Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/0vTFkV9squSxRkd2N05SbKet4so.roa
File: 0vTFkV9squSxRkd2N05SbKet4so.roa (raw, json)
Hash identifier: xr/0Vxlov//Beribp0Lqhq9Nc8P7vy9JsXDOP1WsIto=
Subject key identifier: D2:F4:C5:91:5F:6C:AA:E4:B1:46:47:76:37:4E:52:6C:A7:AD:E2:CA
Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial: 0190C570AE2B6F85BFBD25C60C470F387D29
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/0vTFkV9squSxRkd2N05SbKet4so.roa
Signing time: Thu 18 Jul 2024 10:43:34 +0000
ROA not before: Thu 18 Jul 2024 10:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215569
IP address blocks: 2a07:2486:4010::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 11 Aug 2024 15:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:70:ae:2b:6f:85:bf:bd:25:c6:0c:47:0f:38:7d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Validity
Not Before: Jul 18 10:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2f4c5915f6caae4b1464776374e526ca7ade2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:a6:fb:02:7b:99:c6:35:34:09:34:57:71:
4a:ef:ff:cd:7f:2f:ca:36:c3:47:0d:4b:76:62:16:
dc:bd:60:94:23:56:50:00:d9:d3:40:5a:36:07:50:
9c:72:2a:a4:00:fa:dc:1f:a5:99:4a:7a:8f:94:e3:
e7:af:74:3b:3a:f5:7d:ee:98:85:b0:51:88:86:0f:
ae:0b:ff:d0:92:4c:ea:b1:c9:fe:cc:f2:00:52:5f:
30:9b:70:3d:3f:cf:b0:11:fa:99:68:4d:64:08:27:
8b:f8:d2:b5:69:ee:ec:cd:ba:67:af:a2:87:05:96:
be:d9:74:66:c3:12:f9:53:9f:18:d7:75:5f:c5:4f:
a5:3f:98:d1:5d:14:19:1d:ad:6b:5a:87:be:df:74:
e1:af:4e:40:aa:f6:33:06:ad:b5:0e:43:4f:14:f4:
7d:0a:90:a9:56:72:04:f5:6c:d6:7d:7a:00:fb:2a:
b3:3b:e8:6d:b7:4e:a7:cd:6e:55:57:f1:d6:be:96:
00:38:0d:0e:6e:72:4f:19:9f:97:2d:96:21:99:25:
dc:6c:a7:d1:76:80:c5:41:18:3b:de:dc:5a:82:82:
4e:a0:5d:ff:59:3a:98:3f:d2:4d:b9:a5:ab:12:6d:
ab:13:f2:4c:21:7e:e7:f7:74:b5:f3:3e:ce:69:e8:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F4:C5:91:5F:6C:AA:E4:B1:46:47:76:37:4E:52:6C:A7:AD:E2:CA
X509v3 Authority Key Identifier:
keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/0vTFkV9squSxRkd2N05SbKet4so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:4010::/44
Signature Algorithm: sha256WithRSAEncryption
1a:fc:ff:45:72:3b:5b:2d:ff:80:03:bf:3f:b7:e3:f6:e2:df:
55:eb:aa:e8:1f:42:b6:e2:a0:c3:06:8e:fe:1a:ff:5a:43:35:
5e:c8:40:b3:c0:43:15:ae:95:39:6c:4d:d8:9a:82:7c:95:84:
d7:b7:e1:99:72:a3:d9:2f:fe:e3:e2:95:25:33:4b:68:7c:66:
8f:95:d2:ff:8d:d0:1a:7e:e6:07:c2:87:69:4e:76:2d:fe:da:
90:b2:e4:c4:f3:b4:85:54:99:6c:8a:b8:dc:8b:1a:b1:80:04:
ca:2e:88:0b:db:b9:4d:bd:d8:77:1e:02:00:82:d8:eb:1c:28:
18:f1:3d:5b:98:32:88:a8:75:bd:dd:24:76:69:05:04:3c:96:
2a:83:26:56:e2:9b:8d:5a:de:ae:79:78:96:9e:55:01:0a:57:
6f:25:25:54:d4:82:d5:b2:0f:4a:a4:71:bb:b4:2c:0b:14:f9:
d4:e4:51:74:e0:34:5f:9a:1d:35:b2:fe:d0:c9:14:51:8a:9e:
f9:06:c5:7a:67:c0:13:a6:4f:27:b7:a3:a5:89:cc:56:c1:40:
25:96:47:d8:8f:78:70:f7:5c:b9:2d:16:19:79:8a:d8:14:0c:
d5:82:47:d1:e1:d4:a8:11:da:c1:6f:ce:0c:e8:0f:ff:fa:69:
3f:e3:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 17:36:01 2024 by rpki-client on console-ams.rpki-client.org