Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/tQCc2Jw5GyS1WOhw_8PeP-bB6NM.roa
File: tQCc2Jw5GyS1WOhw_8PeP-bB6NM.roa (raw, json)
Hash identifier: wcBfd59jrs1oK0D0kPaOab2XxNugz/S0Ld30t3gaEmI=
Subject key identifier: B5:00:9C:D8:9C:39:1B:24:B5:58:E8:70:FF:C3:DE:3F:E6:C1:E8:D3
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 018A17E39498DC6759F0A590B3C06D0CA784
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/tQCc2Jw5GyS1WOhw_8PeP-bB6NM.roa
Signing time: Mon 21 Aug 2023 11:38:25 +0000
ROA not before: Mon 21 Aug 2023 11:38:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49419
IP address blocks: 2a0b:fd80::/32 maxlen: 48
2a0b:fd81::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Aug 2023 06:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:e3:94:98:dc:67:59:f0:a5:90:b3:c0:6d:0c:a7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Aug 21 11:38:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5009cd89c391b24b558e870ffc3de3fe6c1e8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:84:e9:2a:d4:45:12:8b:1f:0c:b2:55:31:
3c:d0:35:1e:99:d1:b7:5c:ef:2a:9a:51:f8:4d:d5:
01:36:3a:e1:84:f9:a4:04:ba:cd:08:10:cd:9d:b2:
97:dd:c6:64:c3:19:3a:63:d9:c4:bc:ef:2f:e1:d1:
5c:90:85:5d:0a:9d:a3:f0:ae:44:8e:6f:3c:db:c3:
42:9a:68:25:14:70:8a:56:3b:2d:8b:77:7e:e4:62:
12:9b:fd:10:88:d2:da:b9:60:16:e7:d7:30:d5:6b:
a9:db:68:58:58:d2:f9:48:37:8c:d8:d4:d7:ff:91:
4c:be:f6:3b:d6:72:ce:b7:7a:65:46:0f:7b:60:db:
37:21:35:b7:c9:78:0e:8b:9d:27:fd:92:29:74:60:
c3:a2:e6:72:fc:63:85:f1:c4:76:07:a3:6a:63:bb:
b4:0e:50:d0:e9:88:8b:94:83:1e:2f:b1:4e:fe:42:
b5:d1:9c:98:d8:16:86:3e:fc:f0:4e:1f:16:ea:4a:
97:c3:7b:59:01:96:7e:82:5e:bc:74:3e:5f:da:73:
87:8e:4c:37:26:38:55:31:a4:4e:40:18:d2:a0:bb:
3c:31:d1:f9:53:97:5a:03:be:77:62:24:b1:92:ae:
32:62:0c:3b:db:07:0e:92:37:d7:00:0a:86:61:40:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:00:9C:D8:9C:39:1B:24:B5:58:E8:70:FF:C3:DE:3F:E6:C1:E8:D3
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/tQCc2Jw5GyS1WOhw_8PeP-bB6NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:fd80::/31
Signature Algorithm: sha256WithRSAEncryption
8d:37:d6:b3:32:6d:e8:d2:79:ff:01:b4:e5:3a:1f:00:d5:03:
55:e9:54:af:7a:7c:70:55:ce:d4:30:52:3c:7f:f2:56:d8:d1:
69:8b:5b:20:00:0a:3a:cc:93:e1:e4:95:5a:63:8d:4a:1b:73:
42:99:8b:2b:36:b5:dc:5c:60:84:c9:f4:69:48:20:bb:b3:07:
87:73:17:a8:66:a0:1d:ac:a5:5d:67:fe:fd:7c:4e:76:21:66:
0a:75:17:41:85:ba:9f:2f:31:d5:c5:43:75:d2:10:74:1e:c0:
08:b4:ed:1d:54:b6:30:97:40:29:f8:01:36:ab:fe:34:d2:e8:
76:a0:5e:c3:66:08:9d:d0:8e:6b:e1:a2:74:14:38:71:e1:91:
c1:9b:a6:ba:fb:4b:b9:78:22:85:58:65:5e:1b:33:43:61:a7:
dc:44:36:fe:9e:2c:3a:a1:36:87:80:e2:89:21:9f:75:a0:23:
78:68:28:9f:10:ff:ee:c1:a7:a8:1e:ef:4c:ac:6f:b9:3c:05:
88:c7:86:90:15:c5:5a:79:9e:9b:49:e2:bb:3e:f3:25:40:bc:
a1:07:4e:0d:2a:98:06:60:2b:b6:6e:64:e4:fe:15:cc:7e:1f:
c4:54:09:5e:d6:fe:56:4b:55:ea:a2:a8:80:3b:05:19:eb:4c:
1e:ac:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:54 2024 by rpki-client on console-ams.rpki-client.org