Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/gVF0pnb9LWOH-o_VYZqqACsELTY.roa
File: gVF0pnb9LWOH-o_VYZqqACsELTY.roa (raw, json)
Hash identifier: pEzHbW09WNHbutjd45ziSDeXCzGWXZPai75zRD2KbIU=
Subject key identifier: 81:51:74:A6:76:FD:2D:63:87:FA:8F:D5:61:9A:AA:00:2B:04:2D:36
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 0192686084B415CCCAF030EF35A36D3B0BCE
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/gVF0pnb9LWOH-o_VYZqqACsELTY.roa
Signing time: Mon 07 Oct 2024 19:06:48 +0000
ROA not before: Mon 07 Oct 2024 19:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 2a10:ed40::/48 maxlen: 48
2a10:ed40:1::/48 maxlen: 48
2a10:ed40:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Oct 2024 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:60:84:b4:15:cc:ca:f0:30:ef:35:a3:6d:3b:0b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Oct 7 19:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=815174a676fd2d6387fa8fd5619aaa002b042d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:af:ed:ea:ec:79:cc:77:94:08:5b:1f:50:49:
7e:97:c7:7d:f8:02:49:84:cf:fa:bc:27:8d:84:24:
6e:0a:db:5d:f7:b9:84:cd:2c:0f:9a:b5:fb:2b:21:
7d:54:e7:31:01:30:e3:a4:a5:32:9e:7a:53:36:35:
d4:35:ae:d1:65:6e:59:a0:c0:ce:e1:17:d5:c7:f9:
ca:48:8b:51:dd:21:c6:b0:2e:3b:57:08:10:0d:45:
3a:5f:1c:91:74:ac:d0:c1:89:31:5c:dd:27:5e:43:
5e:9f:49:dd:5f:d7:d4:b7:6b:c7:77:a0:8c:f8:bb:
02:37:a6:fe:39:e4:df:60:2c:01:55:a2:d5:98:d9:
32:4f:a0:58:67:54:31:e7:c2:c6:b0:1c:1a:1f:14:
42:c2:4e:c1:7e:44:9f:6e:69:b4:f7:75:55:66:5c:
1a:b9:1a:39:23:9e:31:01:8a:2d:c3:4c:32:ed:50:
9a:11:fc:aa:ae:2c:7a:db:b3:da:65:da:ec:17:a0:
26:40:12:8b:3c:8c:ca:0c:2d:67:1c:32:c7:2c:bc:
d4:a0:3d:0a:42:f9:7f:83:87:a5:50:28:56:2e:c1:
ce:12:43:9b:bd:de:df:3d:26:1d:fe:4c:13:b9:01:
dd:a3:45:34:61:95:41:c6:5e:30:92:2e:3b:06:ea:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:51:74:A6:76:FD:2D:63:87:FA:8F:D5:61:9A:AA:00:2B:04:2D:36
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/gVF0pnb9LWOH-o_VYZqqACsELTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ed40::-2a10:ed40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
31:4f:e8:61:32:2d:a3:34:9d:4a:92:a2:85:a0:12:47:06:5b:
af:09:9e:34:06:34:8f:5c:76:53:71:ce:8a:98:39:f3:f8:43:
a9:88:2a:ed:81:80:db:e3:88:32:3b:24:74:f8:35:f0:fb:2a:
52:b7:e5:73:42:01:ac:9f:99:a6:09:87:61:e3:c3:16:d2:f5:
b2:02:ff:a6:fb:29:6d:07:8a:00:94:4a:82:65:36:b2:ec:9e:
d1:42:a3:76:26:fd:10:9e:61:d8:9b:d8:c0:cb:d9:eb:e6:e3:
d9:b9:43:74:5e:54:e6:6e:59:60:96:bd:58:95:03:7c:69:5e:
68:a8:f7:33:68:d4:c4:d8:13:05:fd:01:6f:70:f8:0f:6f:ed:
13:e8:4d:05:9f:12:ae:5f:b7:db:bd:09:38:27:6d:7d:6b:09:
d2:02:a9:72:99:7d:35:32:92:b2:56:6a:7b:b6:9c:47:1c:cc:
5f:fe:41:25:a5:c0:d5:e1:d9:07:dc:b3:ab:bc:9f:f8:4a:05:
bc:8e:07:a2:ad:f5:ee:ae:16:8e:b8:3d:ea:72:15:2a:a6:93:
84:4c:dc:75:ef:b7:5e:70:93:c8:24:97:1f:08:57:dd:6e:4a:
8f:82:24:d1:6e:fd:1d:80:10:f0:31:0d:91:24:ee:20:13:aa:
b3:12:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:31:00 2024 by rpki-client on console-fra.rpki-client.org