Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/Df8iwwLKTPMrXDcsPDHJVq0c9RE.roa
File: Df8iwwLKTPMrXDcsPDHJVq0c9RE.roa (raw, json)
Hash identifier: 5mlKIZVuUAXZF4gyNO7en7mAsd/h4Bro49wy4mOn4d0=
Subject key identifier: 0D:FF:22:C3:02:CA:4C:F3:2B:5C:37:2C:3C:31:C9:56:AD:1C:F5:11
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 018901E28D4645E53154301EADFC7CBE9332
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/Df8iwwLKTPMrXDcsPDHJVq0c9RE.roa
Signing time: Wed 28 Jun 2023 12:02:51 +0000
ROA not before: Wed 28 Jun 2023 12:02:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a05:1500:910::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:e2:8d:46:45:e5:31:54:30:1e:ad:fc:7c:be:93:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jun 28 12:02:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dff22c302ca4cf32b5c372c3c31c956ad1cf511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:fa:c3:ab:94:f8:5b:9c:a4:69:c5:05:95:
04:46:70:9e:f5:6b:f2:b9:ac:d0:e6:38:d2:47:a4:
1c:a7:15:22:7a:bb:ff:6e:f7:28:53:e1:7a:21:ba:
6e:79:98:03:01:52:17:8c:3a:f4:f6:3b:ac:d4:f0:
ab:d4:40:d2:dc:74:0b:8d:bf:6e:33:f2:5b:c8:c5:
5d:cc:ec:40:f8:c9:a1:dc:94:0e:5c:42:71:9d:67:
bf:f7:e1:6a:1d:e9:0f:74:e5:ae:29:30:db:5e:e1:
43:c8:0b:7c:db:3e:ed:1c:17:f7:e5:73:66:23:f1:
86:2e:cb:81:7e:6c:5f:69:7d:a0:a8:9b:a1:64:47:
07:a4:f4:01:c7:9a:3f:34:00:7f:56:df:29:19:a8:
df:f5:bd:f1:f6:88:93:c9:b0:6d:52:e2:39:27:42:
81:a0:65:1b:ac:4e:2d:51:bb:69:e6:83:3d:da:f5:
2b:22:91:1a:08:9e:d6:2c:a5:c1:90:0f:79:63:54:
da:e8:30:d7:26:ef:aa:14:99:e9:39:b1:d4:c3:c8:
b9:02:82:a1:78:1c:15:3c:c1:34:3b:5e:7c:8f:a9:
04:4d:48:d0:52:ac:84:66:92:6a:3c:67:eb:eb:94:
c3:bb:ec:03:56:56:69:ae:bf:3b:75:58:01:ec:fb:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FF:22:C3:02:CA:4C:F3:2B:5C:37:2C:3C:31:C9:56:AD:1C:F5:11
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/Df8iwwLKTPMrXDcsPDHJVq0c9RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1500:910::/44
Signature Algorithm: sha256WithRSAEncryption
7a:67:ad:8d:0e:b9:9e:55:23:43:a8:ce:c1:90:9a:ae:df:e5:
78:67:3b:72:c4:e6:05:a9:a4:bf:5f:43:dd:fa:61:b0:ad:90:
30:b3:36:50:90:a9:f4:ca:dd:78:7f:17:5b:b9:a9:eb:0b:59:
6b:dd:ff:04:b8:5b:48:43:3a:01:db:c7:54:5e:cc:9e:b8:37:
a7:cb:dc:8e:fd:0a:19:34:61:ff:ef:51:26:60:27:df:2e:bc:
33:a7:65:f6:22:75:0a:b1:44:9f:77:ea:68:2e:52:f5:24:4f:
4a:8e:22:1f:ea:2f:90:3e:b5:80:55:a2:cc:7e:a1:8f:06:b5:
de:b1:10:81:b7:1f:4b:5d:b4:d5:63:42:b3:52:b0:70:d7:55:
fa:9b:9b:70:26:3b:65:e4:4b:de:9b:f5:e1:ca:4e:97:77:51:
5b:08:a3:e6:74:b7:e0:4b:ff:10:b5:0b:20:61:f9:7f:89:04:
65:b7:7b:82:c0:53:2f:be:91:f4:1b:30:77:76:5b:b6:bc:c8:
82:08:7b:f4:79:59:29:b9:79:4a:3a:c3:1a:7d:99:34:f5:5d:
e9:ee:ca:34:5b:44:f6:9c:87:9b:76:6f:2b:f6:52:af:e6:88:
d2:96:77:cf:10:74:56:77:4e:27:b7:f3:2a:1f:a7:62:5a:4e:
65:1b:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:15 2024 by rpki-client on console-fra.rpki-client.org