Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/g4G77a8OEPJjj9X_wC9cm6D6eUw.roa
File: g4G77a8OEPJjj9X_wC9cm6D6eUw.roa (raw, json)
Hash identifier: fmtCCnnDglsV1Q1tA6Cz3J0WhYz1jE365F0Sn0L3nBA=
Subject key identifier: 83:81:BB:ED:AF:0E:10:F2:63:8F:D5:FF:C0:2F:5C:9B:A0:FA:79:4C
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 018CC7950E92229BD678317CBB4B63C1217D
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/g4G77a8OEPJjj9X_wC9cm6D6eUw.roa
Signing time: Tue 02 Jan 2024 00:31:23 +0000
ROA not before: Tue 02 Jan 2024 00:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49697
IP address blocks: 2001:678:a00::/48 maxlen: 48
2001:678:964::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Mar 2024 11:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0e:92:22:9b:d6:78:31:7c:bb:4b:63:c1:21:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8381bbedaf0e10f2638fd5ffc02f5c9ba0fa794c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:8c:5f:bf:fb:69:53:14:aa:79:d9:a1:c9:
0d:3a:48:33:7a:bb:0e:aa:58:73:66:86:bc:cd:18:
cc:f2:4c:b1:8c:93:c7:40:9b:4a:4f:a8:dd:01:df:
d0:64:29:bf:e0:a8:72:f9:e6:83:c1:83:c7:12:59:
b0:8d:82:17:04:db:5c:aa:25:20:88:79:a0:ee:7d:
b9:b9:3e:a5:f8:6b:52:44:96:33:0c:49:e8:3e:be:
c5:b5:34:f2:e0:34:ac:a1:69:92:b8:36:0a:dc:9d:
ea:ce:c4:98:08:38:b7:d8:d6:d3:15:84:7d:f4:c7:
38:90:44:29:80:f8:f9:f6:58:17:ec:41:25:23:aa:
4e:1b:19:ae:1a:6d:ed:36:93:f3:80:2c:e4:b0:e1:
db:b7:7a:88:a3:f1:cc:3b:e1:b9:68:17:65:27:23:
98:08:bc:13:5b:25:31:77:56:10:64:dd:2a:11:2b:
c1:e0:0b:13:61:53:e8:3a:34:c4:44:68:13:fb:b7:
44:0a:15:ef:fe:33:b7:10:f2:10:eb:ea:90:aa:d1:
57:d5:82:53:3f:51:58:41:93:a0:24:25:b1:b7:28:
8a:ae:ed:a5:b5:a5:35:17:38:ec:63:34:e8:63:18:
7b:fc:b5:e2:98:84:32:a5:28:41:a7:c0:40:00:08:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:81:BB:ED:AF:0E:10:F2:63:8F:D5:FF:C0:2F:5C:9B:A0:FA:79:4C
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/g4G77a8OEPJjj9X_wC9cm6D6eUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:964::/48
2001:678:a00::/48
Signature Algorithm: sha256WithRSAEncryption
93:6a:25:74:be:1a:cb:69:10:d8:a6:b2:07:7e:d2:72:b4:19:
1c:ab:80:fb:51:c3:f2:c1:4d:8d:ab:8b:5d:da:7b:d8:e8:dc:
1e:96:70:e5:c0:42:f7:b5:84:4c:46:93:73:83:22:66:bc:e4:
3d:78:b2:fa:be:c0:3b:4b:86:d5:56:0d:62:d0:f1:4a:2a:a7:
84:26:fd:e6:2d:af:7f:34:9a:66:4d:6a:9a:54:30:95:0a:1f:
db:8f:28:9b:df:a4:9b:06:bd:0e:f3:cf:8d:d5:1c:c7:c7:7b:
ad:2f:86:f9:6e:ac:5e:a0:15:d1:09:25:63:0c:3d:32:2f:3a:
42:5f:b2:81:55:e9:58:69:8e:a1:de:aa:61:82:20:d3:d4:d1:
ca:15:6d:73:6c:f6:82:f1:5f:47:17:a6:71:c0:32:a0:56:26:
77:06:0f:b7:3e:e9:41:f8:18:83:53:50:19:93:c3:bd:e0:43:
7a:58:16:de:ea:30:9f:b2:9d:43:62:c5:92:b1:b8:5c:c2:85:
06:2f:59:37:32:c4:de:04:4a:e6:72:c3:3a:fb:bf:71:ff:e1:
34:d7:a5:3b:88:33:71:11:cc:45:c6:58:07:16:37:89:f1:6f:
14:4f:29:c0:5a:2b:b0:2f:8c:c2:af:18:16:08:cf:99:1f:fd:
af:a8:ee:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:52 2024 by rpki-client on console-ams.rpki-client.org