Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/aYdbCULBVGaBcxfH6o6loBQIGhU.roa
File: aYdbCULBVGaBcxfH6o6loBQIGhU.roa (raw, json)
Hash identifier: 2LANdERyXpImuJq9/tUu35vlUiIclp+2LXK80k4Mvx8=
Subject key identifier: 69:87:5B:09:42:C1:54:66:81:73:17:C7:EA:8E:A5:A0:14:08:1A:15
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0189F5877C629E3326F698E516C9A657D29D
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/aYdbCULBVGaBcxfH6o6loBQIGhU.roa
Signing time: Mon 14 Aug 2023 19:30:44 +0000
ROA not before: Mon 14 Aug 2023 19:30:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204490
IP address blocks: 2a0d:c102::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 24 Aug 2023 11:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:87:7c:62:9e:33:26:f6:98:e5:16:c9:a6:57:d2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Aug 14 19:30:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69875b0942c15466817317c7ea8ea5a014081a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1e:ec:6a:37:62:fa:44:16:bf:57:19:e7:6d:
ac:ee:31:1b:2f:5c:55:02:d7:65:2d:47:ca:c3:08:
b8:25:95:44:20:7d:d4:b9:76:65:29:85:44:fd:62:
b6:6c:fe:ad:78:64:f3:11:35:d5:fd:69:1b:0a:b6:
62:57:e4:29:07:2b:90:eb:77:e0:fa:ec:90:96:bc:
8b:b8:1e:e6:d6:05:ce:d9:6b:db:81:b0:00:a6:d3:
d7:81:4b:27:d0:e0:af:61:bf:c5:51:42:db:f0:33:
3b:2f:6e:5c:c0:c2:a1:be:c2:fa:c4:47:33:9f:ee:
40:6e:80:95:a1:47:53:c7:6b:21:60:3d:95:75:26:
f8:4c:26:89:1f:fb:9f:25:a1:9c:6b:b4:80:66:e9:
78:39:00:80:54:47:04:cf:99:2a:d8:f1:30:67:c1:
5a:f8:7c:f3:5a:a3:88:2d:24:e3:6b:c5:fd:ec:bb:
69:be:3e:d5:2d:f4:f8:4c:bc:43:55:00:f6:85:61:
3c:7f:f7:94:92:d0:f3:e2:35:cb:40:7e:3f:b4:fd:
16:dd:32:c6:3d:99:12:bd:69:63:27:36:e7:5f:32:
2c:db:b9:da:53:9b:80:f6:19:d3:bb:b6:cd:f0:40:
c1:cf:73:82:3b:c0:c1:dd:24:54:f0:f0:fb:b7:6a:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:5B:09:42:C1:54:66:81:73:17:C7:EA:8E:A5:A0:14:08:1A:15
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/aYdbCULBVGaBcxfH6o6loBQIGhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:c102::/32
Signature Algorithm: sha256WithRSAEncryption
37:54:be:34:73:fb:70:c5:37:6d:96:39:0a:17:ca:39:7e:cb:
24:79:b4:14:d1:3f:93:99:62:fc:7f:ee:fc:1e:6c:f8:08:e4:
de:69:b5:84:cf:25:a8:69:ac:cf:90:a7:b9:7d:6c:7d:6b:8f:
df:5c:72:af:5d:41:75:c8:50:ee:7f:cc:3a:37:7a:9d:2e:89:
aa:ee:19:a4:95:01:1e:82:b0:cb:2a:33:e0:b6:ce:86:32:61:
41:98:01:11:9f:d3:03:09:26:e8:03:d8:13:72:0b:da:89:b4:
21:eb:f0:24:16:d5:55:f9:b4:fb:c4:e1:7f:70:72:c5:5f:0f:
69:5f:2a:b5:ad:a3:c0:0c:b7:00:33:0c:35:76:c2:fe:6c:9b:
0a:8b:91:55:38:bf:3b:0b:6d:8e:7e:2e:ea:5c:47:11:01:6c:
1c:bb:18:2e:4a:ed:c8:43:dd:23:51:60:88:e1:26:44:fc:8e:
c2:53:1e:b7:27:74:bf:ed:fa:28:1a:5b:b2:96:b0:d1:05:2b:
fc:e4:ae:c4:e9:4b:fb:58:6c:c2:18:2a:e4:0e:a5:49:21:7e:
4c:40:8e:76:c5:b8:49:62:ea:5f:c6:9c:1d:22:f5:4f:ad:02:
0e:c6:0f:74:64:9b:fa:b6:ec:c9:3d:34:15:1a:70:fd:8b:c8:
79:f4:7b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org