Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/RvMODxE5bhUZQgSCm8Qv7sjF0F4.roa
File: RvMODxE5bhUZQgSCm8Qv7sjF0F4.roa (raw, json)
Hash identifier: tgdqRAIIgGMkPPDUn3Po6xv4GDEaebx3xzH26PK/X2k=
Subject key identifier: 46:F3:0E:0F:11:39:6E:15:19:42:04:82:9B:C4:2F:EE:C8:C5:D0:5E
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018B60B4B05DA34955821E84FE00FB6E6F99
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/RvMODxE5bhUZQgSCm8Qv7sjF0F4.roa
Signing time: Tue 24 Oct 2023 08:02:16 +0000
ROA not before: Tue 24 Oct 2023 08:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206873
IP address blocks: 2a0d:afc1::/32 maxlen: 32
2a0d:c101::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 08 Nov 2023 11:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:b4:b0:5d:a3:49:55:82:1e:84:fe:00:fb:6e:6f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Oct 24 08:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46f30e0f11396e15194204829bc42feec8c5d05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:88:29:30:32:97:b6:a5:07:d5:cd:46:15:
fa:a1:dc:3e:b9:b3:64:b5:43:55:df:1a:2b:de:fd:
5b:3f:70:ff:06:3f:bd:64:2e:65:3d:45:52:54:ab:
98:df:1d:4d:2b:97:9b:36:32:f7:83:3f:52:5c:58:
79:69:aa:68:7f:bb:bd:27:88:2d:38:d7:8a:aa:17:
30:29:b7:92:af:ef:4e:6c:cb:df:c4:8d:dd:47:d6:
99:a9:0e:87:0c:ef:db:80:07:91:02:8f:13:ab:77:
5f:43:4d:00:10:6b:54:43:ba:e7:79:c0:4c:d0:ac:
93:78:21:0a:1f:4d:60:f8:b1:45:8d:05:7d:e0:90:
33:98:79:69:dc:34:70:4f:17:36:de:42:b6:ec:9b:
28:63:6e:92:08:09:dd:b6:bf:d9:ac:da:7b:7d:d5:
ce:f1:12:47:d7:f2:b4:78:35:fe:68:ba:37:c5:05:
5a:4f:74:42:26:c1:1e:50:8e:48:a4:8d:d7:9c:f1:
fc:2f:8d:c3:73:0b:94:fb:48:82:fd:26:44:3b:0d:
a8:ff:87:1c:c6:5d:25:a8:0a:bf:96:69:96:0d:ce:
09:9d:d6:29:5d:a1:3b:24:61:98:73:c0:65:cf:4b:
02:77:67:0d:45:19:cb:c8:72:84:8f:48:ff:41:f7:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F3:0E:0F:11:39:6E:15:19:42:04:82:9B:C4:2F:EE:C8:C5:D0:5E
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/RvMODxE5bhUZQgSCm8Qv7sjF0F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:afc1::/32
2a0d:c101::/32
Signature Algorithm: sha256WithRSAEncryption
4a:74:fa:8b:6c:74:df:fd:e4:0a:d2:4a:ab:87:84:7a:06:82:
22:6a:bc:77:60:ed:60:8e:d6:1a:72:10:d5:e1:c6:86:38:dd:
cb:0f:51:2d:e0:a8:26:82:78:5d:54:9f:3e:83:19:65:ba:74:
04:6b:88:af:48:f6:de:63:b7:60:35:23:5c:82:d2:cd:61:f6:
80:f4:2a:59:56:d5:bb:f0:54:c4:20:4d:e6:a6:c4:b4:21:5e:
2d:08:a6:f1:ac:63:e1:76:33:3c:e8:cf:31:5a:cb:1a:7d:c4:
29:5f:58:32:21:bf:52:ad:07:03:9e:40:5c:7c:dc:d7:ce:c3:
d9:3b:78:4d:f3:37:06:e6:be:20:28:da:da:f8:c1:a1:b0:fb:
0d:f6:d7:36:91:e5:a3:bd:fd:c6:e7:06:ce:cd:a8:19:6b:41:
54:af:4b:90:3e:98:37:54:9c:3f:61:3d:b0:ef:39:b8:f8:14:
17:31:21:d3:3a:c9:ef:1c:24:d0:85:66:7a:43:c9:c4:57:4e:
9c:10:19:50:f5:3b:d0:14:cf:d8:cd:66:05:87:e7:0b:36:0c:
d9:80:33:5e:ae:73:3f:44:b6:e0:6a:c0:cf:93:84:6a:40:13:
b5:26:10:34:45:55:b6:ff:e2:20:51:ed:60:5d:b3:cf:41:92:
9c:64:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org