Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/l6cWVN7rCNb17F3s8V5Y3R5rylw.roa
File: l6cWVN7rCNb17F3s8V5Y3R5rylw.roa (raw, json)
Hash identifier: TUmwcaBlmQmfJg9gRWkrNo+hUNTvn74nc+cCx+rd/ec=
Subject key identifier: 97:A7:16:54:DE:EB:08:D6:F5:EC:5D:EC:F1:5E:58:DD:1E:6B:CA:5C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01915B799FB0C6628F67341EF039507288C2
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/l6cWVN7rCNb17F3s8V5Y3R5rylw.roa
Signing time: Fri 16 Aug 2024 13:56:22 +0000
ROA not before: Fri 16 Aug 2024 13:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a0e:7300::/29 maxlen: 29
2a12:6100::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 17 Sep 2024 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:79:9f:b0:c6:62:8f:67:34:1e:f0:39:50:72:88:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 16 13:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97a71654deeb08d6f5ec5decf15e58dd1e6bca5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:50:fa:b9:b9:5f:ba:7c:f9:eb:6a:a1:a8:
3e:ab:ea:30:33:da:ab:d6:73:cb:37:1c:de:6f:2c:
85:29:62:05:15:d8:f4:a4:6a:44:c2:fe:d3:06:b7:
aa:b2:fb:23:0c:28:a4:ad:de:f9:28:d7:c2:1c:50:
e4:3e:7f:9a:2f:47:20:c9:54:a6:0a:0b:30:bf:5f:
fa:b3:28:fc:6c:65:e1:4b:0b:4c:70:f8:79:62:37:
0d:36:9f:14:ee:81:9d:cb:11:3a:03:18:20:e2:0f:
4c:6f:dc:6d:db:ba:1c:5c:27:36:65:da:95:f3:aa:
ad:f5:ac:7d:bd:e3:b7:f9:79:5c:58:39:e8:b2:36:
c5:a3:01:40:ac:f6:a6:41:14:01:60:30:97:2c:6d:
ed:e5:db:69:47:27:ff:c9:8a:6a:a9:09:2a:f4:1b:
fb:ab:95:11:61:79:83:c6:58:8e:8b:04:bc:17:82:
47:af:3a:e0:29:1b:0a:21:df:28:e9:6d:56:ea:e6:
8e:51:3c:14:c7:d4:e1:b4:60:9f:cf:0d:85:90:1b:
6c:61:b1:cd:95:14:8a:fe:b0:c5:2f:b4:67:da:3b:
d7:86:3c:43:82:6a:15:f7:91:cc:e0:44:59:2e:b3:
fa:fc:b7:ac:c5:71:db:dc:da:3d:0b:0f:9a:0f:07:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A7:16:54:DE:EB:08:D6:F5:EC:5D:EC:F1:5E:58:DD:1E:6B:CA:5C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/l6cWVN7rCNb17F3s8V5Y3R5rylw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7300::/29
2a12:6100::/29
Signature Algorithm: sha256WithRSAEncryption
31:ed:ee:8f:82:44:b9:63:ce:52:8c:25:03:5f:5a:c4:1a:e6:
4e:91:00:06:50:e2:e6:af:be:37:88:7c:bb:2c:5c:6c:91:56:
80:eb:3b:89:69:2a:7b:41:44:db:16:8e:4e:a7:47:12:5c:2d:
b9:38:8c:44:ff:2f:88:9c:da:92:52:6b:c5:14:53:96:a0:ba:
b8:b1:c0:3e:27:f4:07:73:39:01:2e:e7:5f:a3:ce:08:70:55:
00:15:99:ad:65:57:34:9e:a4:63:01:13:ac:d4:eb:b0:57:32:
e8:1d:71:3c:dc:1f:8e:28:c0:a0:0c:29:89:a5:cb:43:3f:bd:
f6:f7:89:2d:0b:29:4a:c9:89:25:2e:c9:41:0d:8b:ff:e6:e4:
a4:fb:87:be:4d:2d:15:32:aa:4b:87:ae:52:1e:a7:80:d0:bc:
df:67:52:f4:fd:db:66:52:a0:4c:40:fd:1b:16:04:9b:68:cb:
47:59:d7:b2:84:9d:a0:17:50:16:85:ea:60:45:df:1c:10:1f:
17:df:3f:ff:9d:8d:06:c4:4b:19:10:23:34:35:ef:ee:a7:b5:
65:73:2f:4e:27:f9:0a:dc:5e:6d:5b:42:cf:86:6a:7b:42:b0:
e3:c5:04:a6:e4:13:1b:42:26:46:74:c2:b1:77:e9:3a:ac:18:
67:03:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 18:26:52 2024 by rpki-client on console-ams.rpki-client.org