Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/naYCy3zNVeGmkmUc9y-7TtzuX10.roa
File: naYCy3zNVeGmkmUc9y-7TtzuX10.roa (raw, json)
Hash identifier: EjLFrdALbjqZLdWSQY4FQxAZgLKjaX4DRuLMoEkvueo=
Subject key identifier: 9D:A6:02:CB:7C:CD:55:E1:A6:92:65:1C:F7:2F:BB:4E:DC:EE:5F:5D
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018571D7CEDC6698FAE272207F1170ADC944
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/naYCy3zNVeGmkmUc9y-7TtzuX10.roa
Signing time: Mon 02 Jan 2023 09:37:26 +0000
ROA not before: Mon 02 Jan 2023 09:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55720
IP address blocks: 2a11:840:26::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:ce:dc:66:98:fa:e2:72:20:7f:11:70:ad:c9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 09:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9da602cb7ccd55e1a692651cf72fbb4edcee5f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:26:01:ed:79:f0:19:9c:12:ed:6e:4d:a1:a9:
fa:4a:0d:55:a5:40:9c:f5:63:75:3b:21:68:0e:a5:
fd:08:f8:ad:fb:6a:34:a3:23:9d:cf:a3:47:a9:d5:
10:d0:62:4d:7a:08:8b:3d:45:e1:8d:dc:ad:d2:83:
68:82:f2:ef:00:5a:3f:aa:7d:59:58:54:2f:05:fc:
1d:e0:84:a5:11:7a:a6:5c:63:b6:ec:44:ce:88:97:
b2:65:e6:78:99:2a:6d:d0:0e:45:24:3c:4b:8d:5d:
52:99:e5:02:31:2c:b7:bf:7f:4d:39:6b:9e:10:ab:
cc:1a:03:89:d4:36:d4:93:16:f3:eb:e9:72:5d:38:
d5:63:fb:bd:0c:52:0a:6f:28:be:b1:a1:b6:9b:3f:
70:e7:5e:10:b3:28:2f:0c:cc:2f:d3:67:49:42:3c:
40:d2:55:d4:b4:83:6c:b9:5a:0a:d9:d1:b3:da:29:
0e:f5:a9:e8:1d:d7:62:20:26:0e:2f:cf:d8:c8:ba:
3f:cc:f0:ab:19:ba:d5:b9:83:c6:1b:f4:d4:37:58:
13:7e:8e:34:0c:be:47:16:f9:db:6f:14:d9:fa:ad:
bf:d4:d4:47:55:71:93:4d:ed:cb:95:ce:d7:b1:18:
66:9e:f1:ba:59:3b:3b:b7:e9:fd:3b:53:0f:d5:ee:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A6:02:CB:7C:CD:55:E1:A6:92:65:1C:F7:2F:BB:4E:DC:EE:5F:5D
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/naYCy3zNVeGmkmUc9y-7TtzuX10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:26::/48
Signature Algorithm: sha256WithRSAEncryption
81:20:9a:96:a0:6d:8c:ac:32:11:c9:54:fb:97:ad:52:99:b1:
cb:94:db:d4:d1:d2:17:fc:cc:c3:47:80:00:6b:3b:30:59:8d:
52:74:6e:aa:12:cf:d1:f0:dc:9e:33:c2:a5:cc:c6:a6:c3:6d:
06:bb:04:fb:eb:af:d2:46:9c:ab:a3:ce:e7:e4:c4:15:00:f2:
62:e6:6d:f7:62:2f:e3:78:0c:78:e7:03:df:de:b8:ff:5d:e8:
57:13:ea:97:bd:00:fc:2b:82:df:ce:ea:4d:a7:1d:24:ca:96:
87:37:88:e7:7a:36:aa:80:c5:cb:ec:3d:06:8b:e2:92:1b:02:
87:95:90:66:49:2f:49:fc:4f:35:c1:14:b4:3c:1e:27:67:aa:
13:77:54:63:95:81:ea:a7:7d:bf:80:71:5c:b1:d4:4d:aa:39:
29:9b:d9:4b:f6:bb:32:1a:0c:96:fd:0a:83:55:16:a2:97:d0:
dc:b4:02:48:cc:c1:eb:53:aa:81:7e:f6:d3:de:f9:06:32:0d:
a5:f0:cb:0f:14:43:41:a9:f3:c3:cc:d9:65:b6:36:a5:0c:b4:
f3:dc:0d:ad:19:af:36:73:e7:f3:72:74:cf:de:79:e2:3e:73:
93:75:20:fa:7d:5e:33:fd:90:80:aa:17:95:f9:41:f5:b5:cf:
69:62:e6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org