Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/4lDdpgy5T3nkO-DRmfun2x-I_7I.roa
File: 4lDdpgy5T3nkO-DRmfun2x-I_7I.roa (raw, json)
Hash identifier: aF8HmWDmqbmBBKQF1+GWaM4oYc2wTkFfPQNLhU5wtG0=
Subject key identifier: E2:50:DD:A6:0C:B9:4F:79:E4:3B:E0:D1:99:FB:A7:DB:1F:88:FF:B2
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA6DA03236E88AD9382F4E804079E4
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/4lDdpgy5T3nkO-DRmfun2x-I_7I.roa
Signing time: Mon 02 Jan 2023 13:44:58 +0000
ROA not before: Mon 02 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50310
IP address blocks: 2a0f:5707:fff7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:6d:a0:32:36:e8:8a:d9:38:2f:4e:80:40:79:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e250dda60cb94f79e43be0d199fba7db1f88ffb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:e2:a8:66:f9:8d:24:1a:f0:86:c2:ed:a8:
ed:d7:99:a1:bc:90:d4:42:00:40:e0:ae:0c:d8:c6:
a7:3f:db:3b:58:fb:44:2d:1b:b5:01:66:b8:9f:aa:
2a:e9:56:fc:f7:08:1d:e9:0b:52:b8:04:d4:42:f8:
65:a5:28:c3:65:44:78:5d:f0:de:2c:e1:13:31:da:
58:56:d7:9e:29:fa:8a:d8:05:4d:41:b9:19:12:93:
fc:e0:7c:7c:14:c3:9f:a4:36:42:9f:1c:3c:d2:d0:
e3:86:e7:3b:6a:53:09:22:f0:f3:f8:68:6c:7a:45:
c0:91:47:af:26:70:e7:9c:bc:28:cf:de:5c:0d:0d:
01:20:7c:15:f6:67:f7:21:03:79:5a:8e:f8:5f:8a:
a9:bf:9e:77:69:6f:31:ea:f4:22:78:51:f0:37:fa:
57:b3:bf:ea:fe:62:b5:e5:3b:4f:0c:1c:6f:eb:2f:
5e:8f:c1:64:f4:39:f0:38:f1:ac:b9:29:b4:3b:36:
6b:d3:1e:f8:5d:e8:4d:02:ba:24:e8:4c:3d:3e:fc:
71:d9:68:ee:f9:0b:b3:0b:fd:27:23:cc:91:0e:e8:
1f:62:ee:d3:50:87:4a:27:bf:d1:07:8d:f0:21:32:
25:41:20:0d:4b:7b:1b:49:a7:f2:3f:6e:d5:10:04:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:50:DD:A6:0C:B9:4F:79:E4:3B:E0:D1:99:FB:A7:DB:1F:88:FF:B2
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/4lDdpgy5T3nkO-DRmfun2x-I_7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:fff7::/48
Signature Algorithm: sha256WithRSAEncryption
88:76:90:55:2b:94:50:d6:3f:1f:d4:2b:bb:83:0c:fe:06:10:
a5:4b:e1:18:50:e6:9a:97:04:07:f3:9c:a2:52:c2:ae:82:5c:
92:f8:f5:f2:b1:e8:c1:0c:aa:3d:41:82:1d:b5:15:82:c7:39:
38:c1:5d:83:65:d9:66:b0:31:62:1b:74:60:2f:31:70:02:95:
2e:ed:50:6e:f9:fb:aa:55:69:cf:6a:03:e7:e0:1d:ca:63:bb:
79:e1:66:c0:c3:97:1d:99:f6:3e:e8:94:e9:12:f7:04:e8:0b:
8e:4e:8a:66:ec:2d:b8:6e:f6:0d:fb:23:3c:ad:b2:d2:0f:bb:
1a:5e:4a:06:29:bb:ce:ce:39:ee:2e:46:0c:dc:2f:3d:e8:6e:
1c:ef:c2:3b:49:0d:59:1a:21:10:b8:85:86:3f:16:19:ae:b8:
b9:b2:82:db:a8:ca:8a:0c:cc:99:71:1a:8d:63:2d:d6:bb:cf:
5a:41:68:8d:3d:31:69:23:b4:a8:a4:30:02:db:87:0a:1d:21:
6a:c1:f6:76:3d:30:d8:8d:26:67:ed:23:2f:db:fa:c1:a5:3e:
21:b1:b9:fc:33:58:98:ad:e4:e1:e0:2e:c9:c8:70:f3:e0:cb:
19:19:bc:ce:df:72:36:4a:20:1a:a5:01:91:27:66:d4:59:55:
5d:a2:ee:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org