Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/1-Oohn64Mk6OqchuHZexftkrns98.roa
File: 1-Oohn64Mk6OqchuHZexftkrns98.roa (raw, json)
Hash identifier: upfpYfMxE4jSyaQADUvmhBBEGrNwlSCQeplJKWwDzvQ=
Subject key identifier: F8:EA:21:9F:AE:0C:93:A3:AA:72:1B:87:65:EC:5F:B6:4A:E7:B3:DF
Certificate issuer: /CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Certificate serial: 0192C34B7C4A1ED726466147CEA69877ECA9
Authority key identifier: CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/1-Oohn64Mk6OqchuHZexftkrns98.roa
Signing time: Fri 25 Oct 2024 10:49:17 +0000
ROA not before: Fri 25 Oct 2024 10:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0f:4301::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 31 Oct 2024 19:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:4b:7c:4a:1e:d7:26:46:61:47:ce:a6:98:77:ec:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Validity
Not Before: Oct 25 10:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8ea219fae0c93a3aa721b8765ec5fb64ae7b3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:14:d1:53:d4:67:77:ab:78:7a:d2:9c:04:
e7:a4:80:cc:87:8d:eb:14:05:62:6c:ff:c4:4e:a2:
f9:00:ca:fb:ff:af:9e:e7:15:96:9c:49:d8:00:37:
cb:79:fa:02:e1:64:2f:82:b6:a5:26:5a:3c:01:45:
a9:5d:29:5c:1d:3e:39:87:95:58:05:ca:ba:77:ed:
ac:45:8a:7c:40:de:55:42:b8:a6:cd:b4:94:8e:cb:
7e:1a:02:15:bb:9d:95:83:ae:f1:08:ed:24:df:42:
ad:fd:10:d3:fa:31:ca:2a:24:79:1d:c1:ff:77:4f:
38:b1:a0:eb:dc:8f:e5:c2:2c:d6:3d:50:37:ab:7e:
04:c2:83:73:2d:96:82:ff:77:42:de:17:62:5f:90:
32:67:a2:72:b5:b5:11:5a:d3:9f:5d:d8:c0:99:a5:
d8:da:0f:51:8a:43:cd:17:f1:f3:3c:9c:99:a1:e9:
54:45:e5:53:c8:c9:f8:19:46:35:04:f0:3c:e5:3f:
b2:f0:22:7c:dc:23:ab:c6:58:a3:45:43:df:dc:05:
83:d0:d1:3c:a2:c3:11:0b:6f:79:a9:08:cd:5c:ea:
3d:08:ed:50:6d:69:c0:65:2d:42:a9:a5:6a:95:cc:
7f:16:2c:83:3b:45:50:23:93:83:93:5e:5e:bc:0f:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EA:21:9F:AE:0C:93:A3:AA:72:1B:87:65:EC:5F:B6:4A:E7:B3:DF
X509v3 Authority Key Identifier:
keyid:CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/1-Oohn64Mk6OqchuHZexftkrns98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4301::/32
Signature Algorithm: sha256WithRSAEncryption
85:84:84:41:44:83:7a:6f:06:a7:31:ba:d7:8b:a1:2b:fb:16:
c5:ff:39:e3:d3:f2:69:73:49:39:73:09:b1:ec:3f:98:11:e1:
da:18:cc:0f:91:2d:9a:d0:a5:db:8c:ea:f0:2f:b0:63:ea:e6:
ee:cd:6f:de:29:14:6d:a9:72:ea:90:1b:97:9c:31:de:89:b2:
48:49:74:46:2d:af:7d:0b:6b:ff:79:21:d6:df:3c:ff:d0:8f:
5d:0a:19:81:1e:25:ed:49:37:f6:2c:ad:fd:a2:54:b8:54:13:
05:da:8b:58:fa:04:68:ed:87:72:30:26:27:6b:8b:e0:1a:d2:
e6:03:8d:90:e0:4f:9f:45:1f:9d:0b:90:a7:91:3d:e1:47:c9:
fc:8e:48:0c:34:c5:ff:38:5f:da:cd:62:25:2a:cf:23:89:44:
c8:87:6d:eb:96:8d:19:6d:5b:a9:05:61:3c:54:cd:93:1e:49:
4f:66:9f:a5:b4:c7:63:49:e3:23:a1:09:ba:17:5b:01:69:69:
6c:2c:56:06:f9:f7:4c:98:8b:9e:48:63:8c:25:34:1c:0b:a4:
3f:8a:a9:a7:5d:89:90:3e:9d:60:3c:da:03:8d:42:04:14:a6:
62:08:8d:69:3b:03:77:4d:9b:13:c5:f2:5b:5e:f2:fb:e3:ab:
76:24:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 20:35:53 2024 by rpki-client on console-fra.rpki-client.org