Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/tL2kYa0lTzBUM07VvETVDFZpgrE.roa
File: tL2kYa0lTzBUM07VvETVDFZpgrE.roa (raw, json)
Hash identifier: Em+TIbLBi09Pr8wMkKKMB2OQW6ES2HLhw7iql4NUjVs=
Subject key identifier: B4:BD:A4:61:AD:25:4F:30:54:33:4E:D5:BC:44:D5:0C:56:69:82:B1
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 018EF206F5A1FCCDD4C5ED9DEF456FCEFDA4
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/tL2kYa0lTzBUM07VvETVDFZpgrE.roa
Signing time: Thu 18 Apr 2024 16:25:26 +0000
ROA not before: Thu 18 Apr 2024 16:25:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47536
IP address blocks: 193.105.29.0/24 maxlen: 24
2001:678:a00::/48 maxlen: 48
2a12:79c2::/32 maxlen: 32
2a12:79c3::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 15 Jun 2024 16:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:06:f5:a1:fc:cd:d4:c5:ed:9d:ef:45:6f:ce:fd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Apr 18 16:25:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4bda461ad254f3054334ed5bc44d50c566982b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:93:26:9f:b6:9d:99:f3:20:9d:85:2a:50:
a1:2f:96:1d:d8:25:2d:5a:0a:78:83:bf:d3:3e:2f:
18:8c:e6:a9:2d:d0:db:3f:1c:66:cb:ca:7a:dd:51:
fe:82:7a:81:69:52:c6:c6:a1:7a:3f:b6:20:3b:89:
3e:4a:c3:68:4d:55:0b:8c:84:4a:8d:5a:fd:bb:2c:
26:75:40:1f:7a:1c:40:7b:67:52:d9:ef:f4:9e:f5:
90:af:49:9e:b2:77:da:76:ed:0b:72:36:3e:6d:ce:
a9:ef:a5:72:18:50:93:ff:a8:22:2d:bf:3d:7d:b9:
ca:ee:1a:4e:ee:c3:9c:73:f1:68:fe:f1:af:d2:82:
cf:8c:cb:fd:5c:fb:57:c6:7a:93:c2:29:04:47:6a:
a9:f0:c5:42:e3:2b:ae:1c:22:1f:97:ff:4d:0b:59:
bf:be:81:e9:e5:a6:b8:f9:44:98:51:5d:b2:ba:ed:
7a:5f:24:64:1b:b5:91:6e:74:0e:b5:9c:7e:6e:57:
2f:84:70:d4:68:d6:a0:20:5d:d2:c5:c6:ff:05:3d:
25:3d:ca:1a:06:88:41:c6:11:fc:91:ec:1a:a1:ef:
cf:42:bd:71:39:a1:98:f4:6e:22:4f:85:94:5f:13:
9a:13:84:a3:27:a4:81:10:ec:c9:84:65:65:44:4d:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BD:A4:61:AD:25:4F:30:54:33:4E:D5:BC:44:D5:0C:56:69:82:B1
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/tL2kYa0lTzBUM07VvETVDFZpgrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.29.0/24
IPv6:
2001:678:a00::/48
2a12:79c2::/31
Signature Algorithm: sha256WithRSAEncryption
04:9b:70:f1:a1:2f:d0:e2:fe:49:6c:40:f3:02:54:f6:aa:f2:
47:13:50:10:34:84:5d:c1:3f:5b:14:bd:15:a7:dd:d1:bd:da:
aa:98:ac:70:89:0a:49:71:55:17:36:3a:83:61:32:a9:4f:05:
ad:db:8d:00:b2:a7:bb:8b:1b:cc:f8:c8:3c:6c:98:ad:45:fe:
07:f0:14:3a:53:74:8e:6a:c9:18:d8:cb:21:e0:6b:09:9a:e5:
3c:29:73:4f:b0:63:e0:16:0b:a6:49:2d:b1:c4:d3:a9:2f:26:
21:1a:58:81:25:52:22:4c:9b:cf:65:61:63:7a:62:c2:5b:c0:
06:52:5e:9e:94:a7:15:74:13:b9:df:81:43:41:84:9c:27:1c:
85:1e:d8:31:bb:ba:d8:d3:f7:10:0d:56:4a:99:c2:85:12:67:
c0:ce:57:74:a2:8f:c6:ba:2a:de:2c:b4:32:2d:7a:05:99:65:
64:57:15:cc:fc:45:49:89:02:60:b5:23:9b:4a:65:c4:41:04:
ad:f6:91:2b:d3:5a:0a:74:6b:e3:6e:a2:64:77:2f:66:2a:06:
29:c1:d0:7a:11:f0:c6:f2:56:7b:2d:2d:af:ad:f2:33:be:38:
c6:1a:c0:76:1f:dd:80:18:a6:9e:29:a8:ad:15:21:51:ac:35:
5c:d9:f9:b3
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 15 17:00:20 2024 by rpki-client on console-fra.rpki-client.org