Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/gII5tgigvaEMpxEiQwtwu1o7QY0.roa
File: gII5tgigvaEMpxEiQwtwu1o7QY0.roa (raw, json)
Hash identifier: UgKbQ7dxbxTf9o1yvFbsdHx9F8Okltghs2h4C1vosHw=
Subject key identifier: 80:82:39:B6:08:A0:BD:A1:0C:A7:11:22:43:0B:70:BB:5A:3B:41:8D
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 01909CBA759AB4C022293CB76C2319E1E806
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/gII5tgigvaEMpxEiQwtwu1o7QY0.roa
Signing time: Wed 10 Jul 2024 12:59:43 +0000
ROA not before: Wed 10 Jul 2024 12:59:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 2a10:3b04::/32 maxlen: 32
2a10:3b05::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 19 Jul 2024 17:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:ba:75:9a:b4:c0:22:29:3c:b7:6c:23:19:e1:e8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Jul 10 12:59:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=808239b608a0bda10ca71122430b70bb5a3b418d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:32:64:98:02:d5:84:e8:1f:7a:55:88:2d:
27:1f:3e:e4:e5:aa:6f:48:ff:4f:e2:f4:6f:2a:22:
53:86:38:6b:ba:19:66:1e:9c:be:ec:cd:cb:e3:7f:
40:70:09:d0:06:45:0e:63:ff:ec:e2:5a:94:c2:3d:
1a:df:dd:70:5f:fb:5a:fb:81:32:73:e2:29:1c:75:
a8:e3:10:3c:c2:5c:a7:bc:9c:ad:73:58:25:29:cf:
80:dd:38:34:99:04:0c:4d:7e:25:78:c4:de:7f:e7:
cd:23:e9:3d:ce:75:7c:cf:10:e8:7d:07:b5:28:7b:
68:32:72:54:1a:b8:04:3b:32:36:26:98:2e:91:33:
b7:ab:ec:0a:78:d1:ac:1a:e4:13:d4:ef:4f:f4:8c:
bf:fe:44:9d:31:4e:fa:b1:12:9f:b0:d3:1d:90:97:
52:5f:e2:72:d6:be:e7:6c:91:a7:e8:52:3e:13:c0:
3f:66:e3:f7:71:4c:9f:82:7d:c8:e6:4a:53:c5:e7:
eb:d9:f2:d4:8f:92:56:a1:3d:86:d9:a9:aa:a7:01:
71:d0:94:55:fd:89:5a:87:4a:40:97:b4:13:00:ee:
9e:34:4a:30:51:e4:84:67:55:fc:a0:7b:69:92:9a:
97:67:a7:9a:58:25:fa:44:c0:b4:ca:b3:a0:67:80:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:82:39:B6:08:A0:BD:A1:0C:A7:11:22:43:0B:70:BB:5A:3B:41:8D
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/gII5tgigvaEMpxEiQwtwu1o7QY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3b04::/31
Signature Algorithm: sha256WithRSAEncryption
56:3c:a5:d9:17:31:2e:1b:c9:7a:a7:13:98:64:b5:0c:86:65:
e2:d9:8a:1b:b7:75:c8:18:82:ea:18:26:c0:9d:6f:e4:d0:6d:
b4:78:f6:51:d5:23:e5:2c:86:8e:78:59:d4:ac:67:7b:33:76:
be:de:ab:47:be:94:e8:b4:bd:cf:3d:5a:9e:62:83:30:49:32:
63:19:c5:cc:02:70:ec:81:e6:55:c9:62:5f:83:b7:6f:65:9f:
bf:f1:5b:3b:54:60:c8:b4:41:f7:6b:38:14:92:f7:dc:20:97:
38:0f:cf:b6:56:ce:37:3e:c3:d8:f8:3c:b1:34:c4:c8:16:73:
6e:2f:d1:a1:70:92:f8:73:9e:e9:61:c8:95:8c:5f:92:8b:c0:
5a:77:83:44:5a:90:6a:de:a0:42:e9:3d:b6:32:ed:a1:75:7d:
f8:63:aa:6d:90:a0:3d:2b:8d:2c:28:b9:86:1f:62:a1:a8:07:
c2:96:f8:fb:38:b5:79:59:cd:e5:d7:47:74:41:f5:75:f0:70:
54:7a:2e:a4:ed:18:4e:ed:5d:d9:6a:60:72:1c:bc:12:51:db:
52:18:f9:2f:8a:2c:2f:56:17:58:ce:bc:e3:3d:60:cc:55:19:
29:30:0e:cf:96:14:e4:ae:6b:13:3e:5c:66:55:e5:76:2d:6f:
da:40:50:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 19:06:17 2024 by rpki-client on console-ams.rpki-client.org