Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/8LpuiELoNGOoRNLBYRSoR07MIAM.roa
File: 8LpuiELoNGOoRNLBYRSoR07MIAM.roa (raw, json)
Hash identifier: tGQ2tyOpeoCF0KT6z8LhGX2yc7lY7V6JSaObsVIjEjo=
Subject key identifier: F0:BA:6E:88:42:E8:34:63:A8:44:D2:C1:61:14:A8:47:4E:CC:20:03
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01899811BE65571B92CC1F1CFFE248D903D3
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/8LpuiELoNGOoRNLBYRSoR07MIAM.roa
Signing time: Thu 27 Jul 2023 15:57:26 +0000
ROA not before: Thu 27 Jul 2023 15:57:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197626
IP address blocks: 2a0e:aa07:e0f0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:11:be:65:57:1b:92:cc:1f:1c:ff:e2:48:d9:03:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jul 27 15:57:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0ba6e8842e83463a844d2c16114a8474ecc2003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:cc:50:d1:ff:24:1f:fe:7c:6f:0c:be:08:
cd:cd:89:1b:b0:86:f2:15:0d:5e:ab:aa:74:6d:c9:
d5:c5:f7:96:f0:56:91:44:7e:f0:b3:da:c2:a2:c0:
fd:93:5d:da:cf:aa:54:dd:93:35:ed:3c:45:25:f3:
ed:4e:1e:b3:ba:43:af:80:6d:52:e0:f0:c4:48:6a:
c8:c5:8d:94:7c:a7:49:44:62:b0:dc:69:d5:a3:d2:
46:85:df:9d:30:75:78:36:3f:1a:c6:43:47:8f:3f:
23:55:f6:1d:6e:0f:d4:53:36:23:60:cd:ed:06:9d:
68:9a:e2:42:48:ce:c4:b2:4e:bc:c8:73:d1:b0:d0:
5e:17:32:b8:11:38:98:79:45:da:b0:ed:3d:56:8e:
9f:c2:9d:02:af:a3:38:58:36:0d:cf:ac:d4:78:b1:
3c:52:7d:66:4f:bf:c3:0e:50:7b:8f:9c:f5:e6:a8:
a7:ad:c9:d7:61:b7:6d:d6:dc:65:d8:c3:c2:8d:92:
76:56:ea:dc:88:a6:e6:50:83:a8:b0:3e:68:26:07:
3b:06:01:7f:d5:ea:27:36:5a:ce:64:8e:36:cc:b3:
2b:e0:73:6d:c1:d6:ca:f9:94:dc:14:aa:64:4d:d1:
cb:da:de:7f:07:83:3d:d5:d0:ee:98:1c:ac:14:78:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BA:6E:88:42:E8:34:63:A8:44:D2:C1:61:14:A8:47:4E:CC:20:03
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/8LpuiELoNGOoRNLBYRSoR07MIAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e0f0::/44
Signature Algorithm: sha256WithRSAEncryption
77:23:40:92:a5:c4:2e:4f:42:f0:2c:34:79:ce:b9:f6:45:f9:
bd:17:d5:f2:3f:bf:ce:a8:1b:1d:53:35:fd:ea:74:a4:3c:91:
d7:f2:81:44:e4:4f:c3:48:e4:fc:5a:1b:bc:44:3a:a5:16:b0:
0c:fa:8c:02:fd:56:ab:f6:66:7f:3a:87:d3:6d:80:0c:83:e2:
86:33:08:5e:fe:b7:42:33:db:4b:52:2d:09:15:a3:a4:ea:ce:
b0:06:1e:32:fb:e6:19:90:1f:09:e0:a0:87:47:fb:e1:87:5f:
3b:f6:bf:7a:01:f1:6f:bf:9a:c5:c9:9a:13:d0:76:dd:e3:a1:
51:eb:69:fd:7d:e5:95:4d:41:d4:b7:1c:d7:44:93:25:cc:40:
04:17:b3:b8:14:4c:16:b4:43:49:06:79:bb:39:47:1f:52:14:
b6:1d:09:b1:f9:77:2c:93:9c:8c:ab:28:51:cb:15:af:87:a7:
5d:69:24:5f:32:e9:25:02:3a:a0:af:80:cd:e6:eb:fa:ce:00:
63:35:a0:80:b1:d4:0e:7a:eb:55:0a:a2:c7:f8:a6:0f:e2:e0:
b7:71:3f:c9:d1:cd:cc:99:13:55:d0:5a:30:b1:14:c3:01:2b:
65:33:99:da:9e:f3:ad:78:02:0b:66:74:30:09:19:f6:1b:8e:
00:89:36:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org