Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/RTc7XsvzshhC8_Yr49NqK2QSoTU.roa
File: RTc7XsvzshhC8_Yr49NqK2QSoTU.roa (raw, json)
Hash identifier: 4QrJi80ZJX2FiP9Y/KGk7ygwWVOSgVn2lePZIJ6Zuwg=
Subject key identifier: 45:37:3B:5E:CB:F3:B2:18:42:F3:F6:2B:E3:D3:6A:2B:64:12:A1:35
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018571D7D20C7A5947A426FEE6B19263D3C0
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/RTc7XsvzshhC8_Yr49NqK2QSoTU.roa
Signing time: Mon 02 Jan 2023 09:37:27 +0000
ROA not before: Mon 02 Jan 2023 09:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204094
IP address blocks: 2a11:840:22::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d2:0c:7a:59:47:a4:26:fe:e6:b1:92:63:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 09:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45373b5ecbf3b21842f3f62be3d36a2b6412a135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:24:ea:00:9e:71:bf:b6:03:b6:5b:f4:75:
f1:b1:eb:c7:ba:b1:e6:09:3f:2c:36:c2:88:36:65:
a5:47:98:05:ff:32:0a:0f:94:7d:c9:7d:36:84:d1:
5e:cf:cd:d0:e5:b9:76:da:07:82:2a:30:9b:b2:5f:
69:d1:53:4a:5b:91:30:0c:12:e4:58:75:12:fd:a4:
6c:e0:bd:b7:53:8c:22:41:71:40:a1:3e:15:ca:ab:
e7:c0:77:0d:31:92:6b:86:72:ee:68:c2:8e:d9:84:
e0:96:27:9b:45:51:f0:34:a6:08:fe:b8:90:3f:81:
d0:83:05:42:9c:45:65:37:bd:8f:31:ae:4e:7b:43:
97:68:63:0f:be:ab:ba:66:5e:ff:fc:67:51:ec:c4:
30:7a:fa:fe:a4:37:a9:79:7c:c5:44:c7:0c:3a:3e:
0c:45:72:5b:75:fe:e2:a4:ca:45:cb:8c:8b:7f:94:
40:69:bb:81:52:a1:68:62:44:df:10:e2:94:1f:f8:
ec:68:4b:af:49:1c:aa:65:dc:8b:38:89:77:4a:48:
8b:ae:fe:04:13:60:11:c2:39:4a:6d:22:ef:93:db:
9b:49:07:27:17:94:d2:d0:0b:cd:33:3e:89:9f:7a:
a7:e6:54:61:95:80:b0:58:80:44:41:34:db:a3:46:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:3B:5E:CB:F3:B2:18:42:F3:F6:2B:E3:D3:6A:2B:64:12:A1:35
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/RTc7XsvzshhC8_Yr49NqK2QSoTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:22::/48
Signature Algorithm: sha256WithRSAEncryption
24:38:de:21:af:ec:e6:3c:c6:0b:1f:63:bf:79:11:76:c1:17:
5b:40:9d:31:e1:1d:f4:98:ca:ab:d9:da:2a:81:1f:80:f6:27:
af:11:cc:29:fb:5e:b8:31:ba:6a:98:85:1e:7d:2e:6f:cc:1a:
85:a9:24:5c:e0:a4:9a:d6:9c:a9:0f:65:dd:25:4f:7b:e8:f5:
cf:60:6f:38:de:e5:04:e9:16:4b:e4:47:1f:63:3f:cb:2f:0c:
7d:a7:2f:c9:d1:69:7b:6d:d9:a6:30:2c:af:df:6c:bc:a3:6a:
f9:92:b3:23:5d:d2:a2:7b:ee:dc:ee:5d:ec:89:f5:42:7e:26:
53:60:05:ba:ab:dd:79:8b:18:23:03:12:60:02:be:30:84:e6:
a4:55:1d:3b:58:ba:9f:3a:85:dd:95:28:c4:89:57:f3:03:fa:
2f:10:ce:47:5f:74:25:e6:36:9a:df:71:09:34:90:b3:93:bc:
40:c1:86:44:01:1d:4b:df:88:b9:93:f1:2e:a8:96:62:88:e0:
81:f1:d6:78:dd:98:a7:b5:20:52:7e:3b:19:b7:b2:12:68:e0:
3a:db:f7:38:36:f2:c2:d9:14:b2:f8:e2:fa:73:fe:92:9e:f8:
ef:8c:f9:65:40:ae:67:0f:99:da:13:f5:d6:6c:40:ef:ff:9c:
2f:ab:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org