Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/4vToIOBzHKudX9GFVFBTBbsEaME.roa
File: 4vToIOBzHKudX9GFVFBTBbsEaME.roa (raw, json)
Hash identifier: P9eW6ZHdy9mwkDRYUDoRDrVHtANGNB6W/Y5zQ1XIfzE=
Subject key identifier: E2:F4:E8:20:E0:73:1C:AB:9D:5F:D1:85:54:50:53:05:BB:04:68:C1
Certificate issuer: /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Certificate serial: 0189B57C6FC32FDC22F40FE1F511BBE26482
Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/4vToIOBzHKudX9GFVFBTBbsEaME.roa
Signing time: Wed 02 Aug 2023 09:02:58 +0000
ROA not before: Wed 02 Aug 2023 09:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211810
IP address blocks: 2a06:8184:ff04::/48 maxlen: 48
2a06:8184:ff14::/48 maxlen: 48
2a06:8184:ff07::/48 maxlen: 48
2a06:8184:ff02::/48 maxlen: 48
2a06:8184:ff05::/48 maxlen: 48
2a06:8184:ff00::/40 maxlen: 40
2a06:8184:ff08::/48 maxlen: 48
2a06:8184:ff00::/48 maxlen: 48
2a06:8184:ff03::/48 maxlen: 48
2a06:8184:ff06::/48 maxlen: 48
2a06:8184:ff01::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:7c:6f:c3:2f:dc:22:f4:0f:e1:f5:11:bb:e2:64:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Validity
Not Before: Aug 2 09:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2f4e820e0731cab9d5fd18554505305bb0468c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:24:dd:56:a9:6d:da:c9:c0:3a:88:11:7a:45:
d3:c3:ee:1c:d3:18:e4:fa:ab:d3:ba:7f:9e:eb:59:
a5:05:b4:3f:a4:76:8f:63:f8:6d:f5:fb:f9:fb:11:
99:c4:a7:26:df:12:12:7a:f1:a1:f5:59:6c:a2:0b:
6f:5c:c2:e6:9d:df:01:e4:94:9c:85:bb:8c:05:13:
3f:d1:bf:ad:ce:8e:6d:51:50:b7:ac:74:94:28:e6:
1f:2c:74:95:f9:4e:6c:51:f1:53:eb:df:d0:39:c0:
69:d5:d6:90:5e:d5:0e:40:8d:c0:88:3f:64:49:17:
dc:97:ad:ff:3f:48:f7:0d:84:cb:c9:66:ce:77:67:
57:5e:17:77:48:28:8d:b9:e5:8f:37:5c:cd:22:61:
fb:c3:97:32:10:33:8c:6b:a9:7d:a1:4d:e1:13:d0:
84:34:f0:d4:2b:56:55:ba:a9:ab:98:fa:bb:9c:9a:
76:be:b6:b0:12:38:d9:a5:a0:dd:db:51:c6:e2:ef:
c1:78:4f:fd:ee:0f:00:82:cf:8d:32:0f:0d:00:ac:
f0:13:c0:6b:2f:26:91:6e:42:47:21:b5:8d:21:dc:
53:a2:63:02:e5:8d:77:d5:4e:cc:9b:58:49:3b:4c:
f4:c3:b4:6a:99:18:ea:fc:e8:65:1f:bf:2e:b8:02:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F4:E8:20:E0:73:1C:AB:9D:5F:D1:85:54:50:53:05:BB:04:68:C1
X509v3 Authority Key Identifier:
keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/4vToIOBzHKudX9GFVFBTBbsEaME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:8184:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
38:1f:11:a1:3a:4c:ab:3a:74:69:72:99:78:51:34:90:4d:e2:
5c:a6:29:70:48:13:af:2d:ad:20:6b:c5:de:aa:85:9c:61:cf:
11:5a:da:fc:47:24:ab:e0:7e:0f:8f:30:29:d2:db:10:42:25:
08:a8:76:e8:ea:e1:52:45:39:29:db:a9:09:0b:22:e7:dd:62:
77:07:0b:1b:f9:49:c1:1a:2f:61:58:44:30:0e:c4:7b:e2:e8:
d7:04:15:96:63:19:3e:60:3e:75:9a:75:44:fd:28:d7:fb:86:
37:93:f2:b9:c5:f2:2d:a9:8f:76:ac:db:42:dc:40:bc:e9:53:
ba:01:1a:53:01:10:bb:a3:36:0a:37:2b:86:c2:94:51:8b:28:
a1:33:df:30:01:f7:49:ad:94:99:08:77:fa:29:cb:f5:c0:2a:
7a:1e:18:d7:6b:2a:94:9c:bf:a9:56:b3:c8:f8:73:30:14:bd:
2b:3a:fb:f2:57:92:35:35:55:6f:85:18:e0:f0:a3:de:b0:04:
b3:52:7c:db:e6:b7:15:68:97:f2:39:fc:44:cc:c2:35:75:a7:
4b:3c:4f:88:37:95:e3:67:91:0b:b2:0f:2b:da:02:18:e3:5b:
02:4c:10:69:0b:e9:ad:d1:52:31:a1:ae:54:69:42:e1:7e:1b:
41:2c:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:11 2024 by rpki-client on console-fra.rpki-client.org