Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/F9nudfctte1VaTFLn3uELYjNusM.roa
File: F9nudfctte1VaTFLn3uELYjNusM.roa (raw, json)
Hash identifier: dP9mGN5y5cwVGabmN1ikSLp+Kwss329Gc+Xcse+0ZeU=
Subject key identifier: 17:D9:EE:75:F7:2D:B5:ED:55:69:31:4B:9F:7B:84:2D:88:CD:BA:C3
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01927D4AE0A0235055AEA9E793512B09A480
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/F9nudfctte1VaTFLn3uELYjNusM.roa
Signing time: Fri 11 Oct 2024 20:35:12 +0000
ROA not before: Fri 11 Oct 2024 20:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a06:d640::/32 maxlen: 32
2a09:ef01::/32 maxlen: 32
2a0a:b385::/32 maxlen: 32
2a0d:3c44::/32 maxlen: 32
2a0d:95c1::/32 maxlen: 32
2a0d:afc2::/32 maxlen: 32
2a0f:3102::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 11 Oct 2024 22:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7d:4a:e0:a0:23:50:55:ae:a9:e7:93:51:2b:09:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Oct 11 20:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17d9ee75f72db5ed5569314b9f7b842d88cdbac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:0c:9c:c1:9c:f1:56:05:2c:b0:a8:53:2d:
7b:a2:d3:7c:b6:78:3b:7b:f0:8e:11:8c:06:35:f6:
6a:14:d5:fa:c7:25:60:d0:94:39:24:31:d5:4f:15:
07:1f:7c:af:f3:4d:0a:55:3d:65:44:ab:2b:5d:91:
f6:1b:b2:64:f6:f5:6d:b4:87:80:39:19:36:2a:01:
be:68:0e:e7:c9:c3:e1:d5:5d:a6:8e:c2:ee:b7:17:
35:4e:b2:12:6a:7d:3a:05:61:a8:d9:60:fd:3a:10:
dc:b1:fb:ca:56:73:a3:d8:bb:ba:53:3a:57:6f:3d:
be:df:08:06:cc:2f:90:0f:c6:8d:b1:8e:09:a7:84:
7f:24:e5:b4:29:89:71:e4:1d:6b:e1:b8:d4:21:10:
70:d7:9e:3a:36:0d:ba:a0:01:31:78:fd:3e:a5:75:
fa:5f:7c:51:97:1f:7d:7c:90:7c:8e:93:27:69:7f:
e0:30:ef:4c:da:83:54:f3:70:b0:08:45:29:de:cc:
ae:07:b2:47:1d:31:ef:1a:4e:bb:8a:95:72:db:78:
f1:b6:0f:50:4c:1a:c8:79:e9:f5:9e:ff:46:32:27:
ec:f4:27:b6:61:c6:77:97:5d:3b:98:c4:69:f3:a0:
6e:31:4e:48:61:50:02:06:60:53:87:50:53:4d:d4:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D9:EE:75:F7:2D:B5:ED:55:69:31:4B:9F:7B:84:2D:88:CD:BA:C3
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/F9nudfctte1VaTFLn3uELYjNusM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d640::/32
2a09:ef01::/32
2a0a:b385::/32
2a0d:3c44::/32
2a0d:95c1::/32
2a0d:afc2::/32
2a0f:3102::/32
Signature Algorithm: sha256WithRSAEncryption
69:d6:8b:a9:82:1b:ab:9b:5e:12:cf:71:8e:5d:4c:65:99:97:
0c:d5:fb:56:e4:d7:ef:c1:a7:b0:6a:f2:76:e1:04:eb:0e:41:
9d:9c:64:b7:94:57:c0:15:1b:35:40:59:5e:ab:97:23:8a:7d:
8e:4d:b9:59:95:3a:5d:37:61:68:6e:27:0f:b4:6f:ad:83:bf:
2f:f0:a1:e6:15:64:b1:53:71:fb:98:8b:c2:00:34:f0:b2:3b:
48:a5:a9:22:ee:bb:43:ed:43:e5:25:99:98:1c:e4:96:d6:12:
a4:2a:b4:5d:89:01:f2:22:c6:72:d0:6f:fb:e9:e6:e4:cd:6f:
7b:65:05:5f:ea:96:09:d6:ad:90:6b:1a:4c:0f:a6:ba:38:ae:
a1:82:81:9d:70:50:78:9d:60:7d:7a:43:9b:9d:6e:46:d3:d0:
77:bc:2a:24:a5:19:09:46:6f:fa:e6:0f:5f:db:d4:c0:b1:3b:
a0:27:16:5a:a1:98:59:79:10:43:b0:d4:91:6c:f3:e3:ff:bc:
00:66:5e:39:bb:67:a5:9d:2c:ed:04:e8:b4:ef:61:6e:83:fa:
c8:7f:5e:c3:16:2b:c7:ce:a3:fe:83:22:c1:96:00:2c:45:99:
63:d4:f3:ce:f8:36:af:fa:6f:0c:c5:dd:de:58:cf:0c:4d:5d:
10:e8:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 03:20:57 2024 by rpki-client on console-ams.rpki-client.org