Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/anSoITdEYqN6uK70EEoGDOC-omI.roa
File: anSoITdEYqN6uK70EEoGDOC-omI.roa (raw, json)
Hash identifier: CfeaJ5FRHZ/kLc7vE9JiinxH7QdhKZkLqKj6DQFEMuA=
Subject key identifier: 6A:74:A8:21:37:44:62:A3:7A:B8:AE:F4:10:4A:06:0C:E0:BE:A2:62
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0192FC2CB54860386EC6DB0699AB879D2DB8
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/anSoITdEYqN6uK70EEoGDOC-omI.roa
Signing time: Tue 05 Nov 2024 11:54:01 +0000
ROA not before: Tue 05 Nov 2024 11:54:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20649
IP address blocks: 2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 10 Nov 2024 11:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:2c:b5:48:60:38:6e:c6:db:06:99:ab:87:9d:2d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Nov 5 11:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a74a821374462a37ab8aef4104a060ce0bea262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:79:58:16:3f:10:d0:5a:9b:9e:38:c2:de:
df:1d:2a:8b:cd:e3:8e:ca:e4:1f:53:98:00:85:5c:
1a:c5:14:bd:b0:23:eb:df:7c:c7:71:cd:57:9a:5c:
f6:8c:24:6c:6a:94:fb:05:c5:48:0a:36:f8:8d:0a:
26:c9:e2:e2:83:c8:43:27:84:fe:2e:20:eb:1a:6c:
a8:32:b4:85:98:ab:80:4b:44:3d:07:b1:a2:80:d1:
f0:9e:53:c0:d0:3c:df:91:0d:43:31:5b:6a:55:24:
c9:38:7f:66:9f:fc:e0:24:f5:4f:7b:a5:dd:a8:d3:
20:84:83:16:b7:7d:50:60:d3:c1:da:4e:57:08:22:
a9:69:d5:a5:2a:6e:34:e9:55:59:29:41:73:21:a4:
06:ce:53:29:2b:cc:3e:93:3f:e5:37:2e:40:79:17:
c1:b6:1f:23:91:d2:00:c3:a6:a9:c8:12:ed:83:dd:
a2:08:e8:f8:72:fa:a6:b6:fe:a8:bf:f8:6e:97:8e:
aa:ad:42:16:e6:0f:87:cd:18:25:e3:16:71:82:58:
0c:db:4a:40:6b:bb:0c:52:73:86:d9:94:73:34:4d:
5e:04:e3:e0:d6:16:4e:0b:75:a8:76:fb:c6:eb:ef:
ed:fc:ab:78:4e:fb:61:61:49:30:41:07:20:68:ac:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:74:A8:21:37:44:62:A3:7A:B8:AE:F4:10:4A:06:0C:E0:BE:A2:62
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/anSoITdEYqN6uK70EEoGDOC-omI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9800::/29
Signature Algorithm: sha256WithRSAEncryption
0b:fb:5b:d0:5c:fb:b7:e6:aa:f2:57:23:b6:7f:98:c3:a0:5e:
f7:46:1c:81:ce:37:a6:52:9c:ff:8c:0b:5b:00:4e:3f:37:1d:
dc:d7:62:e8:d4:e8:35:40:43:80:a3:de:32:07:19:ad:49:27:
f2:eb:b7:55:0a:08:2b:ab:22:99:c6:67:f4:b4:2d:43:40:34:
2c:27:ea:72:9b:6f:35:66:6f:0c:f4:b6:8d:03:53:d4:9d:66:
0a:55:ae:ed:99:a5:89:6a:c7:9d:23:9a:28:a9:44:5b:d3:7e:
cc:42:c6:11:03:72:56:3d:2c:53:38:d2:4b:01:d2:98:2e:34:
a4:6f:4e:8c:cd:18:41:3d:de:63:b3:42:ca:88:80:fe:bb:f3:
f0:29:d3:0b:51:64:73:9a:f0:dc:07:1c:32:d9:99:39:5f:17:
39:93:d6:34:61:b1:40:78:47:16:eb:46:38:52:bf:e7:6d:96:
70:05:a3:a7:f9:61:23:0e:f2:75:7b:d9:bf:5f:76:79:93:80:
60:6e:4b:1d:f1:f6:92:9e:2c:11:de:dd:27:26:59:e3:fa:ff:
ce:a4:c6:56:59:43:d4:1d:8f:e8:a7:5e:f9:25:d4:d4:d4:94:
e3:a6:2f:2a:7e:0d:bd:a6:81:89:80:89:dd:3e:26:63:9a:cf:
f0:97:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 14:05:04 2024 by rpki-client on console-fra.rpki-client.org