Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/D5kumLjsykDADp6Ba--2jCktjnI.roa
File: D5kumLjsykDADp6Ba--2jCktjnI.roa (raw, json)
Hash identifier: JhPm7i2/hntjWrMLXy3tt6KaOlsW1e9rPLEhDNx1fwo=
Subject key identifier: 0F:99:2E:98:B8:EC:CA:40:C0:0E:9E:81:6B:EF:B6:8C:29:2D:8E:72
Certificate issuer: /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial: 01856D5D2B7EA0997F5A8F7A93B5A1D884C8
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/D5kumLjsykDADp6Ba--2jCktjnI.roa
Signing time: Sun 01 Jan 2023 12:45:00 +0000
ROA not before: Sun 01 Jan 2023 12:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134521
IP address blocks: 2a05:e580:ff00::/40 maxlen: 40
2a05:e580:fe00::/40 maxlen: 40
2a05:e580:fd00::/40 maxlen: 40
2a05:e580:fb00::/40 maxlen: 40
2a05:e580:fc00::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:2b:7e:a0:99:7f:5a:8f:7a:93:b5:a1:d8:84:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Validity
Not Before: Jan 1 12:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f992e98b8ecca40c00e9e816befb68c292d8e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:1c:d5:63:c9:3b:41:fb:c1:7a:eb:39:a0:
8c:2e:9e:b3:a9:37:be:6f:94:ce:b7:30:76:93:81:
5e:84:e9:a6:8e:4b:e7:04:d7:51:12:c7:85:79:64:
fe:8b:cc:eb:3b:fb:25:39:20:04:b9:a1:6f:a3:ed:
9d:dd:d8:05:9d:b9:14:f9:08:ce:c5:f6:04:8c:45:
e8:74:51:14:69:47:6a:d5:9e:2b:dc:5d:b8:19:07:
f1:a4:89:12:b8:f2:e9:72:5b:f5:71:3e:30:3d:54:
af:be:9b:a5:fe:64:fb:88:48:32:da:41:c3:53:45:
d2:ff:99:c4:5e:c7:b9:c8:3c:2a:b3:26:2f:15:23:
ea:43:25:f0:ac:19:63:3a:cb:d5:40:44:a7:e6:19:
d1:cc:ca:98:a9:2b:2a:e0:dc:2b:e9:45:fb:7e:6c:
cf:4f:59:e2:0d:68:f1:c4:a5:72:80:3a:13:e2:5f:
db:40:71:b4:9b:17:e6:8a:f3:9f:84:5e:09:d5:0f:
f7:01:69:6d:1e:57:9b:ea:54:ed:07:08:0c:e2:91:
94:6a:d3:82:c7:dc:7f:c2:40:cb:a2:13:01:ee:13:
00:bf:88:e9:75:fc:60:13:af:75:5f:17:9c:5a:4f:
a8:4f:82:1f:8a:2c:13:f7:ad:cd:5a:9f:d5:f2:9b:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:99:2E:98:B8:EC:CA:40:C0:0E:9E:81:6B:EF:B6:8C:29:2D:8E:72
X509v3 Authority Key Identifier:
keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/D5kumLjsykDADp6Ba--2jCktjnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e580:fb00::-2a05:e580:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9b:8c:94:2e:ce:3b:bc:33:29:b7:71:65:ae:20:0f:7d:ff:d3:
dc:7a:b1:b4:85:1d:4a:33:cf:b9:ed:f4:b8:af:ab:cd:6d:85:
e0:ba:23:41:f1:4c:20:8d:88:e3:86:9e:55:5f:c8:1c:a9:58:
54:d3:25:52:76:ab:05:b0:6f:4e:fd:57:3f:52:e4:7b:55:36:
86:78:85:ef:29:c9:9a:5a:87:cf:2d:1a:e3:33:64:06:51:99:
aa:70:d0:42:58:21:56:53:a0:09:a0:0f:7b:4a:17:a1:a3:65:
3d:7c:02:82:38:19:87:dd:ae:75:65:89:4d:a9:23:62:0d:ea:
4b:ae:0b:48:f7:08:ee:4e:0b:23:5f:9a:92:55:33:ae:21:38:
4d:2d:13:e7:6d:b8:9c:4a:ed:f2:67:ef:43:f0:0c:25:ae:53:
54:76:81:ce:4c:f8:2c:2b:ab:48:38:3e:20:c7:01:88:b8:b8:
c2:84:5c:d4:a5:b1:d0:a9:4b:a3:d0:ae:10:6f:e0:7a:5b:46:
ef:32:0e:3a:de:cc:31:f8:18:b4:09:7c:b1:e0:50:a1:47:3f:
f9:38:9b:bd:6f:f7:0d:66:eb:f7:98:7c:4b:0d:b0:f5:6b:e3:
91:3d:bb:b9:78:2a:06:42:a8:ec:7f:01:3b:7e:bf:7a:2c:0d:
ed:d8:fb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:02 2024 by rpki-client on console-fra.rpki-client.org