Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/aAi5OXE1sz6UPGja8uWy1f3IhkU.roa
File: aAi5OXE1sz6UPGja8uWy1f3IhkU.roa (raw, json)
Hash identifier: 6BGuuoz5nGun6zCho8+ffODtOBIXOPC2o6JZYzQ6wiw=
Subject key identifier: 68:08:B9:39:71:35:B3:3E:94:3C:68:DA:F2:E5:B2:D5:FD:C8:86:45
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 01891CCD1B20830B32CF6FC6FAADB484081B
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/aAi5OXE1sz6UPGja8uWy1f3IhkU.roa
Signing time: Mon 03 Jul 2023 17:29:11 +0000
ROA not before: Mon 03 Jul 2023 17:29:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204630
IP address blocks: 2a0d:4280::/48 maxlen: 48
2a0d:4280::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:cd:1b:20:83:0b:32:cf:6f:c6:fa:ad:b4:84:08:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Jul 3 17:29:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6808b9397135b33e943c68daf2e5b2d5fdc88645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:e8:bb:7c:e3:3c:1a:14:d3:88:43:73:9a:
c0:e0:f3:8c:c3:40:4c:f8:7b:8b:08:97:8a:e8:e3:
ef:4b:6b:92:6f:2a:b1:c9:d2:92:90:27:35:83:87:
f2:0c:53:2e:bd:45:44:cf:38:48:ef:f8:14:e4:23:
4b:50:fe:4b:58:fd:35:a8:cc:f9:f9:cb:49:d2:de:
85:c4:bb:d4:65:e7:47:8d:63:13:47:b6:a4:99:44:
52:2f:5b:e8:4d:06:14:c1:c2:42:39:1f:2d:f4:5b:
97:9b:43:ba:39:26:5e:24:e5:39:97:44:3d:91:ed:
e8:ab:b5:8b:4d:06:24:ca:af:03:de:93:e2:dc:7f:
ba:a9:10:7a:89:fe:c6:eb:83:cf:16:d6:6a:d5:2f:
74:80:24:7d:90:22:9a:4f:0e:92:00:be:da:d4:f4:
44:ae:2c:c5:e2:56:fd:d2:65:cd:ac:bf:5d:c7:2f:
c6:6d:69:33:ee:d4:c3:23:98:08:78:c4:54:9a:b4:
8a:44:06:b2:56:8a:20:25:5d:e3:e2:43:49:77:d7:
9b:65:ee:18:02:14:2e:2a:ab:ed:54:5f:48:24:0e:
b9:1a:5c:b0:d3:98:63:69:80:9c:56:e0:fc:6b:68:
56:ea:ea:db:56:f1:7d:68:31:91:6e:c1:bd:e6:c0:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:08:B9:39:71:35:B3:3E:94:3C:68:DA:F2:E5:B2:D5:FD:C8:86:45
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/aAi5OXE1sz6UPGja8uWy1f3IhkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:4280::/29
Signature Algorithm: sha256WithRSAEncryption
09:0f:fd:1a:7c:d2:f4:20:ed:b3:3f:f1:27:49:0d:b5:06:f1:
1a:6d:2e:57:b4:ec:7e:dd:55:c3:75:45:1a:86:01:30:98:5e:
33:d8:b1:aa:3d:e2:52:27:97:b6:30:3c:f1:84:20:bf:c2:c6:
0e:65:19:67:bf:e4:15:52:48:2c:68:d9:d2:64:45:11:a7:50:
b8:a0:49:a9:ad:33:f9:01:af:60:e6:87:53:b0:b7:af:43:09:
02:bd:d1:1e:98:e8:44:6b:b9:83:b7:5d:0e:cf:55:7d:a4:a7:
33:fe:16:72:57:b0:22:f2:0c:7f:d9:50:7c:7b:c0:48:e2:db:
31:7a:f8:db:35:45:77:a9:78:ed:85:2a:1a:2f:55:53:ff:d9:
b9:dd:d5:16:93:35:25:d4:0b:e2:e5:b3:66:d6:67:b6:e7:f2:
91:66:70:f3:b0:f0:18:dc:d8:7c:83:f0:5d:0d:e1:ce:ff:b3:
2f:a2:af:f2:fd:e6:31:2a:bc:8a:cf:71:15:6f:45:3a:8d:a6:
57:f5:e6:8a:a9:ee:62:c1:b5:e8:42:c0:75:2d:85:ee:e6:ab:
65:24:06:f6:1b:fa:5b:44:fb:a9:61:52:e2:1d:31:e1:7b:2f:
a6:47:67:94:17:25:cd:38:35:a2:f5:54:9a:7b:56:91:e4:98:
63:21:c2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:19 2024 by rpki-client on console-fra.rpki-client.org