Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/rU5OM4JYZGdNEonshS2IAH7EYHs.roa
File: rU5OM4JYZGdNEonshS2IAH7EYHs.roa (raw, json)
Hash identifier: wl2N/1nTDGVtTNmMJV5uTnP+TqaIUTRd6E7MGnTz4HY=
Subject key identifier: AD:4E:4E:33:82:58:64:67:4D:12:89:EC:85:2D:88:00:7E:C4:60:7B
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018EBEAB2B927A8AA9C192737465289782E2
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/rU5OM4JYZGdNEonshS2IAH7EYHs.roa
Signing time: Mon 08 Apr 2024 17:04:32 +0000
ROA not before: Mon 08 Apr 2024 17:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a11:6500::/29 maxlen: 29
2a11:c100::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 09 Apr 2024 11:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:ab:2b:92:7a:8a:a9:c1:92:73:74:65:28:97:82:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Apr 8 17:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad4e4e33825864674d1289ec852d88007ec4607b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c4:7d:6e:68:9e:f4:33:5f:12:33:c8:72:66:
ff:f6:47:ad:08:d0:53:0e:e9:cc:b9:63:ca:77:81:
51:7a:02:be:54:60:e7:da:24:eb:a2:cc:23:6e:dd:
85:22:94:1a:b5:7f:60:34:e9:43:e5:41:ca:1a:d1:
5a:0c:1a:db:ef:75:25:15:41:e3:43:62:16:80:a3:
dd:c1:ac:3e:85:cf:cb:4a:ab:0d:90:42:4a:d4:cf:
26:74:54:54:ad:1d:6c:84:a8:ac:5a:f1:e8:98:8f:
ae:51:99:ef:0c:a5:ec:dc:d6:2c:df:c1:f8:8a:03:
dd:7b:91:72:24:c3:7e:8e:60:60:03:64:61:aa:12:
ed:da:ca:7a:4d:76:1c:63:3b:ef:4e:29:c8:72:d9:
22:0f:71:96:63:79:7b:4f:e8:c7:0f:57:d5:b2:1f:
f2:ea:a1:a2:29:7d:c5:59:b1:76:f9:39:bc:5c:2e:
a7:59:e1:c4:29:42:3b:1b:44:23:9e:17:b5:80:dc:
61:04:99:0c:f0:a9:49:4c:36:58:1c:2a:ef:ca:ac:
f0:4a:b3:f2:ce:28:51:bc:44:02:39:de:a4:46:e6:
b2:f7:9d:7e:7a:7d:fd:28:af:e6:eb:93:ae:05:f6:
73:a8:cc:59:35:9e:74:d2:9a:62:08:48:5e:2c:22:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4E:4E:33:82:58:64:67:4D:12:89:EC:85:2D:88:00:7E:C4:60:7B
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/rU5OM4JYZGdNEonshS2IAH7EYHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:6500::/29
2a11:c100::/29
Signature Algorithm: sha256WithRSAEncryption
9e:11:6f:3c:73:c3:05:09:6f:bc:45:64:9f:5d:2c:d4:e7:fa:
83:d0:05:84:a5:6a:7d:29:69:d9:0d:f6:25:28:b2:15:66:09:
8f:d3:37:01:2f:06:74:76:a2:67:09:82:5c:bf:7d:6f:bf:a4:
d1:87:01:74:97:9b:0a:3e:f3:4b:be:6f:bd:4b:2f:5e:db:3c:
f4:5d:31:b8:09:c3:a3:68:a9:f3:1c:ed:c5:98:38:be:75:98:
1c:f1:da:91:29:41:24:fb:4f:63:b0:e7:b2:bd:89:70:dc:dd:
f9:33:05:69:a6:81:03:72:5a:b3:39:d4:c9:97:d3:ff:a1:98:
03:4d:d5:d2:cb:be:16:d3:cd:e3:bb:42:b7:be:46:f8:b4:d0:
08:31:90:be:af:ba:52:28:2f:fb:51:bf:94:8b:54:de:48:11:
96:44:71:c6:52:1c:0c:26:76:db:00:5a:fc:e3:03:bb:8f:5b:
03:db:fd:c5:d6:2d:ed:2e:5b:23:54:d8:f3:4f:9a:6a:b4:29:
1e:e1:1f:83:36:f7:d8:9e:d7:96:5a:37:e4:79:b8:c3:0c:75:
cb:44:6a:41:e9:69:17:e4:bf:85:c0:80:ba:a5:b9:6c:7c:6e:
4b:a3:24:99:6c:f7:37:72:ab:01:d8:12:61:27:ef:2b:ef:ec:
23:ac:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:50 2024 by rpki-client on console-fra.rpki-client.org