Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/CFoqgUMy0ot9CBRbL6n9aJr_QXc.roa
File: CFoqgUMy0ot9CBRbL6n9aJr_QXc.roa (raw, json)
Hash identifier: fpB6giQ61Rp+bw1iZ1EXXAf5ESfpbq24C3uCcsnsUfI=
Subject key identifier: 08:5A:2A:81:43:32:D2:8B:7D:08:14:5B:2F:A9:FD:68:9A:FF:41:77
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018BBEE2D06B310FDC7E0A0B1E8944469B3F
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/CFoqgUMy0ot9CBRbL6n9aJr_QXc.roa
Signing time: Sat 11 Nov 2023 14:56:57 +0000
ROA not before: Sat 11 Nov 2023 14:56:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44812
IP address blocks: 2a0e:4bc5::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:e2:d0:6b:31:0f:dc:7e:0a:0b:1e:89:44:46:9b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Nov 11 14:56:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=085a2a814332d28b7d08145b2fa9fd689aff4177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:d8:2e:85:23:3d:06:82:f8:32:98:be:31:
fd:36:ee:31:24:81:d6:8d:a7:ac:1d:2b:a5:bc:64:
17:80:13:48:7e:0d:47:3c:25:82:fa:cc:8f:f7:35:
4f:a2:e2:2a:ec:c3:ad:b9:c8:34:0e:0f:60:a1:f6:
a5:a4:17:fd:ee:31:c8:cf:0a:fc:02:aa:b1:9d:7e:
bd:90:f2:20:17:c5:7d:fd:0f:04:3f:20:21:e3:b9:
3c:67:f1:ae:07:5f:34:13:c2:c2:0e:c1:8c:ef:e4:
80:3f:ae:8b:f9:34:d0:56:91:d8:ba:2e:f5:84:7d:
e3:56:ac:fe:ee:52:bc:72:8f:65:d1:0f:51:f2:7b:
5f:ed:bf:3f:87:c8:75:fb:ed:a8:6a:6f:15:fe:ad:
6a:c9:80:05:49:5c:85:09:b8:5a:c7:0c:9c:07:2c:
4f:c7:ec:4b:80:9b:38:72:ef:f5:30:a0:a7:cf:28:
72:c0:89:74:2e:d3:42:ac:f4:c2:e2:25:ce:3c:5b:
ae:85:06:0c:3f:e4:48:b4:60:f0:dd:55:63:75:d9:
04:a3:a1:c4:f0:35:e5:56:ac:ee:e2:f9:69:0c:bc:
fa:32:ac:91:6e:3b:5f:85:5f:c0:b7:4c:f7:c9:47:
dc:c4:5c:bb:6f:bb:5b:2d:53:e1:83:b1:b5:b4:e1:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5A:2A:81:43:32:D2:8B:7D:08:14:5B:2F:A9:FD:68:9A:FF:41:77
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/CFoqgUMy0ot9CBRbL6n9aJr_QXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4bc5::/32
Signature Algorithm: sha256WithRSAEncryption
6a:6d:de:6f:18:08:29:ad:ce:8d:79:62:58:9b:bb:72:f3:8b:
c0:10:12:de:4e:71:da:5c:4d:5f:70:1b:a6:15:65:f2:00:09:
62:68:d7:c5:83:ed:6e:bd:f1:84:ba:5d:36:fa:a2:f8:57:1a:
21:15:63:29:d6:1b:7b:13:ce:c1:18:ff:c7:a3:88:2a:b4:c6:
8e:de:66:d0:3d:c1:f8:84:21:d5:9e:13:ac:22:b0:11:5d:d7:
9d:6f:36:36:04:97:fe:65:50:55:df:36:e4:14:52:f9:d6:60:
47:f1:32:d8:79:af:78:5d:78:c2:10:a9:b5:b3:96:c5:1f:33:
f4:65:ed:86:23:5b:02:c8:71:8d:3f:03:20:41:99:52:80:e3:
0e:7e:ef:0a:5f:ff:72:fc:ec:52:3f:09:2e:07:8c:e7:2b:fe:
8a:4f:62:9f:a4:df:69:67:3f:51:f8:f4:2e:9b:95:8a:1b:3c:
f0:e9:ce:82:5a:0c:ef:b5:c0:57:0a:bf:62:b2:f1:3e:7a:e1:
94:47:75:c1:70:b0:e8:f2:3b:5e:d5:3e:31:95:8e:3c:96:fe:
a6:ff:b6:ac:fa:a3:7c:ff:de:f3:3e:b8:f6:5f:ec:fc:eb:bd:
31:f6:33:c6:9d:13:c0:e4:96:d5:97:33:af:d2:53:13:78:c5:
25:53:1b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org