Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/4BaTGikoJQGbw7_GmCj_J8sSkLI.roa
File: 4BaTGikoJQGbw7_GmCj_J8sSkLI.roa (raw, json)
Hash identifier: +sX59VXdntS03WHxI1NErTcy4p2VieeRhOduHS/tAHY=
Subject key identifier: E0:16:93:1A:29:28:25:01:9B:C3:BF:C6:98:28:FF:27:CB:12:90:B2
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018A279AF149F18959679A94DCF96030CE0C
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/4BaTGikoJQGbw7_GmCj_J8sSkLI.roa
Signing time: Thu 24 Aug 2023 12:53:00 +0000
ROA not before: Thu 24 Aug 2023 12:53:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204490
IP address blocks: 2a0d:c102::/32 maxlen: 32
2a0d:afc7::/32 maxlen: 32
2a06:d644::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:9a:f1:49:f1:89:59:67:9a:94:dc:f9:60:30:ce:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Aug 24 12:53:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e016931a292825019bc3bfc69828ff27cb1290b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:1b:af:2b:ca:77:1f:d6:84:41:1f:4c:2d:
9a:58:9b:89:d5:64:ce:27:7f:9f:b2:08:34:95:9f:
8d:2c:94:0b:52:dd:a0:ab:ea:3d:22:22:df:61:ac:
72:de:4f:ca:c5:15:29:45:eb:d5:45:9b:08:0b:b5:
3c:95:6f:2f:54:dc:92:2b:e7:4c:7a:61:9d:af:98:
4e:c3:9a:3a:5e:02:ba:22:66:81:bd:f4:5e:95:51:
5d:b5:89:1b:9b:66:a3:40:01:b9:58:7d:a6:49:6f:
7a:1b:56:75:c5:f8:09:ce:e0:d1:d1:0b:de:a2:a5:
72:9a:b7:5d:ae:f3:fb:58:ef:6a:d3:b3:d7:3e:ad:
eb:17:5b:bd:6c:fe:b7:12:8c:14:d3:fc:31:29:69:
bb:ff:31:0d:66:9d:8e:ba:46:25:e7:36:b6:5c:b6:
cf:19:4b:0f:84:5b:45:02:c5:c1:d1:e6:a8:2b:64:
cf:79:e8:5e:38:68:33:d4:d9:31:31:27:46:da:74:
5f:3a:d2:27:a1:c2:7e:95:13:17:e3:86:5e:70:63:
eb:ca:a8:90:d6:08:bd:00:3b:e8:71:ef:5d:0a:df:
c8:35:c9:0d:33:8a:85:3d:61:c3:83:63:85:d2:ab:
3f:2a:de:92:c1:57:a5:22:f8:74:be:09:fb:d2:12:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:16:93:1A:29:28:25:01:9B:C3:BF:C6:98:28:FF:27:CB:12:90:B2
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/4BaTGikoJQGbw7_GmCj_J8sSkLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d644::/32
2a0d:afc7::/32
2a0d:c102::/32
Signature Algorithm: sha256WithRSAEncryption
96:30:fd:0c:90:f0:ee:0c:90:f6:db:6d:a1:17:ad:b9:07:50:
8f:0c:f6:5c:c4:0a:e3:6d:9d:47:c3:a5:94:38:00:41:b1:05:
5a:7e:04:e1:df:33:0a:6e:cc:2d:11:e0:c8:f5:59:c2:10:8f:
ac:b0:b4:23:de:4f:ac:50:9d:a2:c4:57:1d:b0:e1:68:48:1c:
1b:4d:5e:b0:8e:d7:48:5c:01:3c:4b:03:ed:1b:37:a0:6a:c5:
c5:ae:f5:81:41:42:3d:07:6f:d0:94:39:e6:fb:df:9e:00:57:
7b:12:59:ec:64:68:53:5e:77:8f:ba:fe:da:a8:f4:1f:9b:0a:
e1:7e:b5:36:d3:9f:46:4b:1f:fc:d3:47:6f:06:7e:3e:33:75:
ed:92:93:6c:f7:85:98:85:6a:5b:f7:28:5f:6f:e1:b9:f2:11:
dc:a3:3c:2a:95:2b:da:a5:03:5c:78:aa:f5:52:7f:7b:46:76:
61:ea:cd:e4:24:ad:0e:05:e0:5a:46:e2:cb:7c:f6:53:15:dd:
40:05:e6:81:83:4e:b2:71:68:92:3e:5d:6a:17:76:3e:9c:ed:
43:78:1d:b9:a6:de:f8:22:3b:c2:3d:45:9d:34:f9:b8:ef:01:
41:8c:5f:c6:d9:b1:fe:d3:06:80:ca:fd:ba:9e:55:2d:01:b6:
6e:01:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org