Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/PfCltqAa9I3qYVFweHgYQxNJXO4.roa
File: PfCltqAa9I3qYVFweHgYQxNJXO4.roa (raw, json)
Hash identifier: Hu1vXi7rGia2dfMobC+PRKju0gaSqNw9/q1cYY/vsDw=
Subject key identifier: 3D:F0:A5:B6:A0:1A:F4:8D:EA:61:51:70:78:78:18:43:13:49:5C:EE
Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial: 019247F36F584DDD6F3C72112E16EF164C72
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/PfCltqAa9I3qYVFweHgYQxNJXO4.roa
Signing time: Tue 01 Oct 2024 11:59:48 +0000
ROA not before: Tue 01 Oct 2024 11:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9056
IP address blocks: 2a00:7c00:8000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 01 Oct 2024 14:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:f3:6f:58:4d:dd:6f:3c:72:11:2e:16:ef:16:4c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
Validity
Not Before: Oct 1 11:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3df0a5b6a01af48dea6151707878184313495cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:16:a4:ab:e9:76:88:4b:b3:eb:b1:8c:b2:5e:
d2:d7:ae:fc:17:8b:b2:85:72:cd:44:ee:f0:25:ab:
68:d9:ab:db:22:21:dc:c7:5a:75:06:f5:2c:f9:06:
5d:be:ac:88:0e:82:39:3a:67:f1:fa:52:33:de:d1:
20:05:54:88:0e:ef:ee:98:cd:04:1d:c9:b6:36:2e:
58:48:e1:f8:e5:af:74:e9:f3:9a:01:c1:32:53:c3:
0f:cc:23:c0:73:be:40:ab:4e:97:ee:f8:59:f1:33:
e8:0d:f5:bb:3d:b6:fb:79:4f:23:a3:f5:9d:9a:d3:
37:0e:6b:ad:38:1b:2c:c6:65:a2:bd:56:ef:7a:4f:
23:c1:1a:d4:7c:26:3f:51:fb:29:58:25:90:17:ae:
b7:e2:ee:42:ad:64:6e:eb:92:b9:a6:6a:8e:9e:cb:
86:d9:77:21:f1:8f:f5:4c:86:51:e8:dc:47:ab:c3:
94:e0:10:45:15:cc:33:f8:a0:45:8c:58:8e:ae:d8:
23:99:11:09:fa:47:a8:ad:3b:8a:d2:6d:e5:f9:50:
71:01:c8:61:c3:32:e3:fb:67:4b:09:f5:65:ac:69:
2a:11:17:a2:8c:be:f6:ea:c9:1d:14:f3:92:3b:79:
a4:6d:c3:de:57:1c:6a:dd:a7:36:2c:11:82:aa:65:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F0:A5:B6:A0:1A:F4:8D:EA:61:51:70:78:78:18:43:13:49:5C:EE
X509v3 Authority Key Identifier:
keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/PfCltqAa9I3qYVFweHgYQxNJXO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7c00:8000::/40
Signature Algorithm: sha256WithRSAEncryption
d1:3e:13:7f:e7:41:94:71:b3:f6:9c:57:d0:35:29:da:00:65:
e9:fd:a9:0a:09:ea:20:1f:3b:a1:40:0d:80:58:a4:1a:bc:a1:
aa:01:3f:57:0b:ef:be:9d:ce:b1:50:f1:16:ef:95:99:24:60:
31:43:28:d7:c9:b1:bd:95:4b:3a:8d:65:c2:7a:f0:d1:6c:0f:
50:ba:99:33:8d:69:67:2f:ef:bb:b2:8a:9f:5f:b2:2d:6d:29:
44:4e:36:1a:f7:d3:d5:bf:0d:28:f9:9e:4d:65:28:6c:e7:ba:
db:96:58:12:7a:66:18:83:fe:c9:e7:18:9c:8b:f9:12:14:c3:
16:0f:50:aa:a2:ef:cb:01:eb:d8:40:f2:62:64:4f:37:35:86:
16:15:24:3a:ef:03:0d:95:d0:07:79:72:08:2f:32:0a:d5:06:
3a:52:7e:45:54:54:56:a3:df:9c:71:c6:7f:12:82:f5:f9:b3:
ca:e7:7a:a6:03:7b:e1:ae:40:7e:3b:32:6f:5d:8a:32:dd:c5:
9c:f8:5b:00:5a:c7:ab:ee:0b:cf:18:b1:f2:fa:5e:c7:14:d7:
f7:19:ce:ab:f5:5e:6d:80:7a:ec:d7:fd:4e:6b:f8:71:a7:a5:
1d:6a:b2:91:27:e9:4a:17:74:15:9c:ba:70:7a:38:a8:f7:e6:
69:99:44:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 18:42:35 2024 by rpki-client on console-fra.rpki-client.org