Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/Cs7_qN8tb6EO3r3DMtR8tsSaz5A.roa
File: Cs7_qN8tb6EO3r3DMtR8tsSaz5A.roa (raw, json)
Hash identifier: 1okWlCA/lYdw20Mmn4vUJr0rKvsohvAkbs2ooIj+MVg=
Subject key identifier: 0A:CE:FF:A8:DF:2D:6F:A1:0E:DE:BD:C3:32:D4:7C:B6:C4:9A:CF:90
Certificate issuer: /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial: 01914D469F7A2A2A3D4D01A6800222EA1E2D
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/Cs7_qN8tb6EO3r3DMtR8tsSaz5A.roa
Signing time: Tue 13 Aug 2024 19:45:59 +0000
ROA not before: Tue 13 Aug 2024 19:45:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395747
IP address blocks: 2a09:bac0:108::/48 maxlen: 48
2a09:bac0:131::/48 maxlen: 48
2a09:bac0:133::/48 maxlen: 48
2a09:bac0:693::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 Aug 2024 23:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:46:9f:7a:2a:2a:3d:4d:01:a6:80:02:22:ea:1e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Validity
Not Before: Aug 13 19:45:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0aceffa8df2d6fa10edebdc332d47cb6c49acf90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:27:c1:db:80:02:a1:fc:4c:39:c3:08:18:
41:b0:05:5c:93:03:ca:b3:7e:a1:53:a2:be:9a:ef:
dc:44:0a:14:5f:e3:cb:cc:89:0e:4a:7e:f3:22:aa:
19:1e:49:5e:05:c4:51:12:9f:0f:9e:bb:75:e0:e5:
b7:a3:a4:0c:1c:d3:da:1b:00:63:db:fa:2c:b1:c0:
10:0c:70:60:d0:e9:18:39:dd:02:84:b5:59:d0:16:
c6:d6:12:d9:c5:b7:d8:1f:7b:ce:d5:a0:f4:48:17:
c4:54:47:7e:e1:8b:61:da:0c:a2:a8:64:41:d8:4f:
6a:a3:0d:2e:df:a2:11:81:0c:78:05:38:ed:eb:e4:
87:76:31:26:c0:4f:8e:1e:79:39:a3:43:1a:2d:25:
02:72:6d:b2:5e:cd:c7:c8:ec:74:e9:52:2a:72:91:
74:2f:1e:03:96:47:3f:49:3c:49:7b:89:7c:55:df:
61:9b:ec:fc:ff:43:75:c6:15:9f:e6:2c:32:28:2f:
ad:84:ff:72:ee:a1:68:86:0a:7e:92:09:a7:04:f6:
f3:50:91:28:74:4a:38:c2:c2:82:33:e1:cc:f9:98:
39:8d:16:38:5d:84:b9:de:57:f6:20:5d:ee:06:ff:
62:5b:7d:84:c2:47:68:ff:be:76:c8:46:ad:65:88:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:FF:A8:DF:2D:6F:A1:0E:DE:BD:C3:32:D4:7C:B6:C4:9A:CF:90
X509v3 Authority Key Identifier:
keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/Cs7_qN8tb6EO3r3DMtR8tsSaz5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:bac0:108::/48
2a09:bac0:131::/48
2a09:bac0:133::/48
2a09:bac0:693::/48
Signature Algorithm: sha256WithRSAEncryption
33:d9:42:33:3c:70:96:29:07:33:12:61:c1:df:5a:41:60:fb:
4a:20:4a:22:ca:76:ba:59:e3:d5:b7:f3:fc:20:64:7c:0a:80:
ec:26:37:33:ee:2a:a4:e3:26:61:22:fa:de:95:33:c7:43:0f:
1e:6f:af:72:89:5f:f4:ec:76:db:14:12:96:ba:37:a3:43:59:
5f:90:9a:03:d4:9b:d2:20:08:54:5a:d4:77:c4:63:2e:a9:95:
9b:5e:a9:71:ac:e1:b1:7d:8a:cc:f0:40:d8:39:6f:f8:1f:5a:
aa:e6:16:eb:37:0d:a6:61:5e:3e:a6:ef:94:67:cf:de:47:24:
38:01:c5:bd:cf:d1:25:a2:75:6a:9a:b5:78:f5:fd:7c:2a:8c:
ce:f5:9d:51:d7:90:2e:d6:3a:d1:41:1c:88:79:06:13:8f:d1:
1b:99:d5:2d:f5:f3:8d:60:74:33:40:fb:b5:dc:16:b0:39:3e:
b7:52:5b:c2:d0:60:6a:8c:06:f6:a5:29:70:9b:14:59:fd:b2:
6c:54:1c:af:0a:67:cc:52:b4:30:c4:35:3b:80:97:d3:f0:6d:
34:26:8f:86:cd:74:2e:ed:ec:2a:d5:33:87:69:1b:51:5b:8d:
ea:82:0c:74:12:c0:cd:0b:37:8d:34:1a:13:28:59:86:e0:d3:
e2:77:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 00:24:18 2024 by rpki-client on console-ams.rpki-client.org