Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/_Jil6t83658E7KvJI1NlgWaKKBQ.roa
File: _Jil6t83658E7KvJI1NlgWaKKBQ.roa (raw, json)
Hash identifier: i0VzwwJNZSfibknrM1bMoMG6wDFIgLoouCSGncKgmJU=
Subject key identifier: FC:98:A5:EA:DF:37:EB:9F:04:EC:AB:C9:23:53:65:81:66:8A:28:14
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0192892A6FC4D22236809142C5CF1A139EAC
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/_Jil6t83658E7KvJI1NlgWaKKBQ.roa
Signing time: Mon 14 Oct 2024 03:55:12 +0000
ROA not before: Mon 14 Oct 2024 03:55:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4bc7::/32 maxlen: 32
2a0e:5901::/32 maxlen: 32
2a0e:8080::/32 maxlen: 32
2a0e:ccc5::/32 maxlen: 32
2a0f:c087::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 17 Oct 2024 19:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:2a:6f:c4:d2:22:36:80:91:42:c5:cf:1a:13:9e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 14 03:55:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc98a5eadf37eb9f04ecabc923536581668a2814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:3f:15:e0:ad:9d:4b:18:19:c4:e2:57:cc:
f6:a4:1c:c2:ba:de:63:d8:f8:fe:48:1c:e2:5a:07:
08:18:d3:2d:68:a8:39:db:5a:82:f0:a3:20:24:ad:
4d:67:01:86:1c:ce:18:6d:11:45:18:ed:a2:71:4b:
2f:3f:b9:97:45:a0:c7:13:29:a1:0d:c5:8f:18:ba:
55:9b:51:4b:6f:ca:ad:1d:5f:55:e4:0a:b5:01:a5:
75:91:b7:e6:83:c8:af:e7:e5:2a:dc:a7:54:ff:78:
43:82:c2:27:ad:ae:14:40:a2:9e:f2:e1:17:78:87:
41:f0:a6:11:e8:a3:17:f0:e7:e2:ad:a7:80:51:0e:
ba:0f:88:74:ba:a1:06:df:65:70:28:27:ec:ec:c4:
0e:05:bc:8f:cb:fd:bb:d6:b8:4b:cd:91:f1:6b:0f:
87:92:18:63:6c:09:00:2c:94:c4:d6:90:4e:fb:bf:
fd:cd:fe:48:84:2d:c2:e1:39:5e:98:42:1d:a4:c6:
45:f6:14:5e:13:e2:ff:7c:a5:fb:48:bf:15:2f:b1:
5e:96:d2:73:76:43:3a:64:e9:e5:64:3d:cb:b7:95:
15:76:32:3d:ff:18:73:9e:e6:ba:f1:77:ab:49:f3:
e3:76:bf:48:17:68:22:f8:3e:3d:12:fe:c6:8d:db:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:A5:EA:DF:37:EB:9F:04:EC:AB:C9:23:53:65:81:66:8A:28:14
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/_Jil6t83658E7KvJI1NlgWaKKBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4bc7::/32
2a0e:5901::/32
2a0e:8080::/32
2a0e:ccc5::/32
2a0f:c087::/32
Signature Algorithm: sha256WithRSAEncryption
74:33:9d:23:00:53:66:d9:dd:d1:fe:d3:f3:0a:24:7a:33:5c:
51:1f:88:e5:1e:33:36:6b:fa:aa:94:c8:47:11:e9:16:2a:f9:
0e:a0:22:d1:59:c5:85:6d:79:c8:ba:87:96:dd:49:2f:de:df:
fe:16:50:55:cc:3d:a0:72:de:0b:4f:71:c9:2b:f5:b2:99:d7:
c0:b1:91:91:de:fc:9e:ef:5c:72:8d:41:09:b6:c0:fc:4c:3f:
d7:e8:3b:cf:ac:94:72:a7:af:de:a8:e0:a6:00:84:65:fe:34:
2d:93:e9:de:81:2b:bf:5d:d6:52:5c:9f:58:41:11:0f:85:53:
0e:3a:49:90:67:0e:05:a7:63:86:a2:c1:66:80:89:b2:fb:36:
9b:35:cd:09:64:45:58:50:59:d1:d0:52:f4:4a:ca:65:e4:70:
43:fa:23:ca:58:38:08:f3:74:2a:8c:a7:2c:9b:24:40:78:13:
8f:db:d3:ac:ad:24:1a:7f:6f:17:51:42:a1:d9:ed:b9:8b:4d:
c1:0e:79:78:4a:f6:7f:07:eb:89:36:23:46:6f:d4:6f:eb:e6:
ca:31:6d:fa:32:de:97:d4:03:f2:46:83:94:0e:8e:9a:3e:d4:
c1:9b:ca:93:2f:e6:1e:5e:fa:e2:21:be:74:c4:ab:de:34:78:
5f:9c:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:10 2024 by rpki-client on console-fra.rpki-client.org