Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/RDeFY6QlzVIAGGKJe4w_23NMHI8.roa
File: RDeFY6QlzVIAGGKJe4w_23NMHI8.roa (raw, json)
Hash identifier: bDykxJYrKlqbPPJfcD8UFMXEppmJ9C0UXMdhhKM67Vw=
Subject key identifier: 44:37:85:63:A4:25:CD:52:00:18:62:89:7B:8C:3F:DB:73:4C:1C:8F
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 01865AEEFDA63E6B8F825836C3B1E1C81847
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/RDeFY6QlzVIAGGKJe4w_23NMHI8.roa
Signing time: Thu 16 Feb 2023 15:54:17 +0000
ROA not before: Thu 16 Feb 2023 15:54:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 2a04:f400:3001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:ee:fd:a6:3e:6b:8f:82:58:36:c3:b1:e1:c8:18:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Feb 16 15:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44378563a425cd52001862897b8c3fdb734c1c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:52:2f:8e:c4:78:3d:45:bc:b3:63:8e:60:39:
09:0c:a2:1b:68:5f:54:d9:72:26:8b:5a:ad:34:45:
27:b6:3c:7a:f9:29:6f:05:4d:71:d1:18:1c:d1:44:
d0:c0:19:ca:7f:4b:2f:2d:1c:4a:73:10:06:5c:e7:
0a:b7:fe:8f:2c:ef:3b:79:72:2f:72:cb:70:32:3e:
22:8d:79:bb:a7:54:e0:f8:fa:4a:f5:5e:1c:09:d9:
bf:19:39:69:58:a1:be:91:e1:5b:1c:58:31:10:e9:
25:3d:82:8d:30:34:ad:04:b0:0f:96:89:de:b3:f9:
99:10:48:54:a8:62:e4:14:73:7c:ba:98:e0:82:b9:
8a:7b:d1:bc:dc:44:bb:07:c9:b0:90:26:ac:e2:e4:
90:df:72:b1:57:f2:bb:68:ba:f5:44:35:42:82:e7:
68:47:41:3b:22:f9:9f:4a:2c:08:63:67:f9:d1:09:
4c:40:67:8c:22:c0:ad:ca:b4:8b:71:e7:56:e9:71:
75:10:a8:0c:13:17:d5:a9:58:7b:3a:d3:5a:dc:f4:
84:cd:aa:60:91:21:d1:3e:13:5d:89:0f:f7:73:0d:
a9:23:f5:a3:e3:57:d3:32:e9:ba:b7:e2:c3:16:8e:
7c:81:14:e8:a8:15:02:56:1a:61:ad:3e:49:4b:48:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:37:85:63:A4:25:CD:52:00:18:62:89:7B:8C:3F:DB:73:4C:1C:8F
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/RDeFY6QlzVIAGGKJe4w_23NMHI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:f400:3001::/48
Signature Algorithm: sha256WithRSAEncryption
1b:1a:6a:36:f8:41:59:20:3e:7e:72:d8:a1:96:38:3d:5a:32:
ff:00:8e:fc:e9:b7:17:d7:49:56:47:c9:8b:a3:17:32:13:8c:
cc:a5:bb:2a:c3:03:37:88:93:91:a2:63:62:4f:7b:a1:7f:ef:
52:ec:da:6d:78:d0:ca:9b:a9:17:e4:2f:3c:84:89:da:7c:68:
2a:0e:4f:27:50:5e:ac:e4:78:7f:dc:a0:c2:38:19:78:cd:6c:
70:a9:1d:4e:07:db:05:a7:22:b2:10:02:8e:72:3e:ce:ee:f6:
d9:a8:18:ec:77:4a:4e:b1:36:f0:be:a1:ff:57:43:31:34:b1:
1e:3c:9a:b4:b5:07:ed:6b:d1:8d:e8:ed:97:2d:e2:a2:24:01:
b8:5c:6d:79:50:c3:64:cf:c8:2e:ec:b5:27:82:4a:07:d5:e6:
49:ea:dc:86:ec:2c:64:47:19:fc:6e:70:4c:f4:99:19:a7:8b:
5b:94:a5:65:ba:f6:b5:a9:9b:8f:5a:d9:78:51:84:65:2d:f9:
8f:25:a6:a5:c4:ec:54:fc:ac:5c:31:a9:8c:88:18:c2:80:b3:
71:0c:d5:9a:27:19:1c:ef:74:b5:39:c9:bb:c6:cc:ee:8c:69:
6c:74:75:14:db:06:3d:8c:4a:c2:6f:29:8d:0c:b3:da:d7:f2:
08:88:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:00 2024 by rpki-client on console-fra.rpki-client.org