Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/og84zbCRLeQoaOY1DHVAuv7zZqw.roa
File: og84zbCRLeQoaOY1DHVAuv7zZqw.roa (raw, json)
Hash identifier: KYWVLk8CH3l0Wl8L332KQ6+0x6i01TbW39QCNDfoJfA=
Subject key identifier: A2:0F:38:CD:B0:91:2D:E4:28:68:E6:35:0C:75:40:BA:FE:F3:66:AC
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 01856F5DE863CA05DE97F1C1E5C9A018928E
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/og84zbCRLeQoaOY1DHVAuv7zZqw.roa
Signing time: Sun 01 Jan 2023 22:05:03 +0000
ROA not before: Sun 01 Jan 2023 22:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9053
IP address blocks: 2a0a:54c1:29::/48 maxlen: 48
2a0a:54c1:28::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e8:63:ca:05:de:97:f1:c1:e5:c9:a0:18:92:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 22:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a20f38cdb0912de42868e6350c7540bafef366ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:3d:c4:4b:ca:0f:63:f1:01:6f:5b:a3:6c:
58:30:7c:c2:f8:47:f9:d7:27:df:d3:dc:14:12:85:
ad:8a:84:d4:9f:e3:fb:f1:6b:f6:e5:a1:2f:85:81:
83:bd:8b:8e:6f:16:94:8d:46:bd:0b:cc:18:38:1b:
25:c6:92:a7:0f:9d:dd:28:ca:98:c8:98:03:d4:05:
78:ba:f6:cb:e5:72:0a:a2:fa:e3:cc:31:69:2b:7c:
b4:8e:15:ff:81:c6:37:1b:87:cd:c5:a0:31:42:25:
42:27:7c:ba:3c:3a:57:23:f2:56:55:56:0c:2f:f3:
e8:81:b3:86:a8:b6:ed:d4:56:b2:b7:f5:26:7f:21:
9b:08:ab:6b:17:f2:94:27:aa:61:46:46:cc:f8:06:
b9:61:3f:25:8c:df:38:43:a2:3f:24:6d:3c:09:45:
cd:1d:64:ad:ed:44:03:37:75:84:fd:9b:64:21:da:
c7:97:ce:5b:ab:bc:36:74:f2:53:a0:9f:a0:8f:cf:
cc:12:37:13:f5:c2:fa:d5:3a:4b:85:ba:cb:d7:e3:
02:f3:32:6c:33:f4:85:08:ff:d5:42:dc:1a:4e:b8:
bd:d2:bc:9c:01:55:b2:fa:cf:0a:8f:08:d3:68:2a:
8c:8b:00:aa:05:c1:35:98:db:11:c0:b3:21:18:47:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0F:38:CD:B0:91:2D:E4:28:68:E6:35:0C:75:40:BA:FE:F3:66:AC
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/og84zbCRLeQoaOY1DHVAuv7zZqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:54c1:28::/47
Signature Algorithm: sha256WithRSAEncryption
13:02:50:f8:2c:ac:dc:76:3c:b5:61:62:ea:5b:23:2e:e6:ee:
e1:a3:38:c2:df:9f:fa:dc:4d:bc:2d:84:0f:23:f5:62:e2:9c:
38:9b:2e:4c:8f:96:60:f1:c0:8e:3c:47:07:5e:98:dd:2c:51:
f2:79:d2:d5:1f:dd:6b:7b:82:5c:11:fe:04:ed:f4:e9:e2:d8:
2f:74:e5:64:6e:33:dc:98:98:87:06:67:3d:94:eb:26:2a:1e:
0c:13:be:fd:45:13:2a:36:eb:c5:7b:61:3f:f9:cc:1d:23:06:
63:e4:33:88:35:f6:a3:4d:07:d7:4b:fc:b3:94:01:75:b2:d7:
b8:8d:bb:84:a4:4b:47:9c:dc:fa:72:e8:f7:77:57:83:55:20:
d1:ec:87:a2:8c:9d:0d:01:dc:2e:58:6b:01:a8:cf:0a:b5:e1:
78:5a:e9:9d:0a:9e:07:d0:90:a3:f7:a4:e6:5d:e2:0c:d6:13:
87:d3:86:58:a5:ab:67:05:3c:cc:d1:bf:4b:ce:bd:93:12:5d:
28:ce:1c:22:82:1d:f4:ac:c3:83:b2:ef:4f:4c:89:83:3b:49:
a8:9e:95:c8:e3:76:fe:0a:17:87:00:14:57:ea:1c:f9:4a:c3:
55:20:72:ab:8b:20:83:6d:e6:b3:46:cb:2f:2b:7e:cf:24:44:
f2:04:d7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:56 2024 by rpki-client on console-fra.rpki-client.org