Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/JFSQbSAyqF2WYo2pFaMaUsKoW6Y.roa
File: JFSQbSAyqF2WYo2pFaMaUsKoW6Y.roa (raw, json)
Hash identifier: gVpjQc+Mn3Z5sMaK0Xq4xDUQ7VAY3rqWi24ZYQYwyqU=
Subject key identifier: 24:54:90:6D:20:32:A8:5D:96:62:8D:A9:15:A3:1A:52:C2:A8:5B:A6
Certificate issuer: /CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Certificate serial: 018F81B757327551961057EFE97F45A6704B
Authority key identifier: 62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/JFSQbSAyqF2WYo2pFaMaUsKoW6Y.roa
Signing time: Thu 16 May 2024 14:03:47 +0000
ROA not before: Thu 16 May 2024 14:03:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 2a03:e080:aaaa::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 May 2024 13:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:b7:57:32:75:51:96:10:57:ef:e9:7f:45:a6:70:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Validity
Not Before: May 16 14:03:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2454906d2032a85d96628da915a31a52c2a85ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:35:6a:ee:a9:18:e8:4f:18:8f:aa:e0:6e:
33:ea:70:a3:a6:40:fd:c3:cd:bd:b5:a0:ea:8d:c4:
47:88:64:5b:ec:58:cd:f4:11:c2:af:1c:5f:10:61:
b5:ab:2c:8c:59:f1:b9:a1:cb:e1:84:a6:a6:77:34:
08:9b:bc:c5:cb:6a:7c:69:63:fb:f9:52:93:8a:40:
a4:18:a6:7b:75:8e:4b:4f:a2:fd:c8:87:a6:56:bc:
2c:e8:b0:66:86:8e:7f:fb:a5:88:ea:cd:4a:b1:e8:
7d:a9:ca:3c:45:42:29:cd:77:a9:c0:6a:4a:6c:91:
9d:e5:4f:2e:61:32:fa:bc:11:2b:f1:28:8a:de:9e:
42:e1:82:63:47:31:4d:b7:b2:0b:f6:5a:0e:b7:ff:
24:8e:95:80:59:c5:e1:45:99:51:24:19:40:a1:a6:
b3:67:a2:b7:70:38:5e:f2:7b:6f:ca:cb:e5:3f:91:
69:f3:b2:cb:bb:9d:3f:27:2d:4b:43:44:de:a9:af:
55:32:6a:f5:33:cd:cb:40:cd:3c:71:b2:67:17:45:
89:d7:41:ff:1e:4e:62:f1:28:42:af:9e:a6:99:75:
ab:1b:c1:ed:36:a4:30:b9:be:45:58:11:6d:0f:a5:
36:ca:1b:72:4b:ad:a9:85:56:2e:62:02:4a:ae:37:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:90:6D:20:32:A8:5D:96:62:8D:A9:15:A3:1A:52:C2:A8:5B:A6
X509v3 Authority Key Identifier:
keyid:62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/JFSQbSAyqF2WYo2pFaMaUsKoW6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e080:aaaa::/48
Signature Algorithm: sha256WithRSAEncryption
50:0d:33:29:d5:da:9c:03:67:ba:de:db:62:76:26:e6:fe:b3:
52:da:77:f9:64:36:53:d8:95:55:66:69:e9:11:6d:31:c8:ce:
93:96:cd:03:cb:f3:41:c6:ab:45:f6:a2:06:ec:f7:28:03:60:
23:da:db:b7:c9:ad:ec:cb:b8:f3:ce:40:4b:1b:04:6c:92:54:
f3:66:1d:f6:f2:6a:14:c4:dc:67:13:7b:ed:5b:a0:9c:2b:ac:
d8:45:1f:28:e0:e9:05:ad:2c:c5:be:14:3a:dc:3d:c5:4e:11:
f3:db:c0:73:30:2a:a1:70:62:0c:5c:2b:8b:eb:10:9e:d0:fe:
db:db:10:67:4c:fa:58:82:f0:67:6b:5d:ba:20:87:2d:1c:68:
59:dc:2b:57:ee:7c:d3:6f:d6:47:4c:0d:fe:67:6a:d4:e6:75:
0b:83:17:7b:62:08:dc:e1:8e:1e:93:23:e8:26:fb:f4:ca:5d:
b8:55:ea:3e:b2:d1:ee:fb:90:48:03:3a:50:88:35:ce:cc:a4:
21:62:ea:c5:f6:82:f2:69:47:a8:b1:17:9c:57:67:c8:01:29:
b9:f5:63:23:92:ee:73:4d:ec:df:be:22:de:7b:8b:8d:fa:61:
5d:03:76:4b:58:14:99:14:e3:06:8f:3a:bb:0d:ba:72:18:24:
52:bc:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org