Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/6zBU-X5O8eWImF4ACW_454PdymI.roa
File: 6zBU-X5O8eWImF4ACW_454PdymI.roa (raw, json)
Hash identifier: Ktv3aMiSlB6h/YFXCxX2HC4CYmolZl/uA4cwsYQygoE=
Subject key identifier: EB:30:54:F9:7E:4E:F1:E5:88:98:5E:00:09:6F:F8:E7:83:DD:CA:62
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 0190CBF3028434EA540ACBEFBD3E6D200595
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/6zBU-X5O8eWImF4ACW_454PdymI.roa
Signing time: Fri 19 Jul 2024 17:03:38 +0000
ROA not before: Fri 19 Jul 2024 17:03:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 2a10:3b04::/32 maxlen: 32
2a10:3b05::/32 maxlen: 32
2a10:3b06::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 24 Jul 2024 21:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:cb:f3:02:84:34:ea:54:0a:cb:ef:bd:3e:6d:20:05:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Jul 19 17:03:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb3054f97e4ef1e588985e00096ff8e783ddca62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:79:4c:7e:a2:b5:cb:d0:af:ea:91:5d:a8:
d9:20:06:ab:b4:d1:3d:f8:47:55:3f:b1:98:7f:8a:
aa:c2:3f:63:98:eb:8a:a2:82:b1:83:b7:8a:b9:47:
50:fc:28:1e:de:60:b6:e8:99:ac:91:db:69:e9:a3:
5b:8f:db:96:a0:2a:0e:3b:8d:f3:d0:85:c6:b9:32:
ca:0f:9f:70:72:84:1e:44:d5:59:bd:e9:8d:f5:d5:
b3:9b:48:f2:65:92:69:fd:dd:2c:65:c8:f7:47:62:
56:14:f4:bf:d7:3c:ce:27:af:fe:32:33:9c:d9:2a:
b6:d5:67:e6:65:42:b0:8e:3c:11:37:90:68:53:21:
c2:bb:8c:30:24:ef:a8:95:ed:db:73:5b:5d:41:ac:
99:27:e5:c5:40:cb:21:c0:97:dd:ba:2a:af:bd:9f:
31:85:d0:87:88:f7:a0:76:ce:c6:0a:cd:f3:91:92:
a7:74:9c:30:45:00:19:7d:87:0e:15:7c:76:b6:0b:
cd:34:33:80:af:3d:01:1e:22:56:47:ac:36:d3:0a:
bd:e9:28:59:28:7d:98:3c:fa:13:ad:b2:67:7f:e8:
68:11:be:81:b9:5e:01:0a:1a:40:f2:00:6a:54:1a:
e6:b2:cf:af:eb:d9:8c:b6:88:d9:c5:e9:7c:de:46:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:30:54:F9:7E:4E:F1:E5:88:98:5E:00:09:6F:F8:E7:83:DD:CA:62
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/6zBU-X5O8eWImF4ACW_454PdymI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3b04::-2a10:3b06:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:d6:56:d6:0d:52:9f:a8:6c:2b:dd:a6:4b:b4:c6:b8:cb:88:
71:03:12:f0:78:6d:9b:7e:90:05:c0:85:af:7c:a5:43:7e:f2:
b2:81:bc:76:cf:e9:33:55:3f:2a:12:de:49:ae:eb:dd:39:bf:
d3:f4:02:73:65:8c:9e:c7:a5:5d:ce:3e:9c:4c:66:d7:aa:4e:
8b:19:9e:4f:ee:42:43:a9:e8:54:a8:91:22:6f:56:19:35:b8:
07:05:1f:2a:49:7b:4c:5b:eb:d2:15:2a:45:17:60:e4:88:e5:
d6:09:f9:8e:e8:8e:52:7b:43:c5:07:61:ce:29:bd:4e:c4:8c:
91:cd:59:7b:72:7a:ce:ac:51:d0:29:48:5b:a7:9c:a1:d6:a4:
67:35:a2:f0:ec:f3:57:d2:11:37:eb:a7:26:eb:0b:ab:b9:4f:
56:97:d8:f0:1d:52:e4:2e:51:da:19:64:07:62:2d:fb:9a:d8:
b4:5e:b2:5d:d4:61:be:c5:19:7d:92:a2:b7:1b:23:37:72:91:
72:9b:82:47:04:aa:6c:a4:86:81:ea:3a:86:e8:2e:92:bf:dd:
8f:8f:3c:1c:7d:70:9f:af:57:cd:65:5a:43:66:65:46:58:1a:
db:bb:c6:82:18:11:21:8e:dc:bc:25:76:c4:ca:8c:d1:b4:c8:
0c:9b:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:42:20 2024 by rpki-client on console-ams.rpki-client.org