Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/UHFamtSJH7NJQR7pkmaVrFJLznI.roa
File: UHFamtSJH7NJQR7pkmaVrFJLznI.roa (raw, json)
Hash identifier: UC3HyjT80cR8ytiwUyE9Mt1Eh95gcXAOUZZdyvzAiY0=
Subject key identifier: 50:71:5A:9A:D4:89:1F:B3:49:41:1E:E9:92:66:95:AC:52:4B:CE:72
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01856FD525C0462D5344D66046201AF84B73
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/UHFamtSJH7NJQR7pkmaVrFJLznI.roa
Signing time: Mon 02 Jan 2023 00:15:17 +0000
ROA not before: Mon 02 Jan 2023 00:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29290
IP address blocks: 2a0b:8f80:100::/40 maxlen: 48
2a00:f10:141::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:25:c0:46:2d:53:44:d6:60:46:20:1a:f8:4b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 2 00:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50715a9ad4891fb349411ee9926695ac524bce72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d1:3b:8e:dc:35:98:52:ca:b7:77:33:53:6b:
bd:6c:9f:70:02:97:66:81:96:c6:34:7e:53:f8:2f:
1c:ba:4e:51:e8:1a:5d:82:44:b6:eb:54:98:eb:83:
b8:92:9e:e4:9a:51:82:d3:d5:18:2a:f4:5d:aa:2e:
97:29:ad:1d:95:8a:93:d9:bd:07:d8:5a:2c:c8:d1:
18:23:93:03:c2:66:96:3c:a3:ce:15:78:bd:3a:8f:
8f:46:e1:78:4f:ad:bc:4e:19:ad:0e:77:d0:ed:83:
97:20:9d:e8:8c:50:33:9c:a5:f8:a9:02:af:d3:fa:
8c:3b:89:ad:ee:7d:f4:1a:a5:6f:98:64:a5:8b:bb:
73:d4:3f:25:f1:0b:c6:28:fc:2e:40:9b:f6:c8:ca:
18:15:72:5e:d6:af:b9:25:5e:b3:8c:40:f5:dc:86:
b5:bb:ae:ec:39:9a:75:87:1b:09:99:3a:e5:ed:d5:
7c:1a:7b:dd:24:6a:3f:6f:80:17:1a:91:d5:c8:74:
b1:4f:9f:9c:05:c4:33:27:c8:49:86:54:ab:f6:5b:
85:21:69:7b:6a:10:77:71:ef:df:19:69:8a:d7:1c:
ad:f3:57:12:00:9c:69:4c:dd:e4:94:62:62:bd:5e:
93:f9:5e:29:34:b2:d3:de:b4:f9:47:5b:d0:00:9e:
76:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:71:5A:9A:D4:89:1F:B3:49:41:1E:E9:92:66:95:AC:52:4B:CE:72
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/UHFamtSJH7NJQR7pkmaVrFJLznI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f10:141::/48
2a0b:8f80:100::/40
Signature Algorithm: sha256WithRSAEncryption
2b:d2:0b:6d:62:20:bb:11:d0:d2:db:58:0e:0a:16:ae:43:a2:
8f:45:44:9e:b7:57:cc:84:71:11:ad:8b:70:31:75:7d:c1:15:
f9:e4:a9:03:44:bb:92:dc:08:90:dd:62:df:24:ad:c3:2e:2a:
02:9c:c4:a2:44:e3:fc:6b:bf:fc:74:b8:a1:16:4a:3f:5b:ca:
4b:14:0c:94:de:a1:15:63:5d:1c:dc:4f:05:4a:de:e2:d3:09:
20:e8:56:0c:74:ef:05:f7:91:ed:38:57:3d:e7:9c:83:f2:56:
f0:f4:d6:1a:ec:86:d0:f2:d1:a4:32:89:d6:32:1c:59:65:f6:
bc:9b:51:60:7e:78:c9:c9:5e:f9:c9:4a:25:a6:6b:4e:e3:c7:
d1:95:df:d9:c8:33:70:f5:ef:78:5f:21:a6:68:93:83:e2:4f:
69:de:0b:4a:57:b3:92:67:1e:6e:cf:3c:f8:07:b6:60:33:20:
21:77:3c:1b:fe:7d:64:d0:26:36:03:54:71:87:15:3c:0a:78:
0d:8b:1d:80:f0:85:ff:da:c2:01:27:1b:d1:9d:b1:d5:79:09:
63:ef:80:28:88:a0:16:a2:de:f3:4e:c7:ab:51:05:3d:38:8b:
a9:ac:f0:b1:f4:25:24:45:b7:e5:09:ac:ae:da:e4:4f:f2:53:
fb:a5:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:15 2024 by rpki-client on console-fra.rpki-client.org