Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/LD90gQNyPHqSI-fbXxmLdbvgs_g.roa
File: LD90gQNyPHqSI-fbXxmLdbvgs_g.roa (raw, json)
Hash identifier: yAfAAtogr0EeoQfK0+VryY18dtnRr8eQj60kcvOeqJY=
Subject key identifier: 2C:3F:74:81:03:72:3C:7A:92:23:E7:DB:5F:19:8B:75:BB:E0:B3:F8
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 018D45000FFD599DB1CAFCE22198B618A393
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/LD90gQNyPHqSI-fbXxmLdbvgs_g.roa
Signing time: Fri 26 Jan 2024 09:00:48 +0000
ROA not before: Fri 26 Jan 2024 09:00:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6206
IP address blocks: 2a0e:1c80:c::/48 maxlen: 48
2a0e:1c80:d::/48 maxlen: 48
2a0e:1c80:1b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 May 2024 20:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:00:0f:fd:59:9d:b1:ca:fc:e2:21:98:b6:18:a3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 26 09:00:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c3f748103723c7a9223e7db5f198b75bbe0b3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:e6:62:ea:37:55:ce:27:6f:12:96:77:70:
f8:9a:2e:c3:51:ef:3f:de:ba:94:8b:e3:7f:66:9d:
a6:ba:ce:5c:70:ff:1b:83:a6:75:f7:3e:77:0b:a5:
3d:29:02:08:f5:31:4c:df:43:b8:b2:23:b4:c7:45:
6a:9b:1c:48:98:d2:d1:26:41:7a:8e:6b:4c:9d:c7:
ed:98:fd:96:c7:58:08:b7:a2:f7:3d:77:14:05:c9:
09:5f:f3:4f:4d:f6:11:99:99:15:6f:c5:01:13:24:
25:64:d8:88:24:c3:22:73:85:00:ea:9d:f8:71:fe:
7c:85:e3:ad:dd:40:b1:67:66:75:f7:f9:f8:10:31:
ec:73:66:79:8e:13:d3:a0:2c:49:99:c6:26:c0:8f:
6c:93:fc:cf:be:80:7a:d8:e2:38:dd:cd:0d:6d:b8:
42:42:98:2c:25:09:88:43:a4:62:ed:8c:49:41:5a:
b4:19:de:6d:e6:75:98:7e:d7:72:3e:1a:a2:76:b8:
48:6f:80:44:a8:1a:fa:83:a2:cf:f2:3a:29:9c:a3:
40:4c:46:7b:7a:9f:0c:4c:17:5a:6f:88:e6:f1:6b:
ec:a3:5b:05:9b:bc:19:db:93:0e:a8:22:68:e4:3d:
64:3b:0b:33:05:4b:ed:0f:92:7b:f3:18:ba:12:da:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:74:81:03:72:3C:7A:92:23:E7:DB:5F:19:8B:75:BB:E0:B3:F8
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/LD90gQNyPHqSI-fbXxmLdbvgs_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:c::/47
2a0e:1c80:1b::/48
Signature Algorithm: sha256WithRSAEncryption
94:b0:9e:f2:b6:33:49:f7:d4:2b:82:19:2d:14:8b:c7:f5:6a:
e0:a3:59:3e:b2:79:45:65:fb:0f:53:ca:4b:a1:c5:3a:4d:45:
b3:bf:1d:63:51:d6:e3:bb:c0:bb:e5:1e:42:76:67:7a:42:86:
d1:6c:03:57:db:fc:5a:43:48:c8:f4:4d:71:2b:e8:7e:b2:60:
d2:65:0a:20:fd:7b:5e:ec:82:c8:c9:28:84:5a:3e:bc:ce:f0:
94:d7:ce:5e:27:ca:79:6a:f9:c0:75:16:cf:4f:fd:ed:48:57:
39:55:17:d2:b3:da:61:44:83:fe:b8:7a:b9:9e:6c:30:c7:88:
7e:2c:27:b9:25:d0:ab:bb:b8:cd:72:38:a6:89:26:e6:9e:45:
3f:ea:d4:f6:5a:a1:f9:7a:83:e8:e8:dc:95:67:f9:3a:e9:d9:
8b:55:0b:d3:86:82:e8:09:57:ba:b1:9b:cf:b4:ba:0e:52:2d:
bb:c2:be:f8:a3:e2:e7:c7:07:71:a1:c8:e5:79:40:b4:7f:64:
81:64:65:0a:d9:1f:ab:7c:0b:0d:d1:d5:1a:67:44:c1:1f:95:
d2:22:b2:e0:d0:a5:df:cf:ab:5f:63:33:3e:95:3c:ea:17:6a:
17:ec:0d:34:70:29:24:c9:83:5e:4b:ea:9f:ff:b8:8d:c7:34:
0a:41:cf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 21:46:10 2024 by rpki-client on console-fra.rpki-client.org