Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/tjCyap_H61Uaqo7NiJZD1pKjP8Q.roa
File: tjCyap_H61Uaqo7NiJZD1pKjP8Q.roa (raw, json)
Hash identifier: seP6BzjgoAdVFaVuGi0Tr1Q+RdqdVnI3Q4tOd6ctEkQ=
Subject key identifier: B6:30:B2:6A:9F:C7:EB:55:1A:AA:8E:CD:88:96:43:D6:92:A3:3F:C4
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 018B61EEB5E9046A7A8D101E69925B442123
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/tjCyap_H61Uaqo7NiJZD1pKjP8Q.roa
Signing time: Tue 24 Oct 2023 13:45:15 +0000
ROA not before: Tue 24 Oct 2023 13:45:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198571
IP address blocks: 2a07:db83::/32 maxlen: 32
2a07:db80::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:ee:b5:e9:04:6a:7a:8d:10:1e:69:92:5b:44:21:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Oct 24 13:45:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b630b26a9fc7eb551aaa8ecd889643d692a33fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:9c:f4:75:f8:09:8e:06:ab:5b:9c:70:5a:
81:37:58:29:bb:06:a5:38:a8:ed:63:03:66:c5:00:
25:c3:e0:3c:4a:45:c5:ac:f6:6f:71:3e:3f:21:95:
96:fa:10:d0:08:2b:58:08:47:30:10:d4:26:43:cc:
9e:a4:28:93:12:9f:84:cd:5b:3a:15:f4:5d:ee:c2:
c4:43:da:13:07:08:68:bd:a8:f8:56:87:a1:ca:30:
c8:41:be:e8:f0:a7:1b:12:b7:bc:88:c9:bb:5c:e4:
3c:fa:80:dc:2d:00:b5:d1:d9:38:63:3f:4d:b6:47:
aa:19:4b:eb:07:c1:0c:67:28:05:b3:6a:d7:f0:6a:
bd:b6:b2:c3:0d:a9:32:a6:7f:3b:0a:a1:61:c7:95:
87:8d:28:8a:e6:ca:7f:b6:73:78:02:3c:ce:de:2e:
cb:27:b5:ce:a2:9d:43:54:7c:1c:5c:fd:cc:58:8a:
bb:72:c4:70:33:ff:af:cf:a2:0f:06:8f:1a:db:10:
d2:17:41:d9:d9:9a:c6:f8:65:a0:31:d6:89:2a:98:
01:4b:22:2e:aa:06:e8:5d:50:81:f2:96:c4:83:2f:
2d:e1:1a:3b:81:46:7c:8e:00:c0:4c:91:2a:71:3c:
eb:18:e7:e9:87:b8:06:89:51:06:b1:eb:b3:70:db:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:30:B2:6A:9F:C7:EB:55:1A:AA:8E:CD:88:96:43:D6:92:A3:3F:C4
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/tjCyap_H61Uaqo7NiJZD1pKjP8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:db80::/32
2a07:db83::/32
Signature Algorithm: sha256WithRSAEncryption
21:b0:f7:38:b0:36:65:26:e8:25:26:df:1c:87:9a:f9:60:28:
1f:e8:ff:71:8f:e8:48:1f:2c:2a:b6:3a:db:16:a7:60:ed:2a:
d5:29:41:8b:cd:cf:4f:c6:a4:0f:7f:ee:20:ad:a4:ac:85:96:
2c:a7:85:85:dd:32:88:48:41:8e:86:54:9c:57:39:1b:b1:36:
b2:d8:f0:b2:a3:02:11:42:e2:dd:71:b7:ce:ee:d3:8d:87:26:
5e:ec:24:ef:17:d0:3c:ae:54:70:06:52:76:0d:fc:d9:bb:c5:
79:ce:84:2b:7a:e8:9e:ae:c6:95:07:9a:2a:d3:2e:8f:f6:fc:
55:07:10:a0:6a:0e:96:08:56:a9:ef:f0:01:d2:e4:7a:d5:fb:
cc:0a:1c:0c:11:af:54:dd:67:1a:d1:03:34:09:b6:cf:e1:fb:
50:e9:0c:49:1f:bf:4b:09:62:df:73:c2:43:69:31:98:d5:3f:
ca:07:ef:07:6a:72:04:41:0e:2f:90:24:3b:23:cd:b3:ca:49:
db:b5:3a:94:bb:63:88:c3:49:de:47:7d:d1:27:0c:f7:e0:96:
d3:5f:c9:49:9c:c1:dc:c7:0b:f3:94:43:d2:7a:1d:78:01:ac:
48:5d:a2:16:50:49:3d:4a:11:26:4b:b6:06:05:d8:ec:53:d1:
d1:b3:64:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:14 2024 by rpki-client on console-fra.rpki-client.org