Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jOyy2R6nYLg_YplX71Xu7ZMdTR8.roa
File: jOyy2R6nYLg_YplX71Xu7ZMdTR8.roa (raw, json)
Hash identifier: wS2kLLWwGSinHojct9IOutPl7ZnrrGvbOGUIadhheJ4=
Subject key identifier: 8C:EC:B2:D9:1E:A7:60:B8:3F:62:99:57:EF:55:EE:ED:93:1D:4D:1F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018D036B052D1940BCE4CC88B0A58F5099B4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jOyy2R6nYLg_YplX71Xu7ZMdTR8.roa
Signing time: Sat 13 Jan 2024 15:22:41 +0000
ROA not before: Sat 13 Jan 2024 15:22:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215730
IP address blocks: 2a0e:d604:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Jan 2024 16:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:03:6b:05:2d:19:40:bc:e4:cc:88:b0:a5:8f:50:99:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 13 15:22:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cecb2d91ea760b83f629957ef55eeed931d4d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:01:ca:9a:5e:a1:94:43:c4:17:6e:7d:5a:
26:ba:73:6d:03:33:a7:60:b1:f7:05:20:77:b4:d7:
89:e7:d8:a6:9f:d2:2d:e0:fc:d1:56:65:b8:4d:5d:
00:3d:1d:33:bf:6b:9a:e8:09:54:2e:e8:ef:fa:29:
86:b7:88:ed:6e:cc:ed:04:88:88:d0:c9:e3:99:64:
46:ec:18:91:69:15:26:eb:13:d3:55:a5:c2:f9:80:
50:75:52:43:69:58:95:59:ec:f5:70:10:9c:9f:c2:
0e:fd:85:56:26:15:b0:83:47:05:2c:43:91:ab:ba:
37:66:5f:74:ce:21:ff:18:8a:1f:b2:32:99:36:bb:
f8:f7:72:5c:92:58:84:a2:64:1b:60:05:e4:60:33:
93:c0:f8:e4:c4:00:d8:40:0b:e7:ac:ac:0e:2c:c9:
df:fa:7f:2b:e7:ef:9e:e9:34:c0:e2:8e:3f:9e:13:
85:c7:50:24:87:9b:55:6f:75:c2:f6:34:e8:50:8a:
0c:ac:49:52:d8:9a:9d:30:22:55:b7:ae:37:a4:19:
22:ef:d2:ff:60:8e:bf:0f:66:27:3c:15:72:7d:d2:
46:39:c1:24:7e:a4:c2:06:01:74:ba:6f:a3:ac:5d:
62:84:ee:04:e5:9f:99:8a:c9:a7:73:ae:b2:d5:e5:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:B2:D9:1E:A7:60:B8:3F:62:99:57:EF:55:EE:ED:93:1D:4D:1F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jOyy2R6nYLg_YplX71Xu7ZMdTR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d604:1::/48
Signature Algorithm: sha256WithRSAEncryption
6d:b8:51:bd:3e:e7:fd:ca:03:22:87:9d:5f:da:46:65:61:70:
89:ed:5e:72:3a:fe:4d:f1:9b:83:aa:5c:15:6d:00:a4:ef:98:
26:6d:4a:6c:c7:b5:59:35:15:f9:41:7f:c0:05:03:29:a1:0a:
53:4d:62:56:94:2b:86:bd:cd:47:b2:a4:5e:e9:a0:c4:86:0a:
13:e0:a0:44:2a:46:c9:36:78:ae:aa:9c:86:c0:85:e1:97:58:
b1:ae:e0:ef:4e:e1:01:88:12:34:45:df:cc:9e:9b:d4:68:bf:
eb:da:4b:a7:60:aa:ed:29:e2:b9:28:5e:5b:31:fc:6b:03:0c:
7c:2c:d9:92:35:72:f8:f7:ff:46:c2:13:7f:1a:8e:43:21:8c:
24:67:15:b5:2c:9a:f9:17:ad:ff:bc:f6:83:f3:a9:5f:61:0c:
5b:f5:dd:a4:42:ff:92:5d:ca:24:61:30:56:97:eb:72:6a:24:
92:7d:23:6f:13:24:d6:0e:ed:0c:37:aa:cc:7b:69:d7:e1:4a:
7b:16:68:d9:ab:5f:28:34:4f:3a:4c:ca:6e:37:21:46:ac:6e:
3b:a2:47:d1:6d:ac:0f:e0:4c:19:c8:0d:c8:e1:7a:fe:46:47:
07:6c:22:bf:d0:d0:e7:01:1d:c9:be:07:da:55:8b:58:5a:7f:
df:f3:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 17:28:44 2024 by rpki-client on console-ams.rpki-client.org