Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8u2VBPNUMt4-9kzdua_7N0hgbiU.roa
File: 8u2VBPNUMt4-9kzdua_7N0hgbiU.roa (raw, json)
Hash identifier: LeFnzo/PPlqOLDsfdNkn9OTgVVnPAI7eZ9V/hSYN8hQ=
Subject key identifier: F2:ED:95:04:F3:54:32:DE:3E:F6:4C:DD:B9:AF:FB:37:48:60:6E:25
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01903BEEA816BE9C4CE75E3E40E324FE668C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8u2VBPNUMt4-9kzdua_7N0hgbiU.roa
Signing time: Fri 21 Jun 2024 17:53:34 +0000
ROA not before: Fri 21 Jun 2024 17:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50529
IP address blocks: 2a0e:bcc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 09 Jul 2024 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:ee:a8:16:be:9c:4c:e7:5e:3e:40:e3:24:fe:66:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jun 21 17:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2ed9504f35432de3ef64cddb9affb3748606e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:c1:63:fa:dd:5c:54:b2:02:4e:57:be:ee:
3f:75:8c:22:c2:0d:52:ca:0a:0b:cb:32:a5:d9:83:
70:bd:54:af:c2:90:f0:dc:32:d6:43:78:6a:ea:71:
c5:5c:fc:32:99:ba:1b:0d:b0:9c:d4:ac:bf:8f:81:
0c:a4:b1:86:33:8e:5b:4e:4d:90:79:30:17:e5:ba:
bb:cc:85:77:38:b2:92:f8:a0:19:35:49:61:db:af:
11:0e:cb:b4:ee:39:62:74:7e:96:4a:30:46:ff:d9:
53:07:46:89:05:00:ad:9e:0a:b9:75:09:f2:d9:b3:
46:35:6d:76:9d:c8:af:d2:6b:4e:ec:50:a4:cc:09:
51:c2:31:aa:d9:83:a3:1e:92:21:33:54:5b:f8:e5:
05:ab:8a:b9:8e:56:20:dd:05:f5:bf:43:a2:24:a2:
65:f5:c4:a8:03:60:c6:0c:a7:2d:e1:b5:06:cf:8d:
e1:42:35:a9:9d:b4:d0:01:e0:e6:66:97:c9:15:f0:
82:6b:fb:4c:a5:4a:49:24:be:ce:96:55:c0:a9:c9:
13:1c:f3:32:12:b4:2b:8f:d2:72:92:db:2c:63:11:
bb:d3:0f:79:72:62:98:ac:01:b1:3e:28:72:ca:84:
7f:fa:2d:6b:6b:00:61:c1:9d:85:af:cf:23:5e:bd:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:ED:95:04:F3:54:32:DE:3E:F6:4C:DD:B9:AF:FB:37:48:60:6E:25
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8u2VBPNUMt4-9kzdua_7N0hgbiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
27:0c:c5:fe:3e:5c:41:f5:24:22:7d:ce:d6:e8:55:aa:e2:bd:
65:a4:24:6e:52:bd:1c:2c:8b:8b:d8:f6:52:0a:14:37:28:cd:
27:7b:c0:85:36:83:cf:ab:cc:46:08:f9:c2:4e:0f:97:3f:a8:
c6:2d:af:47:f6:90:b7:b1:17:68:1a:55:6d:30:7c:23:53:c4:
4f:7b:88:18:82:1f:21:68:60:8f:aa:93:01:33:79:f6:17:f3:
e7:58:12:ef:7e:3f:af:6b:18:1d:0c:bd:1c:b2:51:1a:aa:48:
de:69:8f:2b:84:37:3f:59:3e:0f:48:81:b5:b5:05:62:ca:2a:
ed:29:b5:f0:11:3d:32:08:b3:8a:71:42:7b:0d:4a:e8:da:b4:
e7:bb:b6:fb:d4:2f:50:17:3e:e6:60:4b:2b:ea:fa:35:c8:99:
1d:ee:db:37:b8:25:e3:c9:c2:b7:38:50:5a:bb:57:8b:39:d1:
da:e8:b8:34:9f:92:44:58:50:7a:bb:77:9f:7f:62:14:dc:65:
bf:6b:c8:07:4b:c8:ba:9e:be:be:b1:b6:e6:69:02:94:c8:d9:
dc:65:8c:f0:24:29:86:86:d4:9f:30:58:4e:6b:1b:61:e5:68:
e9:7d:b0:47:2c:de:ba:32:b3:4a:c4:5d:5f:28:29:e9:b5:e0:
02:f6:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 21:07:17 2024 by rpki-client on console-ams.rpki-client.org