Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/kBdyBnB0UWRwr26LY2uY31V-8Hw.roa
File: kBdyBnB0UWRwr26LY2uY31V-8Hw.roa (raw, json)
Hash identifier: FYVQbbv08TqDli4+oHNq1mApt4ghxV5hfa03yLiGB+M=
Subject key identifier: 90:17:72:06:70:74:51:64:70:AF:6E:8B:63:6B:98:DF:55:7E:F0:7C
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01922F62AC83C9F07E9546A040F80AD175F7
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/kBdyBnB0UWRwr26LY2uY31V-8Hw.roa
Signing time: Thu 26 Sep 2024 17:30:48 +0000
ROA not before: Thu 26 Sep 2024 17:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 2a06:7840::/29 maxlen: 29
2a0b:2a80::/29 maxlen: 29
2a0d:4440::/29 maxlen: 29
2a0f:f02::/32 maxlen: 32
2a0f:f03::/32 maxlen: 32
2a0f:f04::/30 maxlen: 30
2a0f:59c0::/29 maxlen: 29
2a0f:a380::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 25 Oct 2024 21:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2f:62:ac:83:c9:f0:7e:95:46:a0:40:f8:0a:d1:75:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Sep 26 17:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=901772067074516470af6e8b636b98df557ef07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:fe:1b:ac:7a:86:20:3b:79:15:e7:4f:c3:
4f:8b:7d:7c:e4:31:07:3f:cc:ed:f1:08:e2:f2:45:
7d:16:01:4d:40:64:de:ca:1e:06:19:c3:b3:fb:f5:
02:6c:b5:a1:06:8b:d1:f0:9d:37:1c:51:a4:3a:5d:
5e:d0:93:cf:79:b9:73:a0:c9:cf:e0:fd:a7:aa:4e:
46:7f:0d:c9:2e:19:db:c3:f6:66:ae:3a:38:a9:65:
11:bc:52:db:2d:ce:78:f5:6f:52:1d:01:b7:9b:be:
5a:6d:b7:50:05:18:b4:75:bc:cb:ee:d0:88:37:c3:
7f:37:ea:e4:be:65:90:e1:c3:85:8e:e4:2a:e0:0c:
73:82:0b:ff:18:0b:64:d1:97:28:8e:9b:31:24:c0:
f7:5b:30:f3:c3:bc:f0:64:30:40:97:f7:2e:98:76:
54:cd:c9:d2:98:16:9b:62:ca:da:b6:4c:76:ce:35:
30:02:d9:49:69:22:15:8f:3e:b1:bf:bf:d7:da:fa:
cb:98:b6:2a:4e:d4:2f:c4:19:51:9e:5d:03:89:16:
99:86:1c:14:7c:2a:0a:29:da:a6:55:f0:43:90:d9:
6f:d6:67:c9:a7:a7:d8:07:dd:57:e2:e3:0c:f8:49:
74:be:8a:2f:97:7f:88:ff:fb:74:dd:a7:40:8b:c7:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:72:06:70:74:51:64:70:AF:6E:8B:63:6B:98:DF:55:7E:F0:7C
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/kBdyBnB0UWRwr26LY2uY31V-8Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:7840::/29
2a0b:2a80::/29
2a0d:4440::/29
2a0f:f02::-2a0f:f07:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:59c0::/29
2a0f:a380::/29
Signature Algorithm: sha256WithRSAEncryption
9b:b2:59:91:b1:3c:ae:cf:6f:e9:7c:51:ac:9e:5b:0b:5d:90:
0c:7f:ae:35:62:59:10:bf:dc:66:4f:81:00:60:58:ea:c4:41:
88:c2:55:39:ed:66:77:cd:64:f1:64:66:9a:34:37:a0:07:a7:
a2:ab:34:f7:08:b8:f2:1e:e1:64:8e:1c:18:49:94:1d:18:15:
33:75:ce:36:e8:15:f2:fd:0a:10:e2:74:4b:5a:c3:01:b2:e1:
d2:82:f8:de:a2:bc:3e:1e:8f:6a:48:df:32:9a:40:cf:6a:4a:
59:57:94:ab:cf:f4:f3:e3:17:cc:5d:22:8c:7c:99:ed:fc:5d:
9c:b3:23:5a:1a:1b:da:c2:7e:59:46:28:b6:c4:78:16:63:67:
19:49:c2:93:2e:b1:9a:d9:0d:54:32:b5:99:f2:8c:a7:c7:69:
c3:79:2a:2f:04:8d:4f:6a:4a:f0:6a:b3:3a:69:4f:97:34:16:
c5:9d:5b:d2:ba:ff:3b:58:22:65:11:21:81:55:38:5d:d1:a1:
e6:23:ff:fa:1c:13:f6:0d:9d:b8:e7:bc:20:99:11:0b:95:5b:
b6:1b:cf:93:6b:99:6b:84:3c:7f:35:76:c5:a0:ba:8a:3d:b0:
c3:30:78:aa:6d:e6:f1:f3:b8:9f:28:1c:fa:04:8a:2b:31:29:
b4:84:8e:11
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 25 23:58:37 2024 by rpki-client on console-ams.rpki-client.org