Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vkeMaJ0Zd09-xe4mjB_-hQoFtqg.roa
File: vkeMaJ0Zd09-xe4mjB_-hQoFtqg.roa (raw, json)
Hash identifier: w04eKI7g629WoZ3X2fDPK1JA6qF5ty/4lYQiRfLp4yY=
Subject key identifier: BE:47:8C:68:9D:19:77:4F:7E:C5:EE:26:8C:1F:FE:85:0A:05:B6:A8
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D565E7AC6ABFAFC586CA4906F64E77
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vkeMaJ0Zd09-xe4mjB_-hQoFtqg.roa
Signing time: Mon 02 Jan 2023 04:55:11 +0000
ROA not before: Mon 02 Jan 2023 04:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210661
IP address blocks: 2a05:1e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 24 Jul 2023 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:65:e7:ac:6a:bf:af:c5:86:ca:49:06:f6:4e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be478c689d19774f7ec5ee268c1ffe850a05b6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a9:bf:72:0f:4f:ec:ce:61:b5:1d:94:36:d8:
c0:c8:e3:62:49:68:67:3d:c4:7a:b8:85:4f:59:6b:
60:80:be:49:cc:ff:32:dc:0c:97:a3:df:18:92:40:
48:82:0a:e7:17:c3:fe:4a:38:3c:6b:58:b5:8d:aa:
0c:8d:91:07:f8:d5:db:3d:c0:0f:d9:a4:35:72:b0:
5c:46:b7:9c:c7:8d:dd:1c:42:3c:92:7b:de:b2:7b:
a9:cd:f4:3b:61:a8:06:46:bd:7a:bb:d4:38:02:e9:
33:d4:7e:2c:10:09:b7:cb:9e:ea:e4:a9:69:b3:96:
45:07:6e:50:7f:40:f6:03:04:5c:3e:19:85:d8:a6:
cf:e5:d3:d3:63:75:67:66:f8:47:4f:01:2d:13:54:
e0:ca:68:5f:d0:a1:08:c0:c2:bd:e3:21:18:d8:49:
26:0d:d0:6a:c2:62:d8:ad:23:30:2b:5b:27:1d:ef:
6b:87:ff:4b:51:55:b4:8e:3c:1e:ff:97:d8:fb:9a:
99:64:32:75:99:93:63:50:55:ad:ae:0e:6f:23:f8:
83:3b:43:65:a4:e8:26:d6:23:5b:0c:6a:19:c6:cd:
51:27:47:60:f6:4c:90:d2:69:7a:ec:22:40:98:75:
71:fd:d2:02:3c:25:88:8a:60:d4:a7:1f:58:93:04:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:47:8C:68:9D:19:77:4F:7E:C5:EE:26:8C:1F:FE:85:0A:05:B6:A8
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vkeMaJ0Zd09-xe4mjB_-hQoFtqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1e40::/29
Signature Algorithm: sha256WithRSAEncryption
63:c9:bc:90:49:3d:da:1e:db:62:ec:46:cd:fd:0c:42:07:23:
4b:e2:67:82:34:81:89:94:37:0c:98:25:59:01:c3:73:bc:3d:
67:18:7b:00:9c:36:d5:25:99:12:4e:34:c5:9a:62:e0:56:78:
c4:f6:34:72:24:0d:d6:50:4b:0e:c4:00:75:fb:76:e6:ac:47:
08:97:a7:f9:73:78:03:29:5e:46:ef:a5:17:33:3b:c2:74:2e:
a1:68:c0:97:5c:36:43:82:23:6e:ce:cb:07:cf:33:6a:1f:20:
92:f8:30:27:d7:f4:51:2d:67:7c:40:1d:91:43:3d:b3:f9:46:
9a:be:f1:da:58:71:f2:76:6a:56:d9:34:e0:3c:06:05:02:a6:
cb:2f:d9:b4:8d:36:9c:1c:f6:70:94:3f:40:3a:94:a6:b6:c8:
40:a1:8e:5f:d5:6e:cf:75:59:c4:bb:70:ba:8f:f4:3f:5a:1b:
6a:8b:59:4f:41:62:e0:96:93:06:14:3e:76:9b:64:80:86:f2:
c9:5f:f1:00:05:21:5d:84:65:17:8c:c7:69:97:dd:23:bf:03:
9e:c0:5e:68:96:c4:2c:fb:98:62:7b:bd:c5:dc:6d:77:46:86:
a6:41:21:c4:a1:02:a1:41:48:8a:0b:c1:55:84:84:ad:26:69:
b0:fe:24:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org