Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/0GuSLzl7xZfRQA6NLxUPy9f3Y9c.roa
File: 0GuSLzl7xZfRQA6NLxUPy9f3Y9c.roa (raw, json)
Hash identifier: dxi8/FZOxKbpWUyq8C61lSPs6pzlkNyIfWTFiPfT86Q=
Subject key identifier: D0:6B:92:2F:39:7B:C5:97:D1:40:0E:8D:2F:15:0F:CB:D7:F7:63:D7
Certificate issuer: /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial: 0191413D570B9CDB11F48F7830A86B5504EB
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/0GuSLzl7xZfRQA6NLxUPy9f3Y9c.roa
Signing time: Sun 11 Aug 2024 11:40:24 +0000
ROA not before: Sun 11 Aug 2024 11:40:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216417
IP address blocks: 2a04:5040:6001::/48 maxlen: 48
2a04:5040:6002::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Oct 2024 13:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:3d:57:0b:9c:db:11:f4:8f:78:30:a8:6b:55:04:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Validity
Not Before: Aug 11 11:40:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d06b922f397bc597d1400e8d2f150fcbd7f763d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:c4:ce:81:70:4c:b9:93:5d:c1:a2:68:d9:
2a:a0:f3:ee:63:48:34:c6:77:18:aa:7d:2e:e3:0d:
e8:00:0d:d4:2d:33:d3:8a:9c:04:fe:cc:0a:01:0d:
2b:57:0e:45:ab:10:29:18:00:68:11:07:d5:c3:ad:
3a:9d:9c:b3:ff:4e:e7:94:42:df:b3:e6:cb:39:1d:
9b:20:71:a7:75:f2:eb:4c:97:55:73:28:56:58:f5:
2b:e0:98:26:43:ef:50:d8:e2:47:e3:fd:bc:8b:26:
70:ca:5a:bc:c6:5f:ea:b0:b8:5e:11:61:7f:70:b5:
50:d8:63:7a:6e:c0:5c:de:11:ed:18:65:72:44:27:
bb:87:ee:98:91:81:08:cb:c3:62:73:b7:7f:7a:5e:
9e:7c:62:c4:f8:d6:55:e9:82:4c:f8:81:03:a6:57:
6e:4b:3e:4c:5e:f9:f0:94:9e:14:b2:4c:c8:aa:db:
f0:55:74:40:ec:60:78:4e:0e:5b:fe:0d:eb:20:4d:
64:76:78:72:dd:00:c2:e2:eb:dc:d7:49:bd:ea:4b:
8e:91:ed:ec:d1:8e:5e:6f:33:7d:72:83:ff:f1:3e:
c1:21:19:cd:7a:bb:1e:f2:6e:54:a0:36:ae:7c:10:
69:14:a4:d5:df:75:9e:41:b5:06:f6:fc:d8:9c:c5:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6B:92:2F:39:7B:C5:97:D1:40:0E:8D:2F:15:0F:CB:D7:F7:63:D7
X509v3 Authority Key Identifier:
keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/0GuSLzl7xZfRQA6NLxUPy9f3Y9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5040:6001::-2a04:5040:6002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:cc:e0:82:28:b4:db:09:79:cc:db:f9:a4:a3:52:e4:28:9a:
1d:5a:2d:fa:7c:fc:02:e3:a3:8b:31:39:2b:9e:88:cf:e8:e2:
17:54:5a:57:25:7e:03:60:10:9b:98:11:46:81:34:b3:5f:d5:
d5:63:32:6d:8c:a1:9c:29:00:d7:2f:92:eb:f5:f7:8f:38:ba:
9e:4f:59:06:5d:c5:bb:69:7d:da:d1:ed:dd:f1:ce:0d:26:ff:
f2:7d:f1:e6:b0:f1:50:63:c2:21:70:40:25:a5:0a:d4:b7:d9:
e2:36:ed:57:f2:af:a1:d7:1c:d7:4e:98:5b:39:17:66:ec:bb:
43:fb:81:2e:80:b6:96:15:26:47:5e:76:c2:9c:db:24:df:78:
bb:43:73:8a:bc:1e:c7:00:23:17:b9:07:4d:ed:c3:40:8d:0a:
fc:83:9c:de:ec:a0:22:61:82:5a:ac:d6:e6:8b:43:d6:ef:7d:
d0:8e:93:46:72:3d:01:fd:48:d2:1a:b7:a3:88:66:43:b8:39:
d0:81:47:28:df:ee:bf:0f:dc:81:88:5c:81:0d:0c:21:59:df:
ac:18:2f:c2:4c:05:ad:a2:cc:2a:28:92:06:42:6e:31:bf:05:
73:db:5b:64:15:74:1e:9d:53:70:a3:12:4d:9a:bb:be:31:ae:
a1:19:48:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 7 16:59:06 2024 by rpki-client on console-fra.rpki-client.org