Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/jck1dUtYnnmWaXVZRjNUb_RWfpg.roa
File: jck1dUtYnnmWaXVZRjNUb_RWfpg.roa (raw, json)
Hash identifier: Ep/4y/vvE4XHUOvEIsh7svFYiYj2xM6zYTfQIurYuzg=
Subject key identifier: 8D:C9:35:75:4B:58:9E:79:96:69:75:59:46:33:54:6F:F4:56:7E:98
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018CC3B6AE4B57F922340F4F3A9827A2027F
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/jck1dUtYnnmWaXVZRjNUb_RWfpg.roa
Signing time: Mon 01 Jan 2024 06:29:38 +0000
ROA not before: Mon 01 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 2a07:3502:10c0::/48 maxlen: 48
2a07:3502:1060::/48 maxlen: 48
2a07:3500:12f8::/48 maxlen: 48
2a07:3500:15c0::/48 maxlen: 48
2a07:3500:1240::/46 maxlen: 46
2a07:3501:1340::/48 maxlen: 48
2a07:3502:11a0::/46 maxlen: 46
2a07:3502:10a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 13:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ae:4b:57:f9:22:34:0f:4f:3a:98:27:a2:02:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 1 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dc935754b589e79966975594633546ff4567e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:8c:56:ea:8e:a3:19:4a:c9:4a:7e:ce:30:
14:3d:86:9c:d5:c6:63:e3:1c:1f:3a:96:e5:12:3a:
89:7b:18:a9:d2:77:11:86:c7:6d:7f:36:6d:7a:62:
7b:4b:34:6b:17:b7:df:ee:2e:9c:82:d3:e1:bd:eb:
86:3a:a5:1b:a2:a0:66:67:99:b1:11:ba:3e:99:d8:
80:10:c6:84:b7:c9:f4:0b:05:15:c9:2c:06:6d:98:
3f:b2:5d:83:0a:b3:d4:07:72:e7:2d:67:81:6e:02:
c6:a4:cc:19:c4:af:a0:3f:04:cd:0b:9c:68:49:9d:
0f:b4:82:89:e7:a6:4a:b5:f8:f6:da:48:5b:ea:23:
f3:96:ca:9a:57:62:6f:a9:f6:c1:d0:5a:13:47:2c:
9e:9d:84:da:de:4c:f3:04:50:87:91:78:ec:b9:9f:
e5:92:60:a2:a9:cf:c5:1a:8b:41:bb:4b:bf:20:b7:
85:1e:06:7d:4e:20:7b:27:c7:99:0d:19:07:11:05:
a0:c2:24:28:3b:1f:e8:35:7e:46:ac:da:d4:8c:d3:
98:64:33:04:1a:b7:22:2b:1c:6a:df:86:01:c2:b0:
c6:61:43:bc:41:d2:63:59:72:cf:94:5b:52:1f:5f:
0c:1c:a0:96:d9:f6:31:e9:60:0f:23:d8:bb:54:5e:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C9:35:75:4B:58:9E:79:96:69:75:59:46:33:54:6F:F4:56:7E:98
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/jck1dUtYnnmWaXVZRjNUb_RWfpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1240::/46
2a07:3500:12f8::/48
2a07:3500:15c0::/48
2a07:3501:1340::/48
2a07:3502:1060::/48
2a07:3502:10a1::/48
2a07:3502:10c0::/48
2a07:3502:11a0::/46
Signature Algorithm: sha256WithRSAEncryption
93:be:89:7e:aa:04:26:6d:55:ac:d3:a8:a7:05:70:c4:ba:4e:
a0:02:0e:0e:36:bc:36:bf:dd:3d:f7:20:cc:a4:ad:d9:44:15:
aa:7c:e6:d6:6c:3b:83:a7:51:2c:85:4b:d1:bb:33:05:32:38:
02:5d:4f:ec:80:e3:9f:e6:d6:e0:67:99:8d:06:9b:93:af:d0:
84:c6:f6:8a:70:03:df:07:8e:cd:0c:7d:9c:8b:01:93:e6:87:
0b:f9:b6:83:12:b8:d4:1d:f6:24:4a:d0:28:b3:b2:bb:f8:e7:
dd:1c:31:a2:1f:c9:8f:dd:a0:3c:c4:06:82:38:c7:89:ec:c8:
64:5e:05:3d:b2:47:64:23:50:e5:8b:11:22:ab:e2:f4:38:6c:
75:80:04:12:62:ff:07:c0:b8:10:e5:8e:99:26:a9:81:61:0c:
5d:6b:7c:57:01:a2:ff:06:a5:d7:28:83:2e:30:ed:07:8b:b8:
74:91:c3:9c:57:ce:6f:38:81:bc:4d:e6:98:a3:b0:50:23:6e:
34:5a:43:2d:72:23:66:0a:94:dd:b9:42:8f:f6:0f:f7:6b:a7:
9c:21:ed:ea:87:26:8c:71:64:2b:09:10:03:3a:11:33:57:ce:
0d:64:a0:01:2f:ff:49:fb:09:98:49:21:4a:62:0c:af:62:64:
89:df:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org