Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/4JujjNyh4LIUHQ20SpjLwaCFIOo.roa
File: 4JujjNyh4LIUHQ20SpjLwaCFIOo.roa (raw, json)
Hash identifier: A/QYQgCepR/eOGPMjTc1pnLRor9uDqToMEqwDjZKFNk=
Subject key identifier: E0:9B:A3:8C:DC:A1:E0:B2:14:1D:0D:B4:4A:98:CB:C1:A0:85:20:EA
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 018F619CCB43982B1822CE1E0A09A9FE2E89
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/4JujjNyh4LIUHQ20SpjLwaCFIOo.roa
Signing time: Fri 10 May 2024 08:26:56 +0000
ROA not before: Fri 10 May 2024 08:26:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51741
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 10 May 2024 10:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:9c:cb:43:98:2b:18:22:ce:1e:0a:09:a9:fe:2e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: May 10 08:26:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e09ba38cdca1e0b2141d0db44a98cbc1a08520ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:a9:1b:69:84:89:cf:79:aa:e0:82:d3:21:
69:18:29:c6:51:8c:fe:78:2c:3c:8f:a7:6f:99:22:
a9:45:3b:51:cf:4e:88:cc:79:17:e8:e1:4a:7d:f0:
08:05:81:b8:1b:0e:7e:15:39:f3:9a:36:fd:ee:df:
8f:29:8b:43:dd:d9:37:e3:d7:33:2c:b4:fd:a0:5e:
52:59:48:9b:9f:63:47:45:6e:78:bd:f4:b2:fc:0f:
da:53:cb:2f:4f:13:ec:f9:14:b3:65:f8:90:8e:32:
ae:62:6d:fe:13:ac:41:d8:11:c3:9b:5a:d2:87:9a:
65:7c:59:b0:93:4c:79:0e:4b:58:43:75:82:c4:e9:
a7:62:1a:1a:08:70:c0:85:ba:5a:ca:d0:1b:17:f4:
28:56:1b:58:72:1d:c5:04:b1:98:34:8e:d6:e7:82:
cc:4e:a8:e7:fd:c9:8e:ea:36:b5:70:af:aa:ad:95:
ee:d8:f0:6f:23:c3:cc:49:8a:98:f0:99:0b:62:6b:
bb:c3:1c:f3:62:8d:70:2b:95:25:fa:c4:c8:a4:cc:
41:e1:18:8f:d2:b8:23:83:4e:e6:a5:fc:81:07:96:
6a:4a:7d:15:06:0e:20:cc:b3:47:d3:e3:a6:90:a9:
fd:39:f4:44:2a:39:e6:a3:5a:bc:d2:d7:26:c2:bc:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9B:A3:8C:DC:A1:E0:B2:14:1D:0D:B4:4A:98:CB:C1:A0:85:20:EA
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/4JujjNyh4LIUHQ20SpjLwaCFIOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:e3:90:d7:5c:b2:c0:3a:86:1a:7e:1e:70:fc:90:1e:6f:ab:
db:0e:a5:13:64:37:8a:e3:e4:83:31:e5:a5:6d:d0:15:cf:a1:
42:e0:59:ee:4c:f8:cc:8e:5d:2f:a2:33:b2:bd:fc:81:79:97:
88:81:b7:ef:21:72:28:ec:d9:71:0f:b5:b2:dc:04:12:0c:4d:
0c:6f:81:66:9b:22:8a:87:cd:3b:a1:c2:34:ed:f7:33:34:f2:
4c:96:63:2c:83:82:c6:8a:02:7f:46:7d:06:4c:4e:50:8c:d9:
2a:a5:11:00:5d:cd:81:23:47:77:5d:cb:dc:83:92:be:05:46:
ad:63:94:88:67:a5:ec:37:56:fa:09:70:d3:8b:51:93:8f:5e:
d2:ad:e8:de:e1:de:10:93:f0:5f:2b:88:90:9e:b0:f1:4c:b4:
eb:aa:18:9d:83:8d:74:4d:50:ee:0b:71:69:91:94:7e:ce:72:
86:28:9c:83:f1:ed:8a:d6:4b:92:0d:3b:1f:7b:20:25:c4:a3:
75:72:0c:e4:56:e4:95:1e:19:c4:2e:3d:f4:ef:27:16:2c:0a:
6f:d7:b3:c2:1d:ac:fd:58:e4:91:6a:90:07:76:64:21:ee:8e:
16:97:47:a3:e2:6d:ad:69:a6:ba:cc:14:05:54:b1:39:ea:0a:
2e:36:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:05 2024 by rpki-client on console-ams.rpki-client.org