Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/OFFHFEUaM9U_eiArx2GIrla9F0A.roa
File: OFFHFEUaM9U_eiArx2GIrla9F0A.roa (raw, json)
Hash identifier: 2CufcjLve6b5Zl94xwcFGVwEWpUbbmDebJ6Fp9h1D20=
Subject key identifier: 38:51:47:14:45:1A:33:D5:3F:7A:20:2B:C7:61:88:AE:56:BD:17:40
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 018CC6B788AE3D81D0B1C9B433AB6D2672D8
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/OFFHFEUaM9U_eiArx2GIrla9F0A.roa
Signing time: Mon 01 Jan 2024 20:29:26 +0000
ROA not before: Mon 01 Jan 2024 20:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61361
IP address blocks: 2a0e:3780:c0ca::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 04 Nov 2024 12:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:88:ae:3d:81:d0:b1:c9:b4:33:ab:6d:26:72:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38514714451a33d53f7a202bc76188ae56bd1740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:3c:45:d7:39:85:43:5e:82:eb:c0:c6:cc:
2b:48:c8:73:62:6e:69:af:c0:46:c5:ae:08:12:d9:
3c:fc:01:2c:dc:37:f1:a2:0f:46:a4:d7:57:29:e8:
61:73:41:0e:b0:c6:16:bc:0e:04:6c:41:0b:fc:38:
89:c4:37:41:83:73:33:23:ee:90:10:50:34:32:1b:
cc:75:85:93:f3:8e:9c:50:50:d4:ca:97:95:1d:97:
14:05:7e:70:07:be:eb:ae:bc:7a:dd:62:67:94:8c:
97:bd:0c:ce:0b:3e:0e:99:4f:9a:91:10:dc:26:91:
44:f8:70:c7:7d:0d:22:1f:82:4b:b2:fd:05:62:02:
f3:58:f4:13:43:a3:19:34:ba:53:e7:69:15:76:aa:
a9:2d:0b:08:47:03:71:89:fe:19:db:3c:5e:0a:45:
4b:f4:76:48:5e:c4:57:88:47:26:8a:e4:21:62:79:
06:57:55:94:21:23:25:17:9b:43:40:35:f2:bf:33:
ee:be:27:47:ff:31:1c:73:82:a2:a6:4d:b9:03:ae:
6e:d2:de:e7:02:06:47:8b:74:75:26:53:99:76:22:
da:1a:6b:9d:f4:53:e7:61:fa:7c:be:1d:db:51:c9:
3d:f6:88:c7:c1:9a:52:1b:f0:09:b8:ab:59:2c:df:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:51:47:14:45:1A:33:D5:3F:7A:20:2B:C7:61:88:AE:56:BD:17:40
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/OFFHFEUaM9U_eiArx2GIrla9F0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3780:c0ca::/48
Signature Algorithm: sha256WithRSAEncryption
2c:85:7d:cb:cd:ce:67:ee:57:10:cb:3f:d6:db:89:05:ab:cf:
28:32:1a:d0:b2:30:73:a5:1c:3d:45:a6:e9:dd:79:cc:dc:bd:
4e:0c:3d:ed:fb:6f:48:b7:e8:81:30:78:a0:9c:36:ce:07:4c:
55:db:d2:93:b8:93:a8:ad:87:e7:1c:b3:3f:45:1c:c3:95:93:
9e:90:a1:fa:3d:6e:4c:87:92:15:e4:3c:ee:be:8e:c7:97:7e:
8a:e1:ed:3d:3c:c8:9b:45:4a:20:0c:be:77:57:22:dd:9b:cc:
63:88:1a:5d:ac:0e:4e:51:ec:97:6a:f3:72:56:f0:0a:c3:ed:
53:98:24:e9:46:a5:11:04:88:e2:29:dd:47:74:b9:57:9c:25:
1c:3d:67:5d:64:2e:ee:cc:df:2e:97:7f:f7:19:4c:66:bb:1a:
9f:df:b2:cd:a3:1b:c3:c2:e3:07:fc:1e:21:6c:5f:e7:65:1e:
9f:99:47:ae:69:83:eb:ed:d5:27:61:32:6f:3c:03:fd:4e:06:
51:05:ad:10:72:d5:4a:74:d0:b1:b7:8d:9c:ce:9c:64:64:3f:
f9:0d:70:b0:77:cf:0b:9f:4a:7a:51:9f:a9:26:e3:79:89:18:
28:19:b9:34:4b:a7:d5:f3:20:45:2a:2e:90:d3:26:33:0e:a3:
b2:b2:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 17:34:01 2024 by rpki-client on console-ams.rpki-client.org