Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/TebNNj-4vPIN94nQ3KAvGeked4g.roa
File: TebNNj-4vPIN94nQ3KAvGeked4g.roa (raw, json)
Hash identifier: 3PHUDuJVoCx0staPoQNg72SMYYa39xNRkyTLG5eUvKU=
Subject key identifier: 4D:E6:CD:36:3F:B8:BC:F2:0D:F7:89:D0:DC:A0:2F:19:E9:1E:77:88
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC34892B08CE83C97E5D2A8BDDEA7942E
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/TebNNj-4vPIN94nQ3KAvGeked4g.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197634
IP address blocks: 2a0d:2682:a000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 25 Jun 2024 22:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:92:b0:8c:e8:3c:97:e5:d2:a8:bd:de:a7:94:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4de6cd363fb8bcf20df789d0dca02f19e91e7788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:53:7f:55:06:ca:5f:9d:9c:1b:67:56:45:
67:f6:00:9c:5a:17:bd:0b:91:ca:4a:5f:3b:e9:17:
49:6d:03:87:55:f0:f3:8f:3e:e5:14:b3:9c:c0:c9:
55:ae:05:4c:38:55:6c:8b:14:ff:3f:e3:20:71:00:
cf:63:43:4b:47:a5:97:ac:70:89:33:fb:62:85:4c:
3f:35:4b:ff:bd:a0:89:68:7e:f0:a4:fe:5c:0d:a8:
73:d5:c2:af:d6:c7:50:96:cf:a3:ba:51:75:31:52:
46:04:95:da:62:98:76:b3:c3:2e:db:29:52:e2:a5:
1a:a2:8b:1e:ab:7c:bf:e2:a1:08:32:17:f4:d3:14:
67:cb:a2:5e:f9:9d:25:1f:06:2a:75:18:d1:44:86:
6a:d4:b9:a9:d1:f7:f3:8e:8e:5e:3c:2f:18:88:49:
c6:ab:49:27:28:1b:51:0e:9b:95:5c:8b:75:00:0a:
d2:e1:29:c8:cc:13:57:76:7d:96:71:57:5a:70:7f:
36:55:e6:78:fa:76:bb:db:3d:ee:93:57:b4:8b:d1:
f8:9a:af:46:a0:02:76:7d:1a:c4:0e:fa:66:f9:6b:
eb:0c:47:74:71:ab:e9:cc:fa:d5:a8:2b:c2:d5:36:
70:d2:a9:49:1a:9e:29:c9:d7:cf:dd:af:33:0d:bf:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E6:CD:36:3F:B8:BC:F2:0D:F7:89:D0:DC:A0:2F:19:E9:1E:77:88
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/TebNNj-4vPIN94nQ3KAvGeked4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2682:a000::/36
Signature Algorithm: sha256WithRSAEncryption
0c:80:b4:ae:c5:c0:bd:55:db:33:74:b4:c0:93:8f:5e:4e:d3:
80:15:78:d2:01:16:9b:19:55:01:85:f3:cc:6d:f4:3f:9a:82:
0c:d5:eb:d8:63:ed:29:eb:bd:c6:b4:3b:ae:c7:7c:8b:05:5e:
4e:a9:51:92:c8:2d:70:b5:88:c3:d1:7c:a9:12:d5:d3:aa:3e:
0c:0c:ba:67:a8:d2:0c:20:1b:47:d9:56:d9:5d:83:b7:3f:18:
2c:1b:b9:c3:3d:9d:a8:18:21:47:9a:eb:aa:af:d8:95:3f:2b:
3e:39:dc:e0:28:b2:1e:00:3f:15:36:5c:29:c4:8c:f5:03:e0:
16:2c:ad:7b:ae:6c:a0:04:07:0c:20:08:c0:1c:99:96:3b:3c:
58:83:d7:16:37:8d:68:04:24:e8:81:66:27:22:e2:30:0d:6b:
7e:01:c3:ef:e0:1a:6e:ff:79:ee:c0:f5:26:3a:83:49:f1:26:
29:be:05:56:24:ce:19:59:ba:e7:bc:99:5a:8b:2b:4f:95:11:
6c:d1:91:34:2f:ca:76:24:86:80:ed:df:4f:48:d9:80:96:7f:
10:b7:cd:b5:48:02:f9:3f:0f:4b:05:b9:9b:47:e8:ff:55:9f:
b1:01:4b:98:bf:f2:51:de:ef:0e:18:73:4f:d7:7b:7b:fe:be:
ba:f2:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:19:01 2024 by rpki-client on console-fra.rpki-client.org