Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/UAlIKXy2PijwNv0QrogcbarBXsk.roa
File: UAlIKXy2PijwNv0QrogcbarBXsk.roa (raw, json)
Hash identifier: ZUyQ82ZGiMFSofHUdQul3yrUp6QO3E20Td/NetCVltw=
Subject key identifier: 50:09:48:29:7C:B6:3E:28:F0:36:FD:10:AE:88:1C:6D:AA:C1:5E:C9
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 01856F5DF4D8E69C0A4BF8A350B69FBFA72C
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/UAlIKXy2PijwNv0QrogcbarBXsk.roa
Signing time: Sun 01 Jan 2023 22:05:06 +0000
ROA not before: Sun 01 Jan 2023 22:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8729
IP address blocks: 2a02:6a0:cffe::/48 maxlen: 48
2a02:6a0:cfff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f4:d8:e6:9c:0a:4b:f8:a3:50:b6:9f:bf:a7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Jan 1 22:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=500948297cb63e28f036fd10ae881c6daac15ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:a8:39:0b:57:4e:ad:7d:cc:aa:f7:aa:aa:
bf:a3:78:0a:02:3d:14:35:e5:85:4f:29:4a:ad:14:
3a:ea:f9:8e:f7:52:56:25:75:98:ad:e5:7a:cc:6b:
07:52:6c:7b:5d:0f:b1:ed:d3:ec:43:3e:3e:06:f4:
0e:4f:63:91:de:cb:56:a0:30:43:bc:ea:17:3a:74:
8e:75:5c:26:a5:36:b6:e4:2c:49:02:20:c2:26:51:
f5:d4:6e:c1:2d:24:60:a5:84:81:91:9b:b7:ef:2c:
d1:e5:04:ab:78:0a:15:78:60:e7:dd:09:46:ea:d4:
86:e1:96:7c:49:e9:5d:1a:e4:c2:18:c1:1f:b5:af:
3b:03:15:b2:d8:a8:ec:3f:cf:b1:fa:cf:24:f7:26:
2b:1b:30:4a:c7:24:7d:fe:16:a9:0a:61:de:4e:31:
42:fc:84:07:f8:30:92:cb:d7:ac:dc:b6:46:f7:95:
9a:dc:84:30:1f:f8:02:9c:cf:da:ef:6c:80:27:57:
92:15:92:24:b4:7e:39:63:59:20:d1:8c:ef:ad:cc:
8f:57:84:d2:da:5a:11:c2:b9:a1:22:0b:9a:79:ab:
dc:fc:ea:b1:0f:70:c6:59:b8:4d:60:57:21:fa:6d:
ec:00:74:34:3b:8f:66:9f:28:58:90:b3:1b:71:49:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:09:48:29:7C:B6:3E:28:F0:36:FD:10:AE:88:1C:6D:AA:C1:5E:C9
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/UAlIKXy2PijwNv0QrogcbarBXsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6a0:cffe::/47
Signature Algorithm: sha256WithRSAEncryption
26:be:88:4d:25:82:1d:6d:d5:47:8c:d2:6e:05:c3:3f:21:08:
95:f8:85:a7:60:97:0f:3a:39:1e:4b:5d:5e:99:20:9f:92:e8:
b8:ea:47:06:b1:91:f7:49:70:d9:3d:56:92:19:10:dd:d3:db:
6d:b1:8a:19:88:5d:e8:1d:0e:ac:67:bf:86:40:4c:c5:46:7e:
ea:2f:78:99:33:4d:9d:8b:e9:3b:32:e4:ba:6c:10:2d:d1:18:
66:76:c1:32:9f:8a:ab:3c:4d:21:39:14:83:c1:72:6b:21:b0:
a1:74:38:d1:db:6c:16:2b:74:dd:0c:ee:5c:df:a4:b0:92:27:
86:a9:c9:02:7c:39:28:40:24:73:9c:b6:f3:0a:63:be:f1:01:
a4:78:46:7a:a9:be:ba:d9:94:43:e0:ab:d7:6d:86:9b:e4:36:
22:7b:bf:ab:67:0f:a6:8d:74:37:06:d6:45:b8:23:15:74:38:
11:7e:9a:55:3b:9d:49:6f:ee:72:45:4d:70:98:c6:cd:78:d8:
5d:84:4b:57:18:59:b3:a9:c7:5c:66:be:48:25:20:20:ca:78:
49:6d:d0:f1:84:a6:5a:5e:3d:48:7d:cb:bb:72:d7:f2:04:53:
82:e6:ce:7e:56:4c:c2:16:bb:75:49:6f:1a:99:c2:20:a4:2d:
26:98:ce:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:35 2024 by rpki-client on console-fra.rpki-client.org