Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/UjZApb2beSzaBqVv59x2QzvDrC8.roa
File: UjZApb2beSzaBqVv59x2QzvDrC8.roa (raw, json)
Hash identifier: cnhd45Xj75u/s5T/ytEaE+x9sD1rT/HCGPPV3IvXIb8=
Subject key identifier: 52:36:40:A5:BD:9B:79:2C:DA:06:A5:6F:E7:DC:76:43:3B:C3:AC:2F
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 018E89AB3F1E17CF35A9EC084AF7C4357012
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/UjZApb2beSzaBqVv59x2QzvDrC8.roa
Signing time: Fri 29 Mar 2024 10:04:45 +0000
ROA not before: Fri 29 Mar 2024 10:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:3c43::/32 maxlen: 32
2a11:3c46::/32 maxlen: 32
2a11:6bc3::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 May 2024 16:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:89:ab:3f:1e:17:cf:35:a9:ec:08:4a:f7:c4:35:70:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Mar 29 10:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=523640a5bd9b792cda06a56fe7dc76433bc3ac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:98:a6:36:ba:fc:93:69:a7:e4:cd:70:66:
7e:51:27:2f:95:55:a3:83:b6:61:4a:c5:ed:a2:06:
65:86:6e:b6:e0:d2:1f:33:43:ff:06:84:32:ad:2b:
ac:97:b4:f8:1c:0d:b5:eb:13:f1:d6:68:6f:cd:1e:
be:f5:e0:ae:da:c8:0d:1f:9a:83:05:dd:20:b1:d3:
b3:eb:61:19:9b:b5:f6:a5:94:db:61:af:e9:fd:18:
9d:92:3a:c0:62:ee:c9:7f:a5:3c:af:47:f4:e4:7f:
72:21:83:65:00:27:2e:ef:ef:d6:b8:e6:d6:75:bf:
2f:cc:f7:3e:cc:e3:6c:0a:2d:17:18:27:c8:09:d0:
6d:1a:97:f3:1a:2f:f1:31:1f:d2:25:fd:1a:ef:b3:
93:14:6f:5d:8a:03:6e:a2:b3:53:1b:10:a2:cb:13:
9f:9a:8f:41:31:54:3c:83:ab:a3:e7:3c:80:80:16:
de:f6:39:ac:ed:fd:10:54:2d:72:a8:3a:a5:a6:c2:
46:47:7a:28:df:ad:e8:ac:00:3b:81:64:f1:7c:f4:
d1:ed:c5:20:76:93:9a:3a:fc:22:2d:f0:8f:68:04:
ef:dd:8c:d5:b5:8a:f7:e8:d3:e0:50:eb:a8:f7:82:
fe:c8:a6:98:4c:a6:c2:11:d0:a9:d8:35:50:4a:d0:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:36:40:A5:BD:9B:79:2C:DA:06:A5:6F:E7:DC:76:43:3B:C3:AC:2F
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/UjZApb2beSzaBqVv59x2QzvDrC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3c43::/32
2a11:3c46::/32
2a11:6bc3::/32
Signature Algorithm: sha256WithRSAEncryption
02:2a:5e:af:85:e8:cb:8d:08:09:c9:1a:25:d2:1a:fa:f6:5e:
c9:25:29:a1:11:d0:9a:bf:4a:9a:bd:f1:85:9c:12:3d:50:91:
4f:f9:fb:2d:f5:5b:44:8b:99:20:5b:d7:e5:e4:b4:22:06:a6:
0e:8b:c7:b4:26:b9:8c:bf:f2:1e:99:9e:86:4b:78:dd:7f:61:
a5:f7:d0:90:4b:17:fe:67:12:68:c6:bc:35:5e:0d:72:a6:0b:
f6:32:59:3c:98:c4:ee:a1:29:f7:02:ff:0b:e5:bb:d3:18:0f:
ed:a6:1c:b2:59:ab:63:af:65:8c:e1:32:a8:e2:eb:a0:dd:11:
f7:35:6c:d5:93:26:eb:ed:5a:19:14:da:7f:8b:dd:55:25:2c:
6d:82:4a:10:f3:bc:36:bb:5f:33:c1:12:ea:78:cd:d1:b2:89:
6a:c4:69:1f:78:a0:aa:f9:f5:83:b1:23:f8:ff:cd:1e:50:51:
df:f8:03:5f:47:d7:8f:c8:b4:1d:98:1b:c2:ea:f2:bf:d5:10:
1b:d8:51:90:b7:7a:32:9f:20:88:b0:23:44:60:56:1e:5e:22:
0f:bb:d0:c6:61:05:a4:8c:c1:30:27:c8:f1:33:ad:10:e9:9d:
ee:c1:16:e6:45:88:54:33:4d:3d:ae:8d:f2:6f:6a:1b:2b:c8:
a9:b9:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 21:47:19 2024 by rpki-client on console-ams.rpki-client.org