Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/PTDpD50rPttdqN1c7odjPJP3TSc.roa
File: PTDpD50rPttdqN1c7odjPJP3TSc.roa (raw, json)
Hash identifier: 0jIso15gXtzGxvkMtLO0GRFZl02j2Lg93fxJJ/UXEsw=
Subject key identifier: 3D:30:E9:0F:9D:2B:3E:DB:5D:A8:DD:5C:EE:87:63:3C:93:F7:4D:27
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 01914B46D7C18359127614AEA1BE86DA15F1
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/PTDpD50rPttdqN1c7odjPJP3TSc.roa
Signing time: Tue 13 Aug 2024 10:26:59 +0000
ROA not before: Tue 13 Aug 2024 10:26:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213110
IP address blocks: 2a0f:b104::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Aug 2024 16:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:46:d7:c1:83:59:12:76:14:ae:a1:be:86:da:15:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Aug 13 10:26:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d30e90f9d2b3edb5da8dd5cee87633c93f74d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:fe:6f:8c:63:f2:44:af:2c:dd:e8:4b:9f:
bc:9b:03:66:06:cc:c3:38:7e:7c:5b:a0:db:c4:77:
5a:ec:05:92:2a:45:1d:2c:7b:52:44:af:e8:cd:88:
11:b1:4e:33:7e:48:e5:f9:8a:c4:14:84:23:e1:a4:
dd:2d:95:1b:35:56:b8:30:2b:ce:ee:c3:53:ee:ef:
02:47:25:67:01:1b:20:ce:c9:58:e9:fa:88:9f:ad:
32:48:72:03:03:d9:5c:71:61:3e:09:42:e9:2b:7e:
d3:83:9f:3b:5d:89:59:64:73:91:7d:02:33:81:a2:
01:14:55:1e:40:03:b8:51:6f:33:47:63:5b:5a:29:
9a:0f:e6:5c:3b:84:9f:b8:9a:f8:0e:48:75:48:63:
c3:cd:c2:53:ac:15:b2:d1:82:53:18:2b:40:92:61:
5b:01:fe:4a:02:c6:9d:b0:06:06:9e:3e:5a:85:ed:
3c:7d:49:52:4f:44:f9:ac:6b:dd:b6:1a:f1:ee:45:
3c:da:62:2b:1d:83:38:38:e2:b5:e9:3b:d6:da:b6:
39:04:8a:46:f1:16:0e:f9:da:6a:39:a2:67:b9:ab:
39:48:a6:45:c4:b3:c5:27:7f:39:9d:dc:fc:d8:b6:
04:45:d4:37:c2:13:d2:52:f7:24:b4:cf:94:9d:55:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:30:E9:0F:9D:2B:3E:DB:5D:A8:DD:5C:EE:87:63:3C:93:F7:4D:27
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/PTDpD50rPttdqN1c7odjPJP3TSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b104::/48
Signature Algorithm: sha256WithRSAEncryption
45:2e:2c:3c:1a:6b:a5:42:0f:f1:72:57:61:46:f3:72:0b:a2:
84:ea:d8:5d:cb:ca:4b:b0:b5:b2:32:03:dc:28:7b:10:d5:0a:
d6:f2:55:71:fc:48:2f:36:b5:4e:54:cc:d3:41:b9:cf:c7:91:
7d:94:f1:e9:51:9f:6a:39:66:07:b5:7e:d8:ee:a1:81:67:15:
28:05:af:c8:e1:52:f2:73:75:9c:dc:b1:59:40:93:61:7e:ed:
61:21:3b:78:ed:0e:b6:1e:bc:a4:c5:b0:e5:72:79:f4:69:7c:
17:4d:cc:62:76:71:f1:78:42:19:1a:56:99:91:eb:10:ff:7e:
82:64:19:32:cb:6e:ae:02:75:b6:1c:e9:de:6d:77:d4:1b:e5:
dc:b8:3f:38:0f:17:4a:ce:2d:b5:ea:ed:3b:80:34:73:66:99:
ea:5a:b9:13:04:e2:e7:41:1c:3e:0d:d2:b6:a5:4a:8e:51:b5:
3c:87:70:a3:66:2c:be:36:c8:30:92:ee:60:88:59:b7:b9:b5:
79:ac:74:85:1d:49:6d:15:af:8c:db:ab:7a:a4:37:dc:65:5a:
5f:a9:f3:52:cb:3d:22:f8:98:bd:61:76:bb:cb:47:1c:f2:82:
de:85:b6:40:a8:47:5a:99:c6:4c:16:bc:0c:6d:10:f9:03:d7:
77:71:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 19:03:39 2024 by rpki-client on console-ams.rpki-client.org