Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/9R4m6Z2EC5qRNh2l3HoY7JLYUZ8.roa
File: 9R4m6Z2EC5qRNh2l3HoY7JLYUZ8.roa (raw, json)
Hash identifier: NPPZLe36tw/0yNCxf/LiRfbp3XyMQ/90gj4u/aF0a9A=
Subject key identifier: F5:1E:26:E9:9D:84:0B:9A:91:36:1D:A5:DC:7A:18:EC:92:D8:51:9F
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018B7FEA7E7BDF77444E3F21FD4F12300146
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/9R4m6Z2EC5qRNh2l3HoY7JLYUZ8.roa
Signing time: Mon 30 Oct 2023 09:29:16 +0000
ROA not before: Mon 30 Oct 2023 09:29:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57271
IP address blocks: 2a0d:c103::/32 maxlen: 32
2a01:48a0:4001::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Nov 2023 10:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7f:ea:7e:7b:df:77:44:4e:3f:21:fd:4f:12:30:01:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Oct 30 09:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f51e26e99d840b9a91361da5dc7a18ec92d8519f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:f4:f0:90:aa:8f:34:03:0d:8d:68:f2:17:
ba:e9:86:9c:af:67:5a:ba:ce:84:ae:ad:55:a9:e8:
e5:30:72:15:20:65:22:36:cd:03:e1:6d:37:d8:fa:
ae:81:72:d6:4b:3b:f1:00:7b:36:33:76:54:b2:63:
50:10:84:df:81:87:fd:42:cf:41:5c:51:11:d6:40:
45:44:b4:94:ef:d6:10:e3:2b:1b:ce:69:ff:0a:89:
49:c9:a6:4e:c7:dd:71:47:f7:f3:d7:cf:6d:75:e9:
d8:f5:ae:1c:80:f3:19:53:ff:eb:36:fa:18:36:96:
49:40:fc:df:49:47:18:a8:09:15:bb:ad:ae:9c:b0:
21:19:dc:1e:e9:32:cc:ec:ec:2e:3d:0d:1d:f8:48:
7a:5b:6c:f2:ed:2a:ac:43:ce:c5:5a:cf:9c:e1:19:
31:e8:fa:f7:f9:aa:8b:20:4b:c0:53:73:11:5c:39:
ce:5c:5e:5b:5f:73:03:d0:66:d5:f6:7f:6e:6a:23:
6d:02:c1:19:e6:9c:35:aa:f5:91:65:c1:44:80:6f:
b6:ac:80:a4:ec:13:9f:6d:48:f7:36:51:50:ff:9d:
0e:49:9e:b2:23:2a:45:27:fd:54:95:ff:2d:0a:55:
ba:20:7f:cf:5b:ed:6c:1c:6c:94:f8:0d:b9:07:f3:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:26:E9:9D:84:0B:9A:91:36:1D:A5:DC:7A:18:EC:92:D8:51:9F
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/9R4m6Z2EC5qRNh2l3HoY7JLYUZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:48a0:4001::/48
2a0d:c103::/32
Signature Algorithm: sha256WithRSAEncryption
61:26:0f:8b:e1:04:13:34:93:a6:79:a7:ac:49:8f:49:6e:ed:
89:05:83:62:a9:de:93:3c:ce:53:10:c7:bc:25:ca:6b:f8:d3:
1f:d8:af:64:d3:df:1f:fe:35:9f:4e:bd:23:c0:3b:c4:0e:6d:
08:10:20:56:5c:56:e2:e5:31:7c:24:5e:18:48:93:f6:8a:93:
d2:5e:61:54:78:68:f1:fb:0e:2e:fc:96:c8:9f:ac:8e:8f:70:
67:6f:1d:a7:56:fc:73:89:75:f4:89:f5:85:ef:10:de:fb:fb:
8c:eb:35:5a:87:2f:51:1c:64:ec:80:b2:f6:67:48:82:00:6c:
cb:c3:97:2a:fa:fd:96:fd:34:71:d8:9b:1d:b6:7f:e8:11:21:
97:5f:2c:3a:3f:a7:c6:c3:9d:93:fc:f9:e9:b8:62:31:2d:dd:
95:1b:63:f4:11:ae:d8:03:91:b9:dc:c8:4f:e4:9d:a6:a1:20:
b1:0c:04:ed:6f:8d:bd:f1:0a:67:b7:81:27:1c:a1:aa:2d:12:
78:fa:95:67:d7:f6:0b:ac:27:eb:9f:94:68:b5:f8:d1:74:56:
67:a3:af:ca:d9:fe:6c:92:2f:7b:a8:63:5f:0d:aa:d0:fb:00:
90:8d:97:d6:c6:62:84:06:46:18:8a:d4:6b:9c:b9:a9:17:93:
84:63:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org