Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/uLgXXjbhIDlBpWJ8pGVoxbwGT0U.roa
File: uLgXXjbhIDlBpWJ8pGVoxbwGT0U.roa (raw, json)
Hash identifier: qxtNyzF8ROD69n1NDNDmc2uVQdREBO61FaKtkkJEpxk=
Subject key identifier: B8:B8:17:5E:36:E1:20:39:41:A5:62:7C:A4:65:68:C5:BC:06:4F:45
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 01929450BC97250D6896DEECC779B554D8C8
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/uLgXXjbhIDlBpWJ8pGVoxbwGT0U.roa
Signing time: Wed 16 Oct 2024 07:52:51 +0000
ROA not before: Wed 16 Oct 2024 07:52:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50426
IP address blocks: 2a02:2455:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 17 Oct 2024 07:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:50:bc:97:25:0d:68:96:de:ec:c7:79:b5:54:d8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Oct 16 07:52:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8b8175e36e1203941a5627ca46568c5bc064f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:e6:5f:81:2c:30:c6:70:f9:a0:95:29:1a:
d2:84:46:60:06:c4:e0:e6:31:e2:3b:b6:43:bf:7c:
ff:a8:99:73:2d:a0:ac:01:85:06:3e:af:84:4e:4c:
e0:33:87:37:de:9d:84:8f:a6:db:73:8c:08:dc:de:
34:ba:89:3d:dd:a4:5e:e0:57:9e:74:57:e6:be:b8:
3c:db:87:8d:f9:30:92:47:c2:8e:68:05:44:14:16:
af:37:49:65:48:9f:0f:2c:2a:53:14:63:a4:82:19:
02:29:3b:6f:1b:88:de:33:0f:ff:bd:8d:ca:f5:b8:
8e:a4:59:fc:d3:f5:bb:9f:6d:10:09:e8:ac:88:74:
80:28:b7:47:65:56:f9:c1:64:b7:ca:d9:c8:40:e4:
ea:b9:4a:3a:e8:b9:72:86:08:f3:b7:45:58:be:74:
65:4b:f6:33:1f:79:71:21:dd:f6:25:51:ce:cd:cb:
49:c3:0c:6b:aa:15:4e:e1:8e:86:d8:05:3f:a9:82:
6b:66:78:85:5e:2b:8d:bf:2e:85:4c:49:73:b5:50:
9b:56:62:0f:55:ee:97:34:1c:42:f2:76:03:e2:db:
7c:9c:68:c4:46:01:a7:bd:28:25:5a:65:1b:20:fe:
9d:57:81:e1:09:6f:cf:ee:3b:22:56:d8:2a:2b:0a:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:17:5E:36:E1:20:39:41:A5:62:7C:A4:65:68:C5:BC:06:4F:45
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/uLgXXjbhIDlBpWJ8pGVoxbwGT0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2455:8000::/36
Signature Algorithm: sha256WithRSAEncryption
af:8c:94:9d:14:19:c9:83:df:fc:ad:1e:b4:7d:6a:41:cd:d1:
64:66:58:1b:82:4e:44:fe:3c:cb:11:e9:ef:09:b0:82:fe:ab:
09:22:3e:0f:f6:e5:3f:34:dd:8e:c6:29:fe:79:9e:63:40:7d:
0d:69:80:f9:d9:47:2a:d2:b4:c2:8c:7f:39:29:14:15:fe:9f:
a0:cc:f9:1d:bf:17:ba:ae:9e:62:14:8f:bc:b8:04:63:b2:ec:
ac:59:d5:48:42:b9:01:e0:0d:f5:29:40:78:a6:7c:1a:48:aa:
2f:15:ac:1e:a2:cb:80:2b:73:75:02:9d:6d:aa:0f:59:61:93:
fa:5b:40:7d:76:85:95:8f:5e:b7:55:fa:7e:50:28:50:d7:95:
ee:9f:69:df:eb:4a:3d:bd:e0:89:16:a5:b8:a5:71:ef:b4:d6:
ff:a4:1c:2d:f6:ff:61:d8:fa:46:2d:87:86:fa:d3:10:41:fd:
f9:0b:b7:4e:60:30:fc:f9:e4:a3:61:bf:f4:49:3d:a9:f2:59:
4e:bc:85:55:26:2a:6a:c1:7a:81:8c:64:a8:58:14:3e:fb:71:
31:64:95:fe:27:2b:42:93:34:11:3c:1f:1f:dc:c9:15:19:6e:
f4:73:33:38:ba:cb:d0:1c:60:be:f2:16:ab:14:89:b6:14:ba:
6b:42:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 09:01:38 2024 by rpki-client on console-fra.rpki-client.org