Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/lqwNm9uHBD2oGj_4QQNrH9KXaz0.roa
File: lqwNm9uHBD2oGj_4QQNrH9KXaz0.roa (raw, json)
Hash identifier: +W9kX4z/VCe2WETBcvo3w9Ad5sLwujWLpc9kNdVf6kY=
Subject key identifier: 96:AC:0D:9B:DB:87:04:3D:A8:1A:3F:F8:41:03:6B:1F:D2:97:6B:3D
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0189B71954DCEAEC1F80838D9F3ABEE00178
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/lqwNm9uHBD2oGj_4QQNrH9KXaz0.roa
Signing time: Wed 02 Aug 2023 16:33:57 +0000
ROA not before: Wed 02 Aug 2023 16:33:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44812
IP address blocks: 2a0a:b384::/32 maxlen: 32
2a0d:c102::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 14 Aug 2023 19:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b7:19:54:dc:ea:ec:1f:80:83:8d:9f:3a:be:e0:01:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Aug 2 16:33:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96ac0d9bdb87043da81a3ff841036b1fd2976b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:01:1f:03:ca:f3:ff:61:a8:bc:89:82:0d:
cb:40:4f:a2:1b:59:41:fd:59:46:a9:5e:09:90:b4:
ed:f6:6d:a6:06:0c:c1:b9:96:a8:ae:80:5d:c2:8a:
91:4f:9f:3b:81:81:8c:ac:48:73:6e:11:4f:e0:6a:
86:25:fa:aa:3f:32:fe:c7:bc:02:e5:ab:36:45:f2:
15:f7:e0:9c:7a:a3:5f:cb:7b:65:c4:ac:52:68:92:
15:dd:12:d2:ea:a7:c9:5e:fc:2a:b6:28:7d:48:47:
01:9e:dd:bf:73:36:ab:71:b7:e2:db:dd:90:9f:88:
ab:8e:23:b5:a5:bf:6b:7b:44:e1:f3:45:c9:55:d5:
bc:10:27:c4:62:be:2c:a1:3f:4c:ba:9b:78:48:ad:
c2:f2:f1:9d:dd:6b:4c:c2:11:b3:b2:8a:dc:24:86:
2b:5b:d7:8e:0e:2b:e6:ae:66:81:4b:c4:4f:73:fa:
52:0d:25:e0:04:6d:57:1c:7e:4c:1f:2e:1d:e9:c0:
b6:4e:32:bf:89:a3:0b:11:fa:9b:c0:42:5e:bc:c0:
eb:01:83:b6:77:2f:08:a0:e2:2e:83:85:7d:a5:4c:
bb:7f:69:d2:07:07:06:37:78:64:e9:cf:64:3b:4b:
2e:2a:b2:7c:82:82:9b:48:64:56:59:06:35:22:a6:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:0D:9B:DB:87:04:3D:A8:1A:3F:F8:41:03:6B:1F:D2:97:6B:3D
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/lqwNm9uHBD2oGj_4QQNrH9KXaz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:b384::/32
2a0d:c102::/32
Signature Algorithm: sha256WithRSAEncryption
69:c8:82:73:3d:26:46:30:fd:ae:82:26:aa:2e:96:56:ef:df:
06:45:cc:dd:e9:25:b6:e3:02:db:f1:ff:70:89:0f:52:18:09:
ed:5d:73:90:18:53:63:a8:5f:06:8a:de:7a:e7:f9:19:33:20:
8a:df:e5:e5:91:8b:ac:41:f1:2d:5f:9c:91:05:61:6d:fa:a7:
f0:1a:0b:0e:cd:7c:1d:1e:c5:2e:41:84:c5:0f:8e:61:1a:53:
9c:a6:80:34:52:9e:87:34:b6:c5:d7:65:a0:4c:32:74:9d:98:
e3:72:f6:35:fc:bd:e6:1a:f5:a4:d0:36:5e:98:b2:d7:c1:da:
91:41:1a:f5:39:37:8a:61:4f:48:ec:73:f3:dd:97:7d:b5:6f:
17:e5:4f:6f:59:11:32:95:ff:65:ab:55:c3:48:84:64:2a:09:
80:d1:d5:9d:c5:d0:1e:a7:c6:8f:46:9f:f6:32:c8:5e:4e:5e:
c1:68:cd:2f:27:4f:7d:ac:90:3a:40:8e:04:77:ae:17:3d:3f:
ef:90:12:b8:1d:a2:f9:9d:da:9d:ab:64:9e:f4:7a:3e:e7:1b:
4a:8f:93:08:c7:11:4d:8f:79:e9:42:44:cb:25:53:0e:a7:b2:
cd:d2:94:3e:ba:bb:1a:00:80:bf:01:1e:38:cc:e6:58:53:22:
c3:9e:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org