Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/8CxaDGhHJmCLrLw4VJK81JMOcls.roa
File: 8CxaDGhHJmCLrLw4VJK81JMOcls.roa (raw, json)
Hash identifier: 61lOl6rHq+dWC1N0r4DY1IfHRP/2dgxYbrBSXMgsECM=
Subject key identifier: F0:2C:5A:0C:68:47:26:60:8B:AC:BC:38:54:92:BC:D4:93:0E:72:5B
Certificate issuer: /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial: 018D374B33A8C74F828AB35C09BA28F8E111
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/8CxaDGhHJmCLrLw4VJK81JMOcls.roa
Signing time: Tue 23 Jan 2024 17:08:11 +0000
ROA not before: Tue 23 Jan 2024 17:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215664
IP address blocks: 2a0d:b287:ec00::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 28 May 2024 17:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:37:4b:33:a8:c7:4f:82:8a:b3:5c:09:ba:28:f8:e1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Validity
Not Before: Jan 23 17:08:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f02c5a0c684726608bacbc385492bcd4930e725b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:7c:d1:7c:80:d7:56:b1:05:ee:bf:d9:75:
34:35:59:10:56:7d:68:34:13:ec:f3:3a:de:44:0c:
9d:a9:0f:f9:ea:ee:cd:f8:7a:a7:15:ff:a6:3f:fe:
e1:e7:a7:7e:a8:0d:d9:98:89:a1:b8:57:58:f4:df:
69:24:5f:95:bd:cb:e2:82:d7:5f:4f:e3:86:46:0c:
a6:cc:b9:db:c5:ad:1d:fb:70:e0:b3:32:95:e1:d6:
3f:d5:45:9d:a4:f5:5a:58:26:71:d1:aa:a5:d1:7d:
34:b3:45:b5:e9:34:a5:4d:ec:89:41:6b:b5:56:32:
e5:30:ac:4b:8f:f7:c8:3f:39:8d:7c:2f:11:4c:f0:
1f:0d:f1:ac:e8:64:75:76:c7:db:9b:14:72:45:57:
d6:05:5d:f0:e6:11:9d:28:3a:9d:25:bd:51:96:03:
57:d0:1c:3e:1f:77:61:a9:76:96:4f:68:47:ee:85:
1e:7b:e4:d0:0f:b8:2d:14:87:30:9c:fd:ce:e4:0b:
6b:70:f2:3d:df:61:df:ba:d1:ea:10:0c:2f:f8:37:
95:ef:aa:97:d4:94:23:ef:ce:5e:5e:19:a0:55:92:
2a:ab:09:69:fa:7b:14:c2:9a:7d:ec:b4:3d:24:bd:
71:06:03:0b:80:dc:c0:53:88:0a:ac:15:ee:95:02:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2C:5A:0C:68:47:26:60:8B:AC:BC:38:54:92:BC:D4:93:0E:72:5B
X509v3 Authority Key Identifier:
keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/8CxaDGhHJmCLrLw4VJK81JMOcls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
5a:24:7b:dd:0c:a2:98:3a:81:42:4e:51:0d:1b:66:34:2d:3a:
31:18:0d:83:14:c5:4c:21:b8:ef:3e:d7:35:56:49:d2:10:d3:
8e:e9:c2:94:3c:f3:13:19:ed:f1:c1:5f:42:cb:85:c5:b3:60:
73:63:c7:4a:9a:c2:40:37:91:bf:80:ed:bb:7a:30:a1:e7:f9:
65:c7:c8:dc:bd:97:06:70:9f:8d:84:9e:eb:c8:fc:6f:bc:ea:
19:8a:63:3f:00:a2:8d:61:64:02:7c:7a:3b:85:95:20:10:c9:
d8:92:62:d8:41:bc:4b:c3:db:73:22:67:b8:02:16:65:c4:e6:
e2:9f:3b:dc:90:b0:05:8a:0a:ae:84:82:92:d0:eb:ff:23:68:
83:62:03:97:84:cd:1d:6a:9f:bd:fe:9e:a2:0c:3f:98:68:d8:
8b:f4:2a:9f:e7:d9:d9:3e:03:3d:a3:e0:63:62:31:7c:da:b6:
58:08:c1:3d:93:f1:32:dd:7f:f8:01:fd:d1:2c:05:3c:8e:36:
5e:2d:5d:9a:5b:34:e7:99:8f:ca:3d:03:d5:57:81:58:92:2e:
c4:56:fa:65:eb:29:38:4d:96:82:32:03:97:05:b3:52:2c:f5:
b4:bd:c5:e5:28:10:e6:3a:3b:75:4d:8f:ac:2d:9e:67:dc:ab:
f6:29:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:07 2024 by rpki-client on console-ams.rpki-client.org