Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/ruq8bkESNkMgEJlMdxU0OnQ6GyU.roa
File: ruq8bkESNkMgEJlMdxU0OnQ6GyU.roa (raw, json)
Hash identifier: MfyzyyWpce1eY+2jZg4/Pjt46BNBAo5pTJ4DqSxwxeY=
Subject key identifier: AE:EA:BC:6E:41:12:36:43:20:10:99:4C:77:15:34:3A:74:3A:1B:25
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 018572B4279E7B360A0E71B7C0576F493155
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/ruq8bkESNkMgEJlMdxU0OnQ6GyU.roa
Signing time: Mon 02 Jan 2023 13:38:07 +0000
ROA not before: Mon 02 Jan 2023 13:38:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203764
IP address blocks: 2a06:ee80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 20 Dec 2023 18:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:27:9e:7b:36:0a:0e:71:b7:c0:57:6f:49:31:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jan 2 13:38:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeeabc6e411236432010994c7715343a743a1b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:ed:c3:2a:78:04:1f:52:f0:e9:09:7b:0a:
39:e2:ea:f0:5c:23:95:5f:4d:ae:39:e1:73:02:03:
e4:17:85:4a:7e:fc:35:cf:8e:16:55:f0:1b:01:00:
43:8f:87:c5:13:0b:5c:fd:03:86:11:fd:10:9d:c7:
aa:1b:73:28:48:e1:ca:10:e9:26:2f:20:7b:81:81:
bb:30:2e:f9:a4:b4:82:ae:64:ae:38:87:ad:9b:d5:
51:b7:07:4b:cd:3c:8f:24:67:dc:48:d5:4e:41:67:
90:95:09:19:7f:a5:5e:9f:58:f1:ae:c5:65:9c:17:
ac:0c:17:aa:45:11:c2:53:ea:1e:9b:d9:56:ba:fa:
d1:48:1d:da:ae:e3:e2:7c:17:c7:1e:be:6a:63:04:
2a:ac:c3:02:24:e2:9c:b3:cc:6f:fa:3a:83:28:3b:
d2:aa:23:eb:14:2f:27:7e:61:49:13:c4:c0:71:61:
3e:d1:2e:24:1c:21:8e:96:de:fd:cc:2c:de:5f:33:
8a:b7:c8:d8:3f:96:25:4d:03:d4:6b:43:39:2f:f1:
40:37:9f:7e:5a:1f:25:aa:0d:de:48:95:2f:23:5b:
23:40:24:f7:0f:44:9e:30:fe:5f:d9:ed:0a:54:da:
d9:63:7b:0b:0a:2a:44:69:4f:aa:fa:64:da:45:76:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EA:BC:6E:41:12:36:43:20:10:99:4C:77:15:34:3A:74:3A:1B:25
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/ruq8bkESNkMgEJlMdxU0OnQ6GyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
76:2c:7e:e4:e1:35:8b:a0:32:7e:ed:4b:d2:03:b7:50:a8:5b:
e3:3d:9b:44:e7:ad:86:b5:b8:63:69:1d:81:9b:86:c2:58:10:
a8:15:94:8f:0a:b3:80:d1:18:32:35:b4:95:78:3d:ff:02:5f:
e4:ad:7c:e0:ff:84:c1:ef:b1:c9:2c:7b:5b:04:fe:1d:bc:63:
e8:5d:64:b5:50:6c:45:65:65:82:35:07:04:6d:21:9f:9d:4d:
03:b5:03:bd:e0:6d:29:47:d8:1b:ed:83:26:8f:cd:a9:cb:d8:
bd:a9:73:d7:dd:bf:43:2d:3b:7a:f9:e9:a9:fe:21:d0:a1:2a:
29:2d:c8:a5:5f:35:24:87:c9:64:cd:69:c0:16:8b:15:59:b1:
74:d2:2b:30:a9:15:2b:65:2a:c4:cd:2a:61:3f:68:b4:bd:7c:
c5:30:fe:47:90:a2:de:e0:33:81:20:1b:ce:d4:6d:68:78:6a:
12:b6:fd:a2:6e:70:fb:de:bc:b2:71:91:6b:7d:b3:9a:de:dd:
1c:1d:b7:7d:bb:a9:d5:1b:d9:f1:9e:b0:ad:37:b1:a7:80:fe:
3d:4c:b6:0d:fa:c3:8e:93:7f:9a:2d:6c:dc:d4:fc:c0:a3:ce:
ff:ce:59:88:60:cf:c7:b5:e0:b7:73:36:ca:db:34:32:e9:6c:
c9:4e:0a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:27 2024 by rpki-client on console-ams.rpki-client.org