Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/DLBDx3unhAAw1bTj72gfBeJ3fks.roa
File: DLBDx3unhAAw1bTj72gfBeJ3fks.roa (raw, json)
Hash identifier: TDPhAmmAKCsWAJmFoxbSehfGPy69ajeB6JfWLtuoodA=
Subject key identifier: 0C:B0:43:C7:7B:A7:84:00:30:D5:B4:E3:EF:68:1F:05:E2:77:7E:4B
Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial: 0192B931483E0D570816939C386B6A756C9B
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/DLBDx3unhAAw1bTj72gfBeJ3fks.roa
Signing time: Wed 23 Oct 2024 11:44:27 +0000
ROA not before: Wed 23 Oct 2024 11:44:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215569
IP address blocks: 2a07:2486:4010::/44 maxlen: 44
2a07:2486:401f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 07 Nov 2024 14:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:31:48:3e:0d:57:08:16:93:9c:38:6b:6a:75:6c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Validity
Not Before: Oct 23 11:44:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cb043c77ba7840030d5b4e3ef681f05e2777e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:46:5a:06:0b:8b:53:1d:96:ef:8a:c6:57:
ee:60:b5:29:30:b1:03:f1:71:d1:77:a6:22:23:2e:
27:ee:d2:62:e1:2e:b7:80:3e:a2:37:59:17:d5:06:
ff:11:20:bd:51:69:c5:33:0f:56:cf:3a:10:d8:bc:
ec:82:70:be:1b:9a:a1:8b:72:a9:a0:b2:06:b7:8f:
79:9a:46:66:5a:9a:fd:a6:a8:4f:1d:18:26:14:1a:
d5:1c:82:27:5a:38:62:c7:14:ea:46:02:cd:78:e4:
79:dc:5e:06:b8:c5:9f:46:25:23:2a:f3:81:86:71:
2b:05:ce:ed:0c:e2:64:e9:49:a9:5c:7f:31:1c:62:
da:f1:74:b1:2f:26:8a:90:02:ea:a1:41:c7:d3:05:
7d:a0:36:17:47:45:3b:fe:23:bf:2a:2f:b3:36:85:
a8:f7:bd:13:54:22:a1:0f:7e:11:6c:1d:8e:b0:4f:
5a:3a:5e:20:c0:a9:8a:26:1c:3b:55:03:1d:37:0e:
a4:3c:7c:7c:fc:81:69:d5:87:77:b7:a0:a0:62:cc:
26:2f:a5:75:8e:33:55:2e:2e:6a:73:a1:f1:05:10:
52:0a:56:68:a6:9e:8d:f7:c9:ec:bf:c9:89:2a:86:
18:a3:e4:f4:3a:ed:e0:12:7c:ab:06:ce:4f:8a:52:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:43:C7:7B:A7:84:00:30:D5:B4:E3:EF:68:1F:05:E2:77:7E:4B
X509v3 Authority Key Identifier:
keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/DLBDx3unhAAw1bTj72gfBeJ3fks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:4010::/44
Signature Algorithm: sha256WithRSAEncryption
8c:37:93:78:05:eb:11:34:ba:c9:f6:4e:5a:bd:ba:fc:80:d9:
3f:4c:6f:9c:cb:ee:f6:68:ea:b8:39:d2:79:f9:2d:05:74:c8:
29:b3:32:b1:50:4e:1d:fc:fc:9b:c8:60:0d:98:4c:82:3f:99:
50:c6:1c:de:75:67:ef:28:05:e0:64:ed:a5:b5:3a:e4:03:2d:
6f:63:97:b6:ea:ce:60:10:ed:55:bc:f0:62:50:73:8a:f3:9b:
b3:89:29:43:49:e1:bf:51:d0:7a:70:0f:d3:07:48:fd:23:09:
3e:77:d2:e9:bd:9e:f2:d3:1b:73:73:49:83:b4:fc:cc:77:16:
06:03:c7:dc:23:29:62:b1:37:b3:e5:9b:0d:1c:ae:e5:b4:c5:
6e:4c:d5:02:ac:c0:fd:ec:ee:93:ff:80:e1:0b:d6:47:c8:01:
8f:f8:7c:47:a4:e8:c3:ab:9c:1c:da:3a:47:d8:15:9b:9b:ef:
14:c2:9c:11:ce:58:3f:c2:91:42:64:48:0c:72:ab:42:d7:64:
67:20:0d:d4:4a:3d:a7:cd:40:75:8f:08:f3:ec:7a:78:db:8b:
9d:a1:f0:01:38:8e:81:3c:1c:1b:3b:b8:da:42:87:c1:a0:bb:
48:98:74:51:a0:a8:d0:d7:55:41:91:3f:35:85:96:83:65:64:
b0:d2:e2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 17:43:10 2024 by rpki-client on console-ams.rpki-client.org