Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/KceODhw2Y3EV_Did6GtRa3tW078.roa
File: KceODhw2Y3EV_Did6GtRa3tW078.roa (raw, json)
Hash identifier: NgyGPNSMhmDvRRQfdoeSmcwt/HQO37b/jCgDrqqLrvI=
Subject key identifier: 29:C7:8E:0E:1C:36:63:71:15:FC:38:9D:E8:6B:51:6B:7B:56:D3:BF
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 0186EC73F2EB4648A657577F75A01E810E82
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/KceODhw2Y3EV_Did6GtRa3tW078.roa
Signing time: Thu 16 Mar 2023 22:04:27 +0000
ROA not before: Thu 16 Mar 2023 22:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64475
IP address blocks: 2a0f:3786:80::/41 maxlen: 48
2a0f:3786:20::/44 maxlen: 44
2a0f:3786:10::/44 maxlen: 44
2a0f:3786::/40 maxlen: 40
2a0f:3786:100::/48 maxlen: 48
2a0f:3785::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ec:73:f2:eb:46:48:a6:57:57:7f:75:a0:1e:81:0e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Mar 16 22:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29c78e0e1c36637115fc389de86b516b7b56d3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:59:6e:72:60:b4:53:8e:b3:31:10:46:c2:
8e:25:d0:ab:f3:d8:71:c3:a4:b5:a4:27:29:e4:3b:
78:96:e5:54:c5:a2:f7:3d:d7:fa:f2:c2:3c:85:4c:
90:0b:b6:a6:60:e4:06:3a:5f:25:d5:4e:20:ec:95:
f2:48:a6:b6:df:98:fe:8d:0d:21:31:04:78:6e:42:
68:ac:77:9d:73:7c:c6:f7:7c:99:ac:7d:dc:91:9c:
f7:50:b7:d3:5c:80:f7:99:c9:20:86:6e:a7:b7:fa:
4c:e9:ab:8f:8f:49:c2:e9:b8:ae:f1:fe:6c:b0:52:
6a:25:53:be:37:35:bf:66:2d:1d:d1:b4:17:9c:c4:
2b:57:84:bf:35:f2:27:90:f0:5e:e0:f3:2e:7f:47:
22:d9:4f:cd:c0:b0:eb:09:08:20:1b:d3:0a:4c:be:
83:9e:01:de:90:1f:37:09:f1:ad:4a:dd:2e:1e:5d:
1c:6d:e0:25:98:a7:dd:79:81:cf:8b:6a:ad:4d:ee:
39:9b:8f:31:1b:4c:db:77:0e:c5:1b:86:11:f9:ea:
96:fa:db:ee:e8:9a:95:1e:b1:9f:cc:04:67:85:11:
6b:fc:37:19:af:7a:17:57:c4:b0:ac:50:e5:9e:de:
6a:b9:52:04:c0:51:d1:cc:bf:26:8f:0e:1a:09:24:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C7:8E:0E:1C:36:63:71:15:FC:38:9D:E8:6B:51:6B:7B:56:D3:BF
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/KceODhw2Y3EV_Did6GtRa3tW078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3785::-2a0f:3786:100:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
82:57:96:a5:3d:4c:bf:ef:78:ba:bb:ef:8c:4a:87:06:77:ab:
dc:18:2f:98:9c:70:79:2f:ab:a4:47:fc:ba:48:e0:d4:ac:b8:
86:d9:39:d8:86:55:54:8c:fe:6a:be:05:57:70:c0:7d:c9:4f:
05:cf:f1:55:26:b8:75:25:6d:c9:ef:76:63:c6:c2:99:58:7b:
e5:80:ee:c4:e9:3d:82:7c:c7:80:60:42:e6:93:1e:ee:1c:21:
31:90:b1:8a:92:72:c7:e8:5a:74:ae:a0:50:62:3a:7d:8b:f1:
bf:f0:74:95:35:9b:f0:1f:58:62:54:ad:75:ff:44:68:19:db:
f1:db:56:7c:4b:e4:96:3a:9e:35:f3:ba:d1:25:5e:01:b1:32:
7e:ba:e9:1f:f1:b0:f8:a7:62:d3:2c:fd:57:ca:38:0d:97:df:
9e:f1:55:50:94:78:f4:b4:c7:f6:d3:e3:31:06:7c:e9:ca:e9:
ab:a5:f0:ad:d6:3a:41:81:70:1a:75:6e:26:b9:e1:9d:63:7c:
6a:ae:d6:32:6d:67:12:38:5d:e7:f2:a2:c3:bf:9d:39:18:5b:
d0:2b:e8:c5:a1:ba:b2:91:31:50:55:e9:1d:78:97:9d:01:22:
c5:41:b6:e2:34:ed:f1:3f:0a:82:2a:44:ae:cd:dd:40:0c:f3:
8d:d2:be:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-fra.rpki-client.org