Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ADGepbDqXRq8wWqpAfe2YqzHpOM.roa
File: ADGepbDqXRq8wWqpAfe2YqzHpOM.roa (raw, json)
Hash identifier: Y3L9J3yFTajuG3HkREP83PzYEUWCu4ZDgwZMQK62ahU=
Subject key identifier: 00:31:9E:A5:B0:EA:5D:1A:BC:C1:6A:A9:01:F7:B6:62:AC:C7:A4:E3
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018EA8D69056C41270A09C0221717D0C9CAB
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ADGepbDqXRq8wWqpAfe2YqzHpOM.roa
Signing time: Thu 04 Apr 2024 11:20:17 +0000
ROA not before: Thu 04 Apr 2024 11:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215561
IP address blocks: 2a0a:79c0:200::/40 maxlen: 128
2a0a:79c7:f200::/44 maxlen: 128
2a0a:79c7:f210::/44 maxlen: 128
2a0a:79c7:f220::/44 maxlen: 128
2a0a:79c7:f230::/44 maxlen: 128
2a0a:79c7:f240::/44 maxlen: 128
2a0a:79c7:f250::/44 maxlen: 128
2a0a:79c7:f260::/44 maxlen: 128
2a0a:79c7:f270::/44 maxlen: 128
2a0a:79c7:f280::/44 maxlen: 128
2a0a:79c7:f290::/44 maxlen: 128
2a0a:79c7:f2a0::/44 maxlen: 128
2a0a:79c7:f2b0::/44 maxlen: 128
2a0a:79c7:f2c0::/44 maxlen: 128
2a0a:79c7:f2d0::/44 maxlen: 128
2a0a:79c7:f2e0::/44 maxlen: 128
2a0a:79c7:f2f0::/44 maxlen: 128
Validation: Failed, certificate revoked on Wed 10 Apr 2024 21:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:d6:90:56:c4:12:70:a0:9c:02:21:71:7d:0c:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Apr 4 11:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00319ea5b0ea5d1abcc16aa901f7b662acc7a4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:fd:81:da:a7:5a:dd:7c:dc:56:9c:22:8a:
68:21:89:8a:99:7c:cb:c2:92:ff:f7:49:99:dc:c1:
87:47:83:61:6c:e4:c1:76:53:b7:18:49:eb:8e:91:
83:be:00:56:36:21:6a:61:41:f5:c9:6f:5e:43:2a:
10:e4:09:df:52:f0:51:b9:91:ff:cd:d2:69:f0:46:
b8:3f:4d:cf:1f:01:25:aa:fd:49:e8:43:0d:c0:1a:
a4:18:77:a4:48:f5:cd:00:49:09:ba:db:0e:a3:ae:
01:cf:aa:c3:b5:6c:9c:5d:9c:14:c3:c0:2d:7b:d7:
6f:21:f5:38:42:7c:19:58:8a:d9:4b:7e:de:d7:d0:
f9:0f:8b:f7:86:1e:a2:dd:93:95:cd:23:c6:9e:6f:
92:a0:6b:66:cd:53:82:33:24:fa:07:05:a2:7e:8d:
0e:35:0d:b9:b2:29:12:bd:15:22:0c:98:a4:2c:9d:
3b:84:2c:41:49:b2:87:26:40:41:85:96:71:2f:35:
a6:66:a7:47:ae:29:e9:d5:44:1d:cc:ab:ad:0f:ce:
61:4c:ce:5e:f6:29:63:38:9d:45:13:4b:80:7c:25:
0a:33:4a:19:36:3a:d7:cb:01:f4:07:e3:69:7b:22:
ad:19:92:66:a4:a3:df:56:14:25:28:9e:3a:82:40:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:31:9E:A5:B0:EA:5D:1A:BC:C1:6A:A9:01:F7:B6:62:AC:C7:A4:E3
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ADGepbDqXRq8wWqpAfe2YqzHpOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:200::/40
2a0a:79c7:f200::/40
Signature Algorithm: sha256WithRSAEncryption
7b:0b:a8:a1:19:5f:b8:f4:81:e4:92:50:9c:ae:da:c8:7a:fd:
17:7e:97:e5:af:4d:02:ab:57:42:11:b3:5a:17:4e:91:20:2b:
09:7f:f3:68:6b:d9:e2:f2:c6:ef:60:df:df:6a:f6:d9:f2:a3:
26:b9:35:e4:6a:51:2c:87:cf:e4:b9:66:73:86:f7:08:13:b4:
eb:6c:11:33:b1:9b:ff:db:ec:4b:39:f2:ef:c5:82:20:df:62:
69:b2:94:53:f7:2a:c3:de:cc:62:67:70:c1:b3:cb:9b:fd:98:
13:61:4f:fb:7a:2c:ef:33:f9:db:d2:a8:db:7a:6f:8a:d8:8a:
bc:fa:16:91:bd:8f:28:38:2e:37:e7:48:12:98:2a:ca:f7:e2:
a6:52:c0:e5:09:1a:c5:05:22:c7:ce:de:c7:b0:85:be:93:67:
f6:11:f9:83:65:f1:f4:a9:90:e0:9b:30:24:97:27:60:7f:e1:
22:c3:b7:97:9e:35:96:7c:61:4e:f1:bc:6c:34:b2:2f:6d:e0:
1e:c7:36:a5:fd:30:0a:95:48:72:1a:90:bc:4c:c4:15:ca:af:
d3:d2:ee:4d:45:bc:9d:40:31:db:24:46:a8:7f:51:3a:fd:38:
8b:f7:1b:88:fc:c8:bf:bb:29:66:6a:03:c3:32:45:85:0b:2b:
2e:db:e8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:40 2024 by rpki-client on console-ams.rpki-client.org