Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/t4gwe-9rKTbsOt78kiHYMjLtjxg.roa
File: t4gwe-9rKTbsOt78kiHYMjLtjxg.roa (raw, json)
Hash identifier: Iiy87Jz42GLR1In6mP9wRyF6fJVaQQoRMA6tdsesDgY=
Subject key identifier: B7:88:30:7B:EF:6B:29:36:EC:3A:DE:FC:92:21:D8:32:32:ED:8F:18
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA78A25FE6FCFB49E5A7F08EBE1713
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/t4gwe-9rKTbsOt78kiHYMjLtjxg.roa
Signing time: Mon 02 Jan 2023 13:45:01 +0000
ROA not before: Mon 02 Jan 2023 13:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206499
IP address blocks: 2a0f:5700::/32 maxlen: 48
2a0f:5701::/32 maxlen: 48
2a0f:5701::/33 maxlen: 33
2a0f:5701::/34 maxlen: 34
2a0f:5701:fe10::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:78:a2:5f:e6:fc:fb:49:e5:a7:f0:8e:be:17:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b788307bef6b2936ec3adefc9221d83232ed8f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:49:33:26:32:59:14:36:34:88:6f:ce:d4:
a1:5e:39:c0:87:6c:cc:75:d8:17:2e:d8:c0:24:62:
b9:0e:34:ca:75:f3:eb:e5:d2:8f:4b:db:ab:40:af:
f2:31:63:44:be:ba:71:20:55:df:38:cc:18:bb:b3:
ed:85:2c:cb:33:f8:ee:1c:a8:03:8a:90:61:6a:0c:
2b:78:39:79:dc:3b:69:e3:4e:6f:39:40:d1:2c:8b:
67:27:c6:be:e1:e2:21:e6:be:b8:af:2b:cf:81:6e:
04:00:49:bc:a0:ed:01:c5:c1:f0:20:49:e6:ab:16:
2b:3a:6c:e2:7c:98:c3:30:2b:8a:89:71:62:3c:ad:
8f:55:06:62:11:0c:9b:95:97:32:ed:56:b0:7b:b5:
c6:9e:cb:d6:11:50:69:f5:29:19:24:2d:97:26:b5:
30:61:36:ec:e9:85:ae:4a:8c:c7:e1:0d:8b:0f:31:
e3:33:8e:5f:f2:f6:09:71:9f:59:d3:e9:50:f5:36:
82:90:b8:13:55:8e:ec:9e:47:c3:30:3d:ec:59:bf:
28:23:92:39:f9:7d:cb:f0:d8:ee:38:04:fd:09:dc:
a7:2a:e0:9c:f9:75:92:e4:30:a6:3d:32:df:c1:65:
d1:72:31:29:41:08:94:71:69:1b:19:f1:36:99:b7:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:88:30:7B:EF:6B:29:36:EC:3A:DE:FC:92:21:D8:32:32:ED:8F:18
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/t4gwe-9rKTbsOt78kiHYMjLtjxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5700::/31
Signature Algorithm: sha256WithRSAEncryption
00:ef:b9:2e:0b:5e:c6:a6:2a:24:bf:af:f0:98:50:51:c3:d0:
c4:24:ea:31:cb:49:89:e9:47:91:92:73:1f:20:d1:43:72:1c:
7e:8b:4a:69:7c:ba:d3:e5:f3:5d:8f:bf:4c:6e:ff:b5:d3:4c:
cb:22:0e:f0:86:a7:94:be:0c:9a:62:bc:43:37:04:70:c8:17:
a6:f5:7a:6d:bc:b7:97:d3:df:d7:83:13:db:5f:4c:81:6e:c0:
4d:16:41:34:68:3e:8e:e6:28:1f:18:81:89:3a:f2:88:14:3b:
16:1f:79:03:c3:67:a4:41:35:e3:a4:ab:a1:cc:2a:31:f0:76:
ce:45:e2:2e:19:d2:47:c2:df:fe:49:77:86:b9:ea:65:eb:89:
8e:87:80:71:3e:e9:5b:ce:b5:d5:2d:36:33:f5:45:ad:f7:05:
55:32:40:9e:b7:ed:21:a8:c9:6e:9c:bb:4e:3e:b6:4f:67:3b:
f1:a1:95:ce:19:5d:9e:a7:0a:cf:0d:7a:08:08:39:dc:11:f2:
4d:aa:17:b3:c8:0d:3f:a3:7f:11:47:3b:f1:05:64:27:8a:4b:
51:d0:62:ca:9c:69:ee:44:b9:30:03:15:21:46:b4:11:f4:dd:
fb:68:8d:b7:aa:42:df:31:6e:f9:d8:23:0f:ef:6d:f6:f9:70:
bf:56:f8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org