Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/viDWoZNOUlQvgMQjfLRyk6Tc36s.roa
File: viDWoZNOUlQvgMQjfLRyk6Tc36s.roa (raw, json)
Hash identifier: lvIlPzhSvFUl0ov7ONqmD9eBULrKJ6Zb1mpfrVIwdRo=
Subject key identifier: BE:20:D6:A1:93:4E:52:54:2F:80:C4:23:7C:B4:72:93:A4:DC:DF:AB
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0192B9A1BBB7E5B00B015AC3E83B989FA112
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/viDWoZNOUlQvgMQjfLRyk6Tc36s.roa
Signing time: Wed 23 Oct 2024 13:47:17 +0000
ROA not before: Wed 23 Oct 2024 13:47:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4bc7::/32 maxlen: 32
2a0e:5901::/32 maxlen: 32
2a0e:8080::/32 maxlen: 32
2a0e:8082::/32 maxlen: 32
2a0e:ccc5::/32 maxlen: 32
2a0f:c087::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 25 Oct 2024 10:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:a1:bb:b7:e5:b0:0b:01:5a:c3:e8:3b:98:9f:a1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 23 13:47:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be20d6a1934e52542f80c4237cb47293a4dcdfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:20:c9:e3:3f:28:cc:3a:06:e2:b4:8d:c8:
43:a3:a4:4a:c0:2f:8b:21:7a:57:0d:2a:0f:7f:55:
bd:36:f4:03:1a:d4:9c:84:2e:46:e7:a2:7d:5d:c5:
a1:6e:45:ca:15:de:7b:28:ad:23:b4:84:b0:5c:31:
84:62:8e:8a:9d:94:32:fa:84:1c:e9:4f:c2:3a:27:
3e:c9:83:56:a8:56:c8:ec:5a:59:22:ab:fa:40:4c:
64:e5:3a:5b:f4:3d:42:6f:16:ae:cf:a4:bc:ae:e8:
98:65:fa:17:90:73:50:99:50:62:11:64:2b:29:73:
ce:66:f7:0c:a8:87:53:1f:07:48:94:ca:2c:99:e5:
f4:c7:de:42:42:7d:32:f4:a3:89:5a:59:b4:03:5a:
be:c9:4d:39:a7:fe:b9:db:67:55:fa:e6:7e:5b:5e:
0f:57:b7:ab:c2:bd:f0:ad:71:a0:2c:1c:d7:5f:3e:
a4:12:dd:d9:dc:09:38:2b:16:ba:93:e6:2e:ba:31:
d5:10:c4:a4:fc:12:cf:07:4e:df:d6:51:f6:8f:b9:
b5:9e:ce:39:3d:a7:d5:06:04:f1:99:64:c1:dc:b0:
7e:fc:06:37:00:1c:e0:8a:42:15:5a:30:67:5d:15:
3c:35:ca:c1:39:b7:38:12:b6:f7:41:22:57:d1:ba:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:20:D6:A1:93:4E:52:54:2F:80:C4:23:7C:B4:72:93:A4:DC:DF:AB
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/viDWoZNOUlQvgMQjfLRyk6Tc36s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4bc7::/32
2a0e:5901::/32
2a0e:8080::/32
2a0e:8082::/32
2a0e:ccc5::/32
2a0f:c087::/32
Signature Algorithm: sha256WithRSAEncryption
52:c6:f8:68:17:96:54:28:35:77:b9:9b:8d:fa:b5:a1:fa:60:
e4:c7:61:8b:53:6d:1c:3b:c5:59:e3:61:a1:d0:f8:3c:80:43:
56:bb:d9:d0:c6:af:aa:54:ff:ee:8f:be:b9:c1:53:66:d2:e4:
d9:6d:a7:c9:d3:a7:ca:be:d7:69:a6:ae:b4:47:b2:aa:cd:5a:
7c:13:b0:06:24:ba:18:56:bb:e8:ff:12:2c:23:78:00:09:77:
25:9c:62:1e:39:d8:13:29:7e:30:31:b4:a2:f1:a4:e4:74:f6:
96:61:6f:a5:49:87:c3:88:58:b1:7a:ec:a4:e2:92:b0:da:a9:
e2:80:2b:f6:8b:08:bd:6a:64:ee:a7:90:9a:9e:97:51:8b:af:
91:7a:15:66:05:94:e3:15:3b:d8:e7:0c:0d:38:7d:0e:9d:6f:
3b:28:b4:c9:41:d6:c7:41:5e:fa:0b:f6:72:f9:c5:15:48:f0:
82:7d:e8:52:df:b7:46:07:15:ff:77:45:3d:7d:79:df:ef:9e:
76:c9:14:83:57:77:ac:18:43:3a:a6:0c:8e:8f:4e:2e:fa:7c:
1a:bf:22:47:d1:e6:1f:f7:cd:3e:db:b1:f8:a9:c0:25:b4:71:
e1:d2:77:94:20:3a:2c:70:ab:eb:99:f8:c2:3c:ad:60:05:f2:
f8:22:3d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 15:00:20 2024 by rpki-client on console-ams.rpki-client.org