Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/CPA_aQe7aJjIqYFAfQlt-RTn9UY.roa
File: CPA_aQe7aJjIqYFAfQlt-RTn9UY.roa (raw, json)
Hash identifier: EcUYppQIO0UPHJPmHiNFFQmnUjglQU/j0tL+f+sQMc4=
Subject key identifier: 08:F0:3F:69:07:BB:68:98:C8:A9:81:40:7D:09:6D:F9:14:E7:F5:46
Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial: 018C840EB7D38BC641B209583AEC7E740F23
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/CPA_aQe7aJjIqYFAfQlt-RTn9UY.roa
Signing time: Tue 19 Dec 2023 21:50:06 +0000
ROA not before: Tue 19 Dec 2023 21:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216344
IP address blocks: 2a11:8a80:9000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:84:0e:b7:d3:8b:c6:41:b2:09:58:3a:ec:7e:74:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Validity
Not Before: Dec 19 21:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08f03f6907bb6898c8a981407d096df914e7f546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:5b:4e:24:8f:d6:50:ef:28:9f:ac:b9:15:
6c:63:3b:88:0a:3c:47:97:46:7d:45:a4:c2:cc:0a:
71:13:23:b5:75:e9:c3:df:12:f5:93:54:f6:1b:8a:
e4:9b:ae:77:29:ee:9a:79:7b:2d:b7:23:0b:51:da:
28:64:30:25:de:3b:10:ac:27:c1:9c:4a:a7:22:a5:
0a:ad:21:16:6c:e4:e0:07:fa:04:dd:d7:b5:5c:ee:
8d:fa:0e:fa:ea:e2:2f:7a:4c:5e:a6:6f:8e:3d:ca:
ed:99:dc:ea:6d:35:86:25:75:0a:c6:18:77:90:a9:
72:94:95:81:c4:2b:df:92:fe:a1:a6:5e:9e:1a:8e:
8f:f4:29:14:ea:fd:6e:79:b4:b7:40:75:22:1a:4e:
f9:73:4b:0e:cd:e6:2d:fc:ef:1f:50:9c:18:3a:32:
5d:64:c2:b6:57:50:f3:b0:7b:a5:a7:e7:34:84:e6:
42:d8:39:ab:91:a2:f7:12:02:9f:88:25:7a:fe:b6:
9f:fc:46:94:e9:b5:03:c7:93:b1:9b:49:a2:e0:68:
a9:d3:8b:09:2f:a7:42:90:f1:dd:a0:ca:18:fa:2d:
2c:31:8f:2f:69:c8:f8:ce:4d:a3:55:c1:4a:2a:a8:
c5:34:b2:76:5f:6f:f9:17:26:b3:1d:9f:e8:ea:78:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F0:3F:69:07:BB:68:98:C8:A9:81:40:7D:09:6D:F9:14:E7:F5:46
X509v3 Authority Key Identifier:
keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/CPA_aQe7aJjIqYFAfQlt-RTn9UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8a80:9000::/36
Signature Algorithm: sha256WithRSAEncryption
08:67:ca:30:85:80:a0:ce:f6:e2:42:fc:89:b0:9c:94:40:ab:
0a:63:40:63:36:ac:13:4d:17:32:4b:21:75:89:76:60:aa:8c:
4a:5f:01:b2:8b:4a:9d:75:d9:a8:a9:81:18:42:cf:8e:4b:aa:
09:09:b5:c5:76:97:ec:69:b9:7d:71:03:2f:e2:ab:7d:48:01:
c2:97:d4:e8:73:e9:76:1b:e5:da:4c:ca:c6:6a:ae:e0:f6:84:
57:d2:08:a9:29:04:d2:7d:3b:3e:f7:45:e5:d2:b4:db:3b:bf:
14:0f:40:6e:c8:5c:b1:4f:11:49:cf:ee:7d:8a:67:be:f5:37:
57:54:6b:00:0e:5b:14:a8:88:5c:a0:8a:42:b2:be:81:b8:c7:
57:e0:6f:52:2b:d1:a4:6d:3e:06:1e:28:48:e4:31:1a:22:11:
b9:15:26:4b:d0:5a:4f:db:47:18:0f:7a:ef:b6:8f:0c:30:7b:
ce:89:ca:7b:34:81:72:03:f9:15:77:bc:57:ae:fa:67:d4:39:
fe:41:81:d4:44:0f:9c:70:72:55:2c:26:7d:24:ce:fa:fa:64:
a0:56:15:83:02:8d:91:cf:ee:f3:8c:91:d2:db:98:8d:31:05:
5d:49:52:b0:ff:af:7e:d2:3c:2a:4c:c7:41:52:a7:2c:96:47:
23:5d:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:19 2024 by rpki-client on console-fra.rpki-client.org