Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/IFCaIhQK1tyNRRasxtsMUKq03DA.roa
File: IFCaIhQK1tyNRRasxtsMUKq03DA.roa (raw, json)
Hash identifier: fl4Oj5IGm4Qs3ICsK6rfk/eprAkZnUzL8j2ho8kEQLY=
Subject key identifier: 20:50:9A:22:14:0A:D6:DC:8D:45:16:AC:C6:DB:0C:50:AA:B4:DC:30
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01926764BFC2FC8248D3C66BD0ACBA71AF89
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/IFCaIhQK1tyNRRasxtsMUKq03DA.roa
Signing time: Mon 07 Oct 2024 14:31:48 +0000
ROA not before: Mon 07 Oct 2024 14:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4bc7::/32 maxlen: 32
2a0e:5901::/32 maxlen: 32
2a0e:8080::/32 maxlen: 32
2a0e:ccc5::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 11 Oct 2024 20:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:67:64:bf:c2:fc:82:48:d3:c6:6b:d0:ac:ba:71:af:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 7 14:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20509a22140ad6dc8d4516acc6db0c50aab4dc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:ed:11:97:37:e3:8a:23:c9:71:6f:07:e1:
63:71:d3:e3:e8:41:28:05:63:f4:43:e2:32:39:02:
ec:65:b5:ee:d3:98:d9:a4:1c:a2:4f:1c:07:a2:93:
80:07:60:4c:15:99:f6:17:1d:d8:57:5b:0b:9a:5c:
09:cd:b4:8a:95:56:0d:89:76:6a:ee:01:1e:74:c9:
0e:98:b2:cf:e4:28:16:5c:0d:de:b8:f8:82:b8:77:
13:7f:73:08:2a:1b:ba:9b:08:34:92:56:3a:d4:23:
75:2b:b5:e5:78:f8:08:ef:ca:a6:eb:05:86:0b:00:
13:de:41:24:32:ac:7b:9e:34:ce:50:29:7c:90:89:
43:d9:40:ed:e9:9d:e7:c4:c6:70:2c:b0:e8:9e:42:
e3:28:14:ae:05:37:8a:0f:8f:b3:9f:f4:10:8b:b5:
ab:de:3d:1a:e9:e1:71:93:4c:64:9f:05:0b:12:3a:
08:26:90:66:16:12:bb:cd:f9:ed:49:02:f0:5e:20:
14:df:66:43:32:9e:60:f4:ed:fd:35:b3:54:5f:6e:
8d:e2:5c:e8:99:35:85:ef:16:ad:20:75:31:9c:fb:
7a:41:72:81:32:7c:91:f9:b1:46:53:81:2c:a1:c0:
80:07:9b:93:14:c0:d1:81:d6:9c:f1:f9:f6:30:e1:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:50:9A:22:14:0A:D6:DC:8D:45:16:AC:C6:DB:0C:50:AA:B4:DC:30
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/IFCaIhQK1tyNRRasxtsMUKq03DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4bc7::/32
2a0e:5901::/32
2a0e:8080::/32
2a0e:ccc5::/32
Signature Algorithm: sha256WithRSAEncryption
7c:17:45:bd:1c:19:7c:d4:47:8d:0c:8f:8b:69:57:e4:6f:92:
46:74:9e:da:54:ae:ae:75:72:e9:20:c2:6f:2c:cb:de:8d:97:
4e:4a:19:d6:d3:45:ed:e6:18:3f:16:03:dd:66:3b:da:b9:67:
1d:98:9b:4d:a7:54:9f:92:67:08:14:15:5d:51:fd:03:35:de:
fc:33:d0:66:dc:b5:d3:63:b1:5a:6d:a5:22:f0:32:bf:42:2e:
63:d6:c1:a8:32:a6:01:cb:c9:50:8f:28:dc:57:c4:81:f0:b3:
83:d2:f6:48:44:4e:9f:8f:c1:25:1b:b0:c8:a2:6e:99:ca:07:
08:2c:ba:6a:5e:e9:ad:a6:4d:5e:50:7d:2b:c3:5f:a8:46:14:
57:be:ad:e8:3b:5a:76:c8:11:84:61:77:03:29:ba:7f:81:c3:
0a:ec:91:7e:b3:3a:4e:60:99:31:ee:b3:86:72:b9:a2:e5:55:
43:68:f1:c8:56:76:8c:ef:68:6a:44:94:03:91:16:ba:70:ad:
44:db:1e:c4:6a:68:86:1f:47:e3:83:3e:50:a8:ed:6f:25:78:
09:19:f3:9b:41:fe:de:73:fc:e2:b1:80:75:bd:45:df:8a:18:
d8:b9:a7:99:da:c5:b8:a7:e5:eb:d3:66:48:31:57:cd:82:1f:
8b:6d:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 21:51:49 2024 by rpki-client on console-ams.rpki-client.org