Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/wRIeYYLhAktMX3CL3JCrRT6AqaQ.roa
File: wRIeYYLhAktMX3CL3JCrRT6AqaQ.roa (raw, json)
Hash identifier: Y+bGr48H8jZyjapZrXMFmkYkm/cDEF7IR6scUlASM+w=
Subject key identifier: C1:12:1E:61:82:E1:02:4B:4C:5F:70:8B:DC:90:AB:45:3E:80:A9:A4
Certificate issuer: /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial: 01929C0AA7C54DCADFAE1594C0C26055C3C8
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/wRIeYYLhAktMX3CL3JCrRT6AqaQ.roa
Signing time: Thu 17 Oct 2024 19:53:16 +0000
ROA not before: Thu 17 Oct 2024 19:53:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 2a0e:7f40::/32 maxlen: 32
2a0e:7f42::/32 maxlen: 32
2a0e:7f43::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 23 Oct 2024 13:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9c:0a:a7:c5:4d:ca:df:ae:15:94:c0:c2:60:55:c3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Validity
Not Before: Oct 17 19:53:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1121e6182e1024b4c5f708bdc90ab453e80a9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:2d:b2:f5:64:76:2f:02:32:85:46:cd:8a:
23:ba:01:53:16:a5:7d:72:4f:35:84:20:53:1d:2c:
12:be:19:c7:ad:0e:1c:8f:3c:a3:5a:b4:ca:ac:9a:
83:af:6f:3f:53:08:00:79:8a:92:35:8b:c4:0d:36:
bc:21:77:6e:e7:c7:32:4b:50:6d:97:d8:e0:b2:f7:
d8:b9:19:0d:92:f7:c3:1c:c4:cf:60:c6:2b:c4:82:
cd:14:a6:9d:cd:0a:62:90:1f:e3:c6:fa:9d:db:cd:
08:7e:3b:67:ed:34:89:2f:85:3b:15:4b:98:30:f5:
6d:ba:d9:e2:5e:80:40:e7:74:16:10:20:48:b7:32:
0f:e0:4a:69:c3:51:4c:63:bf:0b:cf:26:38:1f:e3:
f7:a1:72:a4:6b:89:13:7d:b5:ab:57:e0:ec:1f:89:
d1:39:d9:6b:dd:39:df:8c:be:74:38:50:a8:7a:cc:
24:79:e3:e3:bf:8d:d6:fa:85:30:d6:ea:d6:a9:d3:
12:af:2a:24:e1:b1:bd:37:49:29:fc:f2:64:9a:aa:
29:e6:24:6a:5c:eb:17:dc:e1:e7:88:81:3e:ff:7e:
f4:3c:f2:4d:6d:54:f2:3a:1d:53:6f:08:e9:b2:39:
ea:6b:b1:fd:7f:6c:50:bf:91:c7:7f:5a:bd:74:d4:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:12:1E:61:82:E1:02:4B:4C:5F:70:8B:DC:90:AB:45:3E:80:A9:A4
X509v3 Authority Key Identifier:
keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/wRIeYYLhAktMX3CL3JCrRT6AqaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7f40::/32
2a0e:7f42::/31
Signature Algorithm: sha256WithRSAEncryption
8b:7f:b0:34:05:60:bb:7d:b5:e5:a0:f8:08:84:26:49:bb:8a:
a2:35:cf:91:c6:64:cd:74:a5:57:68:69:5a:c5:0a:24:9b:9c:
ea:8f:44:ed:ce:c9:13:c5:a0:5b:d5:25:39:09:cb:9b:21:3d:
86:f5:bc:e1:5b:3f:dd:9a:6b:8d:10:d8:ea:a4:4b:12:b8:96:
d0:a6:9e:cd:0f:2e:50:af:98:7d:28:c2:49:86:d3:2e:ee:63:
ac:26:c2:72:60:18:80:5e:3e:d7:fe:5e:80:21:2e:e6:4f:ec:
72:04:cc:65:67:72:ca:1a:8f:c5:84:c9:57:a1:12:0b:36:f8:
92:44:99:a6:62:db:d1:37:47:ab:d4:44:68:8b:e9:f6:dc:2e:
8b:c4:cd:5a:0a:59:b9:ed:30:74:34:c8:8f:1d:17:e5:15:0f:
83:09:87:ea:73:ac:f9:a8:f3:a5:03:6c:7b:f4:64:e3:94:f3:
21:93:56:fd:80:54:81:3d:c8:05:d4:7e:2a:b2:46:87:4e:93:
47:69:8d:2c:e9:42:6e:ff:61:ba:c9:da:da:a7:00:7e:ea:0b:
c9:49:f0:7b:4c:13:c8:b5:00:24:77:40:bd:7f:7e:c9:ba:f7:
94:82:fa:ac:0d:4d:cd:b8:d5:33:29:cc:a4:13:51:4c:97:0b:
6d:b9:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 16:24:29 2024 by rpki-client on console-fra.rpki-client.org