:30:40:a7:d5:8c:25:1d:de:7e:
ff:5d:bb:7b:5f:9f:0a:3c:e4:36:72:c7:dc:32:c8:70:03:b5:
6b:65:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 11:45:42 2024 by rpki-client on console-fra.rpki-client.org