Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/VbLQxrii0ZjaCLQiTxVgL2grua8.roa
File: VbLQxrii0ZjaCLQiTxVgL2grua8.roa (raw, json)
Hash identifier: wIhH4D31FwZ1VgY7rqVjkfnQlVD/oGHYt2xEIYBlxDo=
Subject key identifier: 55:B2:D0:C6:B8:A2:D1:98:DA:08:B4:22:4F:15:60:2F:68:2B:B9:AF
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 0193FF4E41975239FF9A732C756A309F288C
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/VbLQxrii0ZjaCLQiTxVgL2grua8.roa
Signing time: Wed 25 Dec 2024 19:32:18 +0000
ROA not before: Wed 25 Dec 2024 19:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 2a01:e5c0:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 27 Dec 2024 08:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ff:4e:41:97:52:39:ff:9a:73:2c:75:6a:30:9f:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Dec 25 19:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55b2d0c6b8a2d198da08b4224f15602f682bb9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:3a:b9:4f:68:f6:d8:56:20:97:c2:0a:94:
e3:ed:2a:67:5c:16:47:6b:ef:ea:92:4e:3b:c5:2b:
77:bb:b2:70:dc:9d:f4:a5:69:67:ed:d7:91:45:21:
55:45:ca:74:68:d6:82:f7:32:db:16:64:06:3f:69:
6d:a5:a2:44:a7:b0:6b:19:f9:c7:e1:33:fa:63:87:
b8:ea:29:d9:72:29:28:67:6a:85:4f:da:a2:2d:6f:
78:a0:be:97:a9:ae:6f:f8:ff:7e:2f:42:02:79:a8:
f9:1d:a5:2e:42:86:78:4c:7e:86:c1:ac:10:15:03:
f4:98:b4:8f:07:b3:b8:09:51:d5:91:28:48:1b:9d:
24:8f:80:38:56:a5:e7:36:3f:3b:67:2c:57:d8:d0:
b0:a6:05:c7:90:4e:75:5f:0b:47:db:78:fe:b8:79:
85:f0:2f:ea:23:0b:01:d9:a8:e4:7a:20:58:70:36:
91:3c:89:d0:45:62:7a:9f:7e:d2:67:5e:17:f1:7c:
56:60:5c:06:de:cf:f2:28:9b:3f:91:9a:c9:f8:b2:
c1:43:f9:e2:10:ad:16:fd:5f:8a:f2:bc:00:c8:d8:
a6:f2:5b:e5:f4:a4:6f:38:d6:dc:89:f3:f4:24:2d:
10:10:89:b3:90:92:46:e6:5a:39:a2:3b:76:5a:e2:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:D0:C6:B8:A2:D1:98:DA:08:B4:22:4F:15:60:2F:68:2B:B9:AF
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/VbLQxrii0ZjaCLQiTxVgL2grua8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e5c0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
20:d0:76:27:df:21:ff:fc:b5:27:08:2d:c3:30:35:e8:2c:3e:
64:ec:7a:e4:51:d2:a0:e7:51:f4:72:0d:5e:ed:03:dd:25:27:
63:da:f8:2f:3f:f1:ea:f6:ff:c1:e0:c6:b9:46:0a:0c:93:be:
ed:b9:d3:31:5c:62:6b:40:a9:d3:82:ca:9d:eb:ea:d1:20:08:
5e:ae:ce:ad:ff:88:1f:ca:eb:d2:eb:0e:31:a3:73:67:d8:38:
fb:e5:b9:31:c2:0c:5d:58:9f:0e:a2:7f:cb:79:0a:5a:f7:2e:
de:71:1b:4f:ae:ac:34:0e:9d:7f:bd:36:cb:1e:23:cd:f4:dc:
93:a5:04:d8:d0:52:a6:0e:50:4c:75:be:20:72:d3:08:70:c9:
e4:f8:b9:19:c9:69:7a:8b:d1:cc:6a:9d:35:f2:0c:9e:45:b1:
fe:5d:a7:25:9d:1b:a1:8d:b9:47:e7:a9:3f:8d:44:87:bb:b6:
55:45:e0:0d:66:6d:57:13:6e:40:1a:9d:d9:a0:9a:ec:ac:38:
a1:24:46:70:6a:7d:84:59:f1:cf:53:2f:b3:03:e5:71:9d:e8:
42:a2:8b:ea:48:5e:5f:f4:b9:c8:65:a8:cc:8a:24:78:ca:db:
f3:58:c8:04:3d:67:31:4a:79:d4:e8:54:e5:76:e1:08:4e:d2:
68:dc:cb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:11:40 2024 by rpki-client on console-ams.rpki-client.org