Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/VGnwvKzo8yUXMj_nmM4INCclgaA.roa
File: VGnwvKzo8yUXMj_nmM4INCclgaA.roa (raw, json)
Hash identifier: TvRAS3how5MfkBV5EfX1hq4Z++8Wt2mDd6srv2CbZo8=
Subject key identifier: 54:69:F0:BC:AC:E8:F3:25:17:32:3F:E7:98:CE:08:34:27:25:81:A0
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018CC8DE339C1CA15A273302EBDD9B1521B6
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/VGnwvKzo8yUXMj_nmM4INCclgaA.roa
Signing time: Tue 02 Jan 2024 06:30:54 +0000
ROA not before: Tue 02 Jan 2024 06:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 2a0d:c103::/32 maxlen: 32
2a0d:afc2::/32 maxlen: 32
2a01:48a0:4001::/48 maxlen: 48
2a0a:b381::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 09 Jan 2024 22:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:33:9c:1c:a1:5a:27:33:02:eb:dd:9b:15:21:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 06:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5469f0bcace8f32517323fe798ce0834272581a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:65:48:11:c8:f3:b4:69:04:81:e8:71:70:4b:
14:3b:92:e9:2b:35:09:a6:76:de:44:c5:4d:d8:48:
e9:2d:e0:91:c8:b0:43:80:7a:46:4c:23:69:80:96:
21:42:a7:2e:3c:3c:5b:0e:e1:ff:ab:6e:51:87:c5:
b4:d5:43:13:ac:c1:e1:11:a6:06:51:0b:9a:d8:d2:
97:37:9a:92:40:56:e3:1b:f6:7e:1d:a7:d4:c9:71:
02:6c:c3:aa:ec:07:1f:74:b0:9e:3e:74:d1:33:ce:
21:b1:c9:d5:40:85:ea:66:bb:c1:b1:ad:41:d6:55:
99:ee:0e:1c:57:70:41:76:73:74:46:7f:83:5a:00:
12:ea:11:05:26:01:f0:47:4e:a6:60:85:36:eb:e3:
c8:4a:a5:3e:a7:9c:09:a4:8c:ca:1f:94:a3:ec:e0:
7a:38:1b:a0:e7:c4:30:cf:fc:47:ff:be:f0:d3:44:
a5:1a:4d:a5:ef:24:72:95:86:b7:8b:ac:c6:be:3d:
c7:8a:48:dd:c4:b9:3d:f5:a9:d9:91:94:7c:d6:2a:
da:05:a9:aa:92:82:8a:79:3a:28:f0:a0:ba:8c:87:
46:5b:b4:cf:b0:be:62:69:f2:ae:1d:04:a0:04:e7:
4c:50:f4:55:d2:cb:77:d4:91:67:40:53:05:1d:e0:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:F0:BC:AC:E8:F3:25:17:32:3F:E7:98:CE:08:34:27:25:81:A0
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/VGnwvKzo8yUXMj_nmM4INCclgaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:48a0:4001::/48
2a0a:b381::/32
2a0d:afc2::/32
2a0d:c103::/32
Signature Algorithm: sha256WithRSAEncryption
6b:32:51:9b:66:a8:d0:ae:f8:46:b7:3f:06:0d:98:ee:11:46:
2e:31:b1:e1:56:f1:0b:ab:bc:07:6d:43:95:77:c2:0c:c0:f6:
d2:8c:b1:3c:8b:81:0e:6c:7a:f2:59:ff:87:a7:7f:9b:20:40:
c9:de:ca:1b:a1:d8:24:a8:42:af:7a:2b:73:f0:64:66:1c:55:
c3:64:8e:2c:5e:fe:eb:a0:02:b2:f3:dd:87:1c:66:b8:c8:51:
24:0b:6d:bf:9b:76:e5:97:6b:ae:ef:64:db:14:04:60:6a:8c:
0d:e5:06:37:8b:89:a4:a8:34:40:13:9f:ed:f1:5c:4c:2d:0c:
fd:95:07:ef:cd:8e:77:df:66:1f:4a:e7:50:ac:86:50:4d:da:
18:23:86:00:aa:df:3b:b8:15:2f:41:b5:5f:a7:15:e5:4b:73:
dd:92:12:06:d3:3e:68:40:79:e8:19:b7:69:af:65:af:16:44:
5f:c5:37:2b:53:ca:a6:54:b4:22:08:55:ba:3f:3f:4c:ba:a9:
02:1e:93:70:7b:50:f1:b1:3b:5f:e9:f1:d6:d4:d7:a9:9d:12:
7d:aa:46:89:92:ef:74:03:f0:69:97:a1:eb:eb:5b:ad:92:e6:
3d:b9:fb:28:2d:86:c1:18:3e:36:8e:2a:90:68:c3:ea:26:4c:
43:b1:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org