Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/T-d4d_hOQZrNjwJ_3jg1So1D4yA.roa
File: T-d4d_hOQZrNjwJ_3jg1So1D4yA.roa (raw, json)
Hash identifier: 3l4FBc3y6YMHrzqz3IIph84+HUfQ64ner7LqPCXHGIQ=
Subject key identifier: 4F:E7:78:77:F8:4E:41:9A:CD:8F:02:7F:DE:38:35:4A:8D:43:E3:20
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2ED0F3538A611620041AF3E8253C98
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/T-d4d_hOQZrNjwJ_3jg1So1D4yA.roa
Signing time: Sun 01 Jan 2023 07:14:45 +0000
ROA not before: Sun 01 Jan 2023 07:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205214
IP address blocks: 2a0d:2146:8480::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:d0:f3:53:8a:61:16:20:04:1a:f3:e8:25:3c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fe77877f84e419acd8f027fde38354a8d43e320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:37:68:58:de:b0:fd:7d:39:b9:90:0c:e2:
f1:e4:15:47:5a:eb:80:84:2a:1a:be:8b:9f:41:da:
65:9e:db:46:13:21:c7:99:54:fc:48:1b:97:ac:a0:
a0:7b:4b:9f:05:16:e0:ac:0f:bf:09:df:fc:51:5d:
d2:7a:3e:8c:12:31:e5:96:fa:7b:5a:8c:17:09:80:
1f:86:8f:0d:5b:aa:9d:de:ff:41:39:98:6d:ed:40:
4e:5b:f0:71:de:88:d1:d1:7e:32:87:7e:c0:5b:4f:
fd:a1:cf:fb:be:06:8f:d2:f5:5d:2b:f5:c2:6f:90:
82:cc:e5:4b:b5:b3:25:52:f1:5e:de:06:f4:22:02:
48:84:2c:86:ff:7d:f4:17:06:b9:fa:59:6a:81:2f:
57:73:e5:40:e1:d2:e5:4c:aa:fd:92:56:b3:ca:70:
18:de:58:4f:06:fa:10:b8:9a:1e:1a:69:08:04:a4:
77:3d:e9:e5:59:ed:7e:df:40:65:1c:46:e2:02:2a:
ff:8f:a4:43:25:36:23:a2:16:48:2a:bf:7c:54:f8:
5d:88:94:07:9c:98:7a:1d:d6:b9:1a:3b:b2:69:46:
e0:77:d9:16:5f:d8:20:e8:f8:42:f7:ec:8c:47:44:
50:af:17:87:96:11:7f:5f:d1:78:26:85:10:94:67:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E7:78:77:F8:4E:41:9A:CD:8F:02:7F:DE:38:35:4A:8D:43:E3:20
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/T-d4d_hOQZrNjwJ_3jg1So1D4yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8480::/44
Signature Algorithm: sha256WithRSAEncryption
b0:fb:4f:6e:fe:dd:74:c7:6f:dc:93:50:f0:1e:f5:2d:17:74:
d8:e5:48:98:10:21:5e:c3:c1:6d:ee:eb:cf:a9:75:74:fd:ef:
11:2d:1c:4e:af:32:b2:dd:2a:16:1e:10:46:15:cd:2b:36:66:
43:61:ea:38:d3:74:0d:ff:5e:b6:d3:17:aa:29:7b:4f:67:e3:
c2:eb:5f:b6:db:ef:8a:ed:ca:0c:e3:b8:4d:db:5f:a6:27:3b:
47:7b:47:b7:1f:87:bf:bf:f0:21:7c:23:f0:f4:73:ec:82:18:
52:1f:4e:c0:f2:95:e5:b2:be:f5:93:6c:7a:c3:0a:12:22:97:
62:ec:3c:ca:82:e4:e5:49:87:cb:32:76:7a:cb:bd:a7:8d:d4:
1a:d9:63:39:6b:d8:bf:f5:b3:14:b8:c6:36:fa:a6:8a:d7:b9:
0c:b4:49:9f:a3:33:fa:ad:98:96:1e:ce:f2:2b:6f:14:c8:28:
9f:c1:2f:e7:1e:91:38:0e:b7:20:a5:35:28:40:d2:23:27:15:
ba:fa:1d:bf:5d:8e:73:33:d1:99:07:2d:5f:2c:a8:47:70:38:
27:84:24:fb:a1:36:97:d9:2f:a7:ef:74:9b:7d:60:68:f7:e8:
af:f5:be:0b:7a:b7:01:a8:d5:ea:61:8c:09:39:37:ea:c9:fe:
81:e7:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org