Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/tpAQ5Tb4KHkHrAmrM5yOaVIaX_U.roa
File: tpAQ5Tb4KHkHrAmrM5yOaVIaX_U.roa (raw, json)
Hash identifier: +1uyKKbb3QFL7+Tu3tgBWRx/Df21H1nJJrPdm6CMI0c=
Subject key identifier: B6:90:10:E5:36:F8:28:79:07:AC:09:AB:33:9C:8E:69:52:1A:5F:F5
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 018E86BF420B38614CE2AA65321A6EEFB9EC
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/tpAQ5Tb4KHkHrAmrM5yOaVIaX_U.roa
Signing time: Thu 28 Mar 2024 20:27:44 +0000
ROA not before: Thu 28 Mar 2024 20:27:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 2a09:9f40::/30 maxlen: 30
2a09:9f44::/30 maxlen: 30
Validation: Failed, certificate revoked on Sat 13 Apr 2024 16:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:bf:42:0b:38:61:4c:e2:aa:65:32:1a:6e:ef:b9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Mar 28 20:27:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b69010e536f8287907ac09ab339c8e69521a5ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d2:50:2d:cc:ff:bf:7c:7f:f4:02:6b:b8:2b:
9e:09:97:61:57:2e:bc:21:37:df:19:10:81:5f:62:
c3:75:57:4f:f6:45:5d:ad:a7:96:4a:8c:78:02:a3:
07:fa:4c:d3:f8:5c:83:20:b9:bc:a6:4a:70:84:6a:
8a:12:cb:7f:b7:f0:5d:9d:13:2b:08:64:49:35:0b:
a7:b6:2a:d3:e5:bc:ed:de:69:37:13:07:ba:5e:f2:
d6:6a:28:8e:ce:d8:74:69:a3:d8:5c:25:11:b4:28:
ac:ab:27:e1:f3:c6:88:14:3e:14:64:cb:9f:a6:a9:
ab:66:65:e7:b6:e2:13:34:05:90:b2:08:97:39:98:
23:a5:c9:d6:da:aa:5b:5f:9e:3e:59:52:bd:ed:44:
fb:56:02:b7:19:d1:d8:fc:be:10:d4:37:f0:34:fb:
d3:3c:c5:c0:96:50:2d:5c:1d:08:af:bf:b7:1e:7e:
93:de:6b:0e:ef:46:76:43:32:e8:0d:37:6f:22:f8:
94:29:a9:98:50:c1:bf:b4:7e:8b:fc:79:92:c5:b3:
2d:9e:f9:df:e3:5e:20:a6:0d:bf:04:2f:97:fe:f4:
45:52:dd:fa:61:2b:5b:59:e4:65:0b:aa:23:fd:1b:
1b:8d:5b:34:b7:34:8a:9f:34:85:17:49:72:e1:77:
cd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:10:E5:36:F8:28:79:07:AC:09:AB:33:9C:8E:69:52:1A:5F:F5
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/tpAQ5Tb4KHkHrAmrM5yOaVIaX_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9f40::/29
Signature Algorithm: sha256WithRSAEncryption
4d:ce:ae:f4:36:28:bc:f0:5b:05:24:0a:74:79:8e:d3:80:4c:
ba:61:da:98:ea:f3:f2:84:f6:b5:20:51:36:3e:64:87:ca:6e:
81:9c:57:22:7f:ad:27:41:68:32:f1:8d:8c:c5:b8:56:14:6d:
9d:d0:c2:2e:a1:5e:32:99:dc:fd:36:5e:19:14:04:94:48:78:
3c:be:7b:bd:8d:99:79:6d:00:03:08:0d:12:1a:c9:b7:73:b7:
8d:a5:95:16:81:e4:88:e6:84:ea:06:94:fc:f8:94:c4:7d:29:
22:03:be:b2:b4:5a:5c:46:fc:9e:c4:cc:a5:95:9c:67:74:bf:
e3:9e:7a:83:f9:af:84:a0:2b:3a:5a:bf:a3:7d:8e:02:20:9f:
05:41:7b:ca:0b:07:07:17:b1:f4:a7:c0:c4:63:dc:cb:a9:40:
17:de:02:4f:92:96:78:85:2d:f4:06:b8:5b:6b:ed:24:94:b6:
af:bc:8c:89:e2:f5:cd:bc:56:2e:e9:02:31:98:b5:4f:31:20:
95:cf:72:68:cf:31:ab:72:a0:d3:8f:73:6f:d1:c6:67:e4:ff:
11:6b:81:5e:b9:26:af:fa:33:0c:a7:7c:0c:e5:ce:12:53:ed:
0f:51:f0:a4:1e:6f:35:4a:6c:12:07:d7:e1:aa:8c:21:14:af:
40:0a:43:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 18:03:16 2024 by rpki-client on console-ams.rpki-client.org