Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tEwBepCmBsQQ59qOjIMJXVmwrRc.roa
File: tEwBepCmBsQQ59qOjIMJXVmwrRc.roa (raw, json)
Hash identifier: pPMQzyvSBds6QBeyErb2dv/KB7fU75jottT1yj8PtX4=
Subject key identifier: B4:4C:01:7A:90:A6:06:C4:10:E7:DA:8E:8C:83:09:5D:59:B0:AD:17
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018A4EAD2532EFF6462D6B421FED0B233D23
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tEwBepCmBsQQ59qOjIMJXVmwrRc.roa
Signing time: Fri 01 Sep 2023 02:58:04 +0000
ROA not before: Fri 01 Sep 2023 02:58:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216368
IP address blocks: 2a0e:aa07:e110::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4e:ad:25:32:ef:f6:46:2d:6b:42:1f:ed:0b:23:3d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Sep 1 02:58:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b44c017a90a606c410e7da8e8c83095d59b0ad17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:d0:65:c2:52:73:48:c0:ad:19:14:31:7b:
3a:eb:1e:45:8c:e8:74:32:35:ee:35:41:ee:16:d7:
43:44:7b:e8:67:e3:cb:48:fb:6b:34:e0:90:1c:67:
c9:38:37:52:c9:aa:13:54:37:5c:b6:68:f1:bb:db:
94:76:e4:4c:2e:1c:d2:10:60:26:fc:9b:ad:4d:8a:
0a:9d:84:80:0b:4e:20:a6:db:8c:12:66:42:ac:c6:
95:59:c0:16:2e:9b:e4:37:e2:27:89:80:18:71:bc:
17:1b:0b:60:44:4c:59:6c:06:0a:42:dc:f4:43:62:
d9:47:94:01:b4:b4:92:a1:3c:e6:cc:6e:9e:e7:dc:
7f:24:37:b4:d6:17:fe:c7:49:e4:4b:aa:29:dc:ce:
00:1e:d7:54:8d:f5:8b:1e:89:87:9c:b1:54:ca:eb:
9c:f1:57:6c:9c:c3:0b:0b:7c:77:f6:b9:b8:9c:5b:
d3:9f:88:1a:f2:35:0d:e5:ae:2c:04:50:ac:23:b8:
3c:87:c4:4e:48:75:79:70:1b:18:3b:c3:73:f4:cc:
46:b2:06:28:99:f6:b4:26:59:e3:6a:34:35:4e:1e:
63:2d:20:06:65:e5:f5:57:6e:61:96:36:a6:fe:d1:
0e:97:83:43:65:68:a7:5c:b6:5b:5f:2e:17:37:6a:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4C:01:7A:90:A6:06:C4:10:E7:DA:8E:8C:83:09:5D:59:B0:AD:17
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tEwBepCmBsQQ59qOjIMJXVmwrRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e110::/44
Signature Algorithm: sha256WithRSAEncryption
16:a0:47:e9:3f:50:71:43:a3:2c:59:56:fa:c7:ec:ae:91:85:
f7:ee:c3:10:8b:d7:5e:71:6b:cf:c4:c0:60:73:74:04:17:97:
89:01:50:7d:47:1a:ec:3b:88:e2:b8:22:9d:9f:97:5b:87:8c:
37:2f:62:f2:ef:1a:52:bd:ac:cb:5b:5a:bb:d3:c6:3b:38:f1:
96:92:15:24:90:a1:cc:3f:03:95:d8:d9:05:22:7c:5c:cf:5d:
86:83:1f:dd:5f:38:09:25:62:54:03:a9:02:2b:b5:7b:0b:55:
3d:3e:de:5d:9a:2f:b2:5b:e1:09:26:29:b3:72:c0:60:60:76:
e1:83:10:f2:4c:2d:c6:bd:db:ea:9c:70:72:27:fc:7b:3e:49:
bb:c1:d0:5a:d0:b9:5b:1e:ba:70:0d:06:cd:b2:ce:66:fc:71:
4a:ac:46:7e:5e:c7:31:48:1b:e9:0a:83:fe:b2:0f:30:fb:2c:
51:0b:b3:1f:fb:74:03:0a:fd:57:ef:2c:3f:30:55:b5:e5:cf:
f7:4c:29:3d:29:b5:15:de:d8:63:b0:e7:e5:17:cc:3c:b4:82:
f4:8e:55:ed:de:c2:8d:12:d9:58:d2:4d:80:bb:be:e9:ef:69:
f4:6e:2b:94:23:e8:93:9f:70:59:f3:fd:31:2d:27:04:7e:fa:
09:98:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org