Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/IukkHqPWCQ2RYN87r9u0B9MMN0A.roa
File: IukkHqPWCQ2RYN87r9u0B9MMN0A.roa (raw, json)
Hash identifier: NUsdzrz8VTLErs3wiil/CLYDqfQBrctG2aYKkA78WfA=
Subject key identifier: 22:E9:24:1E:A3:D6:09:0D:91:60:DF:3B:AF:DB:B4:07:D3:0C:37:40
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0188FBB5C630DC58F4647A5E30501E8F9479
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/IukkHqPWCQ2RYN87r9u0B9MMN0A.roa
Signing time: Tue 27 Jun 2023 07:16:13 +0000
ROA not before: Tue 27 Jun 2023 07:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12608
IP address blocks: 2a06:d904::/30 maxlen: 30
2a04:c104::/30 maxlen: 30
2a0b:ab00::/30 maxlen: 30
2a04:c100::/30 maxlen: 30
2a0f:cf80::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 31 Jul 2023 11:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:b5:c6:30:dc:58:f4:64:7a:5e:30:50:1e:8f:94:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jun 27 07:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22e9241ea3d6090d9160df3bafdbb407d30c3740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:8e:c1:50:6c:16:fb:3c:51:5d:0c:69:1e:
8c:e0:80:56:6b:49:01:ee:55:88:79:55:2e:18:29:
77:25:25:07:43:28:72:7a:5b:85:4f:ec:71:f4:6f:
c4:1b:4f:6b:35:72:9f:9d:b2:49:0e:cf:f7:b7:72:
6e:37:53:b1:88:f6:c4:65:c7:5d:9e:92:11:ce:8d:
f2:fc:57:40:f4:4a:ba:c2:cf:ff:c4:48:59:e9:6a:
8e:3b:ea:96:aa:f1:cb:99:43:e0:52:4b:02:19:e4:
b9:0a:67:7a:a5:ef:19:7d:17:e9:b0:ab:b5:c6:cd:
c1:26:2a:b6:f2:07:f1:76:87:ce:48:ac:35:28:e7:
17:5e:48:a5:0e:93:d5:ab:09:68:38:d1:89:0d:ef:
e8:c8:ea:fa:ab:de:df:57:96:f6:24:2a:bf:64:8d:
bc:17:cd:f8:d3:46:57:83:54:8c:67:dc:d9:d9:77:
b7:23:94:88:31:2e:93:5c:b7:b9:1c:ec:63:3f:10:
e2:9e:14:7e:6d:3b:d4:32:2e:20:7b:0a:5c:0f:1a:
a4:ec:e7:13:49:30:dc:25:06:83:6b:53:2f:50:7e:
51:fc:a5:2b:5b:63:01:bc:84:1d:0f:65:20:a8:dd:
67:24:ef:af:53:72:41:c9:ec:e1:33:da:16:4c:ea:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E9:24:1E:A3:D6:09:0D:91:60:DF:3B:AF:DB:B4:07:D3:0C:37:40
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/IukkHqPWCQ2RYN87r9u0B9MMN0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:c100::/29
2a06:d904::/30
2a0b:ab00::/30
2a0f:cf80::/30
Signature Algorithm: sha256WithRSAEncryption
69:2f:1a:c2:0c:59:67:6a:a1:70:24:ed:88:38:9e:8c:93:71:
9e:27:3f:1b:70:a8:5c:6b:4e:c8:78:51:4d:e6:e9:d6:ac:d0:
2d:54:f9:67:0b:5c:bd:1e:47:d7:e6:7b:c8:8c:75:0f:d8:fd:
6d:69:6b:4a:d8:2f:23:dd:11:7b:49:8a:0c:b8:a7:88:46:84:
32:a1:ad:9d:71:13:f7:fd:4c:85:6c:a9:71:21:1c:19:34:43:
ac:f8:2f:b9:e8:08:93:ba:56:48:99:86:05:d4:40:50:8a:63:
a9:08:ba:d9:47:81:c1:ec:30:aa:88:3c:c4:9b:b8:23:39:48:
e6:12:6e:0c:3d:2c:08:b6:fb:3d:d7:17:03:b1:51:53:ce:a8:
1c:dd:9d:38:e3:d1:44:87:a4:d9:4b:89:08:37:a5:1e:2d:9e:
bf:ca:61:8d:24:29:c1:de:ac:d6:d4:68:d0:dc:f1:71:5b:c7:
0c:95:7e:d4:1d:ff:5a:e9:b7:92:07:a4:d8:67:74:58:8d:5d:
84:a4:7a:ec:a2:33:6f:c8:c4:38:02:37:c7:99:ef:e4:c2:48:
17:74:90:ea:64:2d:e2:7d:4f:85:76:fa:82:81:f5:23:84:39:
5f:3b:7b:6d:4c:0f:7a:e7:d7:56:b6:16:c6:0c:8c:f7:70:6e:
6b:7a:ee:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org