Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/a-0BYldWIvn382Kgkr_Y8WzgLEc.roa
File: a-0BYldWIvn382Kgkr_Y8WzgLEc.roa (raw, json)
Hash identifier: br/wL4eqMJSC8B8E8YCVGNwPTzvYIeWQzfXMghD4cl4=
Subject key identifier: 6B:ED:01:62:57:56:22:F9:F7:F3:62:A0:92:BF:D8:F1:6C:E0:2C:47
Certificate issuer: /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial: 01928269E94B03038A679CA5853B65CE84FF
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/a-0BYldWIvn382Kgkr_Y8WzgLEc.roa
Signing time: Sat 12 Oct 2024 20:27:11 +0000
ROA not before: Sat 12 Oct 2024 20:27:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35196
IP address blocks: 2a0e:7f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 17 Oct 2024 19:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:82:69:e9:4b:03:03:8a:67:9c:a5:85:3b:65:ce:84:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Validity
Not Before: Oct 12 20:27:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bed0162575622f9f7f362a092bfd8f16ce02c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:ee:0f:9a:05:79:43:3c:e2:41:cc:89:ce:
6b:bc:45:f6:e9:bf:2d:75:c3:59:da:20:5a:8e:6a:
1d:70:50:82:cc:61:4c:a5:0f:43:07:30:16:29:7c:
e2:36:b7:1f:53:d4:bb:07:ec:d0:2c:4a:78:e0:3f:
c6:07:3d:aa:bf:05:b8:83:c7:26:a6:a0:cb:44:24:
e9:f2:d7:c0:f8:14:76:6c:84:d1:c7:1a:31:fe:28:
4d:4a:71:18:b2:f3:06:b2:c8:58:0e:e5:2b:74:fe:
b6:24:4a:83:dd:be:6b:82:35:15:02:db:53:a0:5a:
a4:bd:27:3e:27:d9:15:7c:c4:26:64:f6:fe:aa:bb:
dd:4d:67:02:0c:93:9b:ba:98:8f:9e:99:e6:fb:04:
0e:1b:17:5b:f0:a5:ee:7d:70:7f:1e:e1:3a:a2:08:
39:e2:e1:3d:6e:89:80:e9:78:89:de:69:80:65:d2:
9b:e2:43:2f:2c:51:27:99:df:d9:28:9f:dd:73:74:
1b:c3:74:7a:b4:1a:52:a2:4b:26:27:b2:2a:d0:c4:
6b:1f:76:21:5e:81:ef:ad:5f:4f:81:1a:64:4b:03:
bb:b4:a5:ac:c9:80:f6:11:c0:4d:d8:de:db:68:34:
25:6e:72:e1:d1:7e:b0:9f:2d:10:cf:18:b1:ca:95:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:ED:01:62:57:56:22:F9:F7:F3:62:A0:92:BF:D8:F1:6C:E0:2C:47
X509v3 Authority Key Identifier:
keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/a-0BYldWIvn382Kgkr_Y8WzgLEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
24:5e:9a:a7:71:6c:71:33:11:fc:10:76:85:97:c2:be:a8:a5:
4f:d9:17:9f:69:85:b9:f0:c6:48:a2:e0:d7:47:bd:d4:1c:70:
c6:2a:3b:4c:68:bb:56:91:9c:1b:5f:49:54:eb:1e:a8:7c:30:
65:c1:1c:a6:c1:55:ec:e1:e2:a9:05:74:08:ea:a4:11:57:4d:
9e:95:e5:3d:a5:f5:17:f2:02:a7:4d:47:05:e9:71:51:d4:11:
c4:bc:b8:aa:7a:8c:63:3e:e8:b7:49:49:f6:89:b7:af:58:63:
04:4e:a5:a3:41:61:b1:85:d9:5d:80:68:03:35:45:2a:a8:3f:
9e:a8:3b:d0:14:a4:a4:96:e6:0c:45:95:db:9a:e1:8c:3f:fc:
e5:4c:68:0d:48:f2:68:16:18:eb:15:b2:25:43:96:e1:4a:82:
41:0c:df:d8:26:d8:fb:3c:08:7e:ec:be:27:3b:01:84:98:ef:
e5:27:55:44:83:0a:7d:92:83:b4:39:1e:02:8f:3f:36:64:4f:
fd:9e:36:b1:c3:5e:ee:ef:e3:b8:14:89:d6:e0:7e:40:ee:e0:
73:88:c2:f9:50:1e:db:24:2d:44:7e:de:0a:53:94:fe:e9:dc:
28:85:7e:62:8d:8f:a1:f5:c0:e1:f1:26:dd:58:5a:b5:47:35:
09:7f:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:10 2024 by rpki-client on console-fra.rpki-client.org