Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/T3S_F3Muqsy7glglwZvHyFz4TvQ.roa
File: T3S_F3Muqsy7glglwZvHyFz4TvQ.roa (raw, json)
Hash identifier: i3uCXSCtmp8IEDwRvPACOvUF5hhlbVuRAGQY39YwFA4=
Subject key identifier: 4F:74:BF:17:73:2E:AA:CC:BB:82:58:25:C1:9B:C7:C8:5C:F8:4E:F4
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 018DCBC8AD70197E1C09F9643A3F2A65C6A4
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/T3S_F3Muqsy7glglwZvHyFz4TvQ.roa
Signing time: Wed 21 Feb 2024 13:09:02 +0000
ROA not before: Wed 21 Feb 2024 13:09:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216213
IP address blocks: 2a0c:34c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 07 Jul 2024 15:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:c8:ad:70:19:7e:1c:09:f9:64:3a:3f:2a:65:c6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Feb 21 13:09:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f74bf17732eaaccbb825825c19bc7c85cf84ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:46:b6:1e:7a:15:2a:f4:8b:68:e0:66:e7:
38:d5:dd:b7:c5:16:79:d6:63:a1:16:3c:21:ba:44:
6a:0d:cd:38:4f:95:4f:b1:4b:e7:e9:e5:e8:ef:12:
e5:bd:b3:e5:85:2e:16:2b:77:b5:ff:57:51:61:89:
65:8c:a2:c8:2f:a0:97:68:12:d0:84:89:11:d1:52:
48:3f:89:5a:f2:77:94:df:a7:5f:70:b7:b7:83:74:
ac:6c:3d:a8:b2:0a:f1:cb:e6:c3:9b:df:48:03:86:
ec:dd:be:97:fa:52:27:c6:6f:01:fb:18:41:2f:1b:
1c:45:08:2c:95:61:0e:13:6e:d8:b3:4f:70:2f:f5:
82:2c:34:da:40:8d:b4:fd:4b:8c:9c:24:05:49:44:
94:27:9d:d0:90:62:ab:79:a9:f9:37:ed:c8:68:76:
19:5c:a7:a0:51:7d:35:5a:3f:9a:7d:4b:28:33:10:
ce:ec:83:a0:cf:d3:dd:8a:32:3b:00:cb:25:ad:6b:
a8:54:51:a7:11:63:a2:29:fd:2d:bf:c4:7c:7f:c6:
9c:10:71:b8:f9:3f:be:e2:a1:df:77:e4:6c:17:a6:
b1:42:46:80:ac:4e:26:b3:90:29:84:18:14:89:dc:
e4:48:65:40:78:f0:c7:78:1a:2d:96:6e:f7:a7:46:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:74:BF:17:73:2E:AA:CC:BB:82:58:25:C1:9B:C7:C8:5C:F8:4E:F4
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/T3S_F3Muqsy7glglwZvHyFz4TvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
90:a9:7a:1c:b7:b5:f9:af:93:fb:e7:bc:f6:0d:45:2b:df:be:
bd:38:5f:84:4f:bd:7c:10:f7:5c:46:b3:1e:4b:b9:d7:9d:64:
82:7b:f1:1f:85:4d:e8:03:d8:a0:34:89:60:a3:76:2b:43:f3:
7f:77:45:fe:a3:df:6f:9b:4f:74:9a:fb:26:43:91:8c:48:d9:
a4:98:87:37:af:b3:a1:78:33:46:7c:e8:f6:cd:a3:ae:36:45:
c6:45:53:b0:3f:66:2a:74:dc:e0:7d:53:42:a8:f3:63:68:f6:
2a:fc:bb:d2:bd:10:c2:04:15:79:03:ca:79:3e:fa:07:7e:29:
17:10:e7:d8:88:29:0c:a9:d1:6a:63:d3:68:fb:e5:6a:ab:ca:
57:26:a2:c7:d3:93:1e:f5:4b:b2:23:ae:da:e2:85:d3:e6:8d:
c5:f2:c9:2f:9f:14:76:6f:fc:07:db:1f:ea:ea:0a:c4:f1:be:
8b:2c:f1:34:ca:1a:8e:21:7a:9e:40:28:b2:ff:e6:a1:d4:a8:
74:57:5a:d0:2b:d7:d9:08:21:bc:d0:33:cc:01:f0:79:94:ea:
19:54:af:a4:b2:3b:32:86:16:ed:f7:87:5a:27:c1:9d:9a:83:
42:95:53:62:d7:ca:14:24:11:5a:14:4e:eb:e9:33:bb:b8:63:
53:b5:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 17:38:36 2024 by rpki-client on console-fra.rpki-client.org