Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/TGqdasFWsDBv94RPraz0DKuT8N4.roa
File: TGqdasFWsDBv94RPraz0DKuT8N4.roa (raw, json)
Hash identifier: ltWci2B97DyZdcbgXf3ES1rOOzmGtHgWLQN3ixnbUV0=
Subject key identifier: 4C:6A:9D:6A:C1:56:B0:30:6F:F7:84:4F:AD:AC:F4:0C:AB:93:F0:DE
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018AB8E2F90F47292424581A946A5C3688A0
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/TGqdasFWsDBv94RPraz0DKuT8N4.roa
Signing time: Thu 21 Sep 2023 17:56:37 +0000
ROA not before: Thu 21 Sep 2023 17:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213220
IP address blocks: 2a06:d640:8ed9::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Nov 2023 08:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:e2:f9:0f:47:29:24:24:58:1a:94:6a:5c:36:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Sep 21 17:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c6a9d6ac156b0306ff7844fadacf40cab93f0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:19:23:1d:e7:77:81:f4:d9:91:0b:27:3f:
be:1c:f5:36:f7:c5:c8:68:50:45:16:60:6e:65:b7:
4a:6c:f6:04:33:79:38:c4:07:0a:36:a5:12:76:5c:
17:4b:22:76:02:6d:64:46:f4:03:b2:56:f9:2a:30:
0a:27:2a:70:4b:a4:dd:54:4d:a2:b2:c0:49:4c:c4:
d9:87:d9:cf:34:2f:b8:a2:fb:4f:51:38:eb:b1:b4:
6c:28:07:31:9b:7b:a3:ed:8b:a0:41:a5:cc:63:c9:
2f:34:96:86:00:15:bf:da:59:b4:23:a6:4d:06:de:
b2:17:6e:cf:42:53:ad:00:7d:a2:08:8c:6e:53:dd:
a1:71:9e:a9:5c:64:8b:68:6b:9c:4a:cf:30:4f:13:
7f:d5:86:07:5f:4f:e1:27:d4:b0:19:69:06:7d:1c:
69:76:11:ce:93:8b:bc:ac:87:1d:1c:fd:47:56:49:
b1:ea:8e:00:08:29:eb:d4:23:62:20:7a:71:7a:86:
70:f6:58:1b:6a:42:15:25:37:c4:ca:8b:84:c8:7e:
11:9e:33:0f:56:33:de:8d:8b:7a:96:15:ea:15:4c:
b3:6e:b9:d6:83:59:78:48:b6:bf:70:10:d7:0f:a3:
33:b4:b1:f8:d2:a1:1e:af:24:0d:91:18:8b:2f:64:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:9D:6A:C1:56:B0:30:6F:F7:84:4F:AD:AC:F4:0C:AB:93:F0:DE
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/TGqdasFWsDBv94RPraz0DKuT8N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d640:8ed9::/48
Signature Algorithm: sha256WithRSAEncryption
0c:d2:95:91:8b:d7:01:96:b2:c1:a5:07:8e:e9:db:d7:34:02:
de:ca:64:2e:69:bd:b6:f8:ef:3e:fc:a7:d7:f7:67:50:b4:97:
4d:9d:5d:75:0e:e0:af:76:7f:8f:4b:d3:98:87:e8:04:d5:d8:
49:cf:ba:34:27:a4:8b:d1:50:6a:ce:80:a0:90:df:04:b5:8a:
7c:d2:df:49:a2:1b:65:10:8c:33:db:33:37:b7:c5:d3:b7:1e:
02:12:a8:37:c1:44:9e:ea:14:ac:83:1b:a0:99:c4:29:e4:6e:
fc:f1:bf:98:72:e7:5b:f8:e5:16:68:de:8e:63:15:5b:b4:2a:
b9:ce:79:35:2f:e1:a3:86:cb:dc:92:66:33:ae:ff:7e:3d:a2:
9d:31:1f:1f:6e:0b:f0:b6:e6:d8:6f:69:e4:aa:77:09:e7:0f:
b2:b3:5b:83:c5:3a:11:72:41:ee:f5:c6:57:f3:59:15:c5:02:
96:58:59:4e:88:66:a1:25:ab:40:7c:c8:71:ad:37:3a:85:7f:
8e:3d:a4:80:c1:8b:ed:42:f0:f4:34:fe:a1:83:30:ec:a6:c3:
85:89:59:ae:d5:65:2a:52:00:5a:e3:71:6f:ce:1e:87:d6:37:
58:fb:76:a6:e2:01:04:ed:af:f6:34:94:30:d2:ff:06:fc:99:
b2:40:a2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org