Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0QkGu5UIa0gyFSKn5uM_SSJI41o.roa
File: 0QkGu5UIa0gyFSKn5uM_SSJI41o.roa (raw, json)
Hash identifier: 8o32Jnoc3nx6sqQURjW7LLcam/oOZjzbnNiPGS0PB7Q=
Subject key identifier: D1:09:06:BB:95:08:6B:48:32:15:22:A7:E6:E3:3F:49:22:48:E3:5A
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E18A18087AD4F7ADFB5169490B21DC168
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0QkGu5UIa0gyFSKn5uM_SSJI41o.roa
Signing time: Thu 07 Mar 2024 11:17:01 +0000
ROA not before: Thu 07 Mar 2024 11:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8551
IP address blocks: 2a02:26f0:8000::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 15:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:a1:80:87:ad:4f:7a:df:b5:16:94:90:b2:1d:c1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 7 11:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d10906bb95086b48321522a7e6e33f492248e35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:e0:f4:c2:e2:98:89:16:0a:02:ad:ed:11:
15:bd:8e:43:6a:f3:94:0b:9f:d3:c5:3b:30:91:69:
08:e1:d4:32:d6:a9:cf:2e:18:4e:1f:02:79:28:2d:
d1:86:b3:11:0e:0f:e2:6f:a5:54:71:b4:ec:12:55:
89:b6:af:4c:05:77:70:c4:8c:ef:be:67:cc:43:cf:
3d:7c:90:cf:35:2b:cf:d5:11:cc:93:7a:12:31:45:
d4:7d:06:73:8e:d6:4b:74:a4:aa:86:b1:89:d7:a8:
f5:1a:0c:47:3d:a4:e0:49:db:db:53:54:c9:2d:ba:
12:3f:c9:a9:ed:7c:2a:23:ab:92:f2:95:f0:cb:93:
00:0e:40:8e:69:7f:ec:08:07:ee:33:c7:4b:cd:49:
f3:c8:38:d0:37:ba:9d:31:0d:35:00:88:d6:a3:d5:
f9:fa:70:81:51:c0:1d:24:14:a2:b3:07:dc:84:3e:
13:f4:bd:67:89:b7:5b:80:ed:51:ae:ef:32:2d:36:
f3:69:7b:41:d6:2f:67:58:db:41:af:e4:87:3a:8c:
f5:77:31:06:cb:74:5c:82:48:7e:56:80:0a:c0:df:
fb:c3:f5:25:06:b8:65:f6:c6:21:41:95:6f:71:39:
aa:96:f6:79:6c:6a:42:fd:c5:cf:29:66:a0:04:a5:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:09:06:BB:95:08:6B:48:32:15:22:A7:E6:E3:3F:49:22:48:E3:5A
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0QkGu5UIa0gyFSKn5uM_SSJI41o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:26f0:8000::/48
Signature Algorithm: sha256WithRSAEncryption
9c:3b:5d:ed:34:64:45:fe:d3:2a:9f:9d:5d:a2:a8:93:db:fd:
ce:a8:27:16:84:6d:30:d6:8e:e1:73:62:52:08:1e:01:ec:c4:
91:16:e9:62:8a:20:e6:1f:c4:f6:5f:94:f0:13:15:92:fa:64:
62:be:8c:4d:b4:58:1b:db:1d:72:d9:fa:55:de:3e:a0:9e:46:
a7:c2:eb:7f:38:9e:32:9a:a8:4d:32:be:1e:36:ba:62:df:f3:
af:79:8e:61:42:6b:3a:15:0b:ef:3b:55:33:c2:84:2b:bc:50:
d0:38:c4:3b:6e:3d:e9:ee:6a:4e:e4:5f:b6:d5:74:33:11:d3:
da:5d:4d:8f:8d:cd:43:76:24:fb:0a:21:81:fa:c5:08:20:2d:
f9:12:19:28:28:70:5e:4b:9b:6f:0c:c0:5a:8f:43:c2:90:9c:
d9:b6:45:d0:6e:ec:ac:03:ae:27:45:38:d0:7d:c4:dd:f1:21:
d0:0f:96:3d:6d:92:df:c6:ec:5b:22:4b:96:a3:46:92:6e:84:
d9:97:44:10:c7:7b:58:64:80:7f:49:46:61:5e:6b:c8:a1:f7:
76:ae:82:91:be:bd:c2:16:b7:65:30:d6:b7:56:59:57:3f:38:
40:9f:46:48:0e:c2:40:d9:6c:99:9e:d4:8f:51:c6:77:1d:38:
9d:98:7b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 18:08:37 2024 by rpki-client on console-fra.rpki-client.org