Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jFCzDCCO0pkLTyIeM-Ip9zuZCXM.roa
File: jFCzDCCO0pkLTyIeM-Ip9zuZCXM.roa (raw, json)
Hash identifier: /ohafINX8dlBunXey6Le0YfU5dGqB/2J7gj2d3wxbmQ=
Subject key identifier: 8C:50:B3:0C:20:8E:D2:99:0B:4F:22:1E:33:E2:29:F7:3B:99:09:73
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018E66F17A3EFFCB7BCA63E2181C73009F13
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jFCzDCCO0pkLTyIeM-Ip9zuZCXM.roa
Signing time: Fri 22 Mar 2024 16:14:45 +0000
ROA not before: Fri 22 Mar 2024 16:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 2a0a:8f40:4::/48 maxlen: 48
2a0a:8f40:5::/48 maxlen: 48
2a0a:8f40:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Mar 2024 16:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:f1:7a:3e:ff:cb:7b:ca:63:e2:18:1c:73:00:9f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Mar 22 16:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c50b30c208ed2990b4f221e33e229f73b990973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:f5:a7:d2:9f:52:a5:44:b8:ac:d7:cd:ac:
02:c2:d2:3b:12:c0:af:70:b0:5b:cd:64:af:37:d9:
c6:0d:46:34:22:f9:51:32:ba:70:e1:f3:b7:91:26:
f2:bf:7c:96:c7:a5:64:32:48:a6:8c:4a:4c:b5:37:
92:5c:bb:72:2a:d0:00:cf:a5:b4:4c:55:c9:69:fc:
94:38:38:4e:c7:86:cc:02:f6:f5:b1:0d:32:0c:e3:
c1:70:f2:35:65:30:97:24:8b:9d:0f:b7:03:73:d8:
ac:28:2f:8f:52:ec:97:5d:7d:e8:57:84:4b:ea:86:
c1:32:b1:3f:30:88:7c:1c:27:aa:58:f5:c6:a0:cf:
d9:04:6f:6a:1b:e1:72:11:3a:b8:70:b4:e0:ac:d2:
c2:50:f3:ab:fe:fb:44:d3:8b:e2:71:1b:28:4f:d2:
69:18:f8:0f:fc:64:bd:65:ff:b9:12:42:79:d1:62:
9d:1f:b9:f6:b4:29:2c:b8:10:4d:af:48:22:4a:e4:
26:cc:d5:c6:36:98:51:71:2b:de:a2:be:8a:1a:da:
ba:12:b0:cd:6c:a0:ba:3d:a2:1f:35:fb:20:1a:db:
68:02:23:04:17:78:98:c5:3a:9e:bc:a2:13:ca:92:
8b:ef:83:d5:75:91:38:e2:cb:f4:bc:78:28:3c:35:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:B3:0C:20:8E:D2:99:0B:4F:22:1E:33:E2:29:F7:3B:99:09:73
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/jFCzDCCO0pkLTyIeM-Ip9zuZCXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:8f40:4::-2a0a:8f40:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:3e:4b:51:3a:a8:ab:a6:cf:66:f7:de:56:71:b5:f2:23:ef:
83:74:a2:3d:fb:d5:b8:b7:2c:5a:64:2a:e8:df:bf:c9:96:b4:
85:95:04:ae:98:6f:84:45:02:fa:ee:fc:54:9e:9e:86:51:9b:
9f:9d:bf:f2:38:0a:5a:b5:61:67:83:b6:af:04:cc:13:e1:90:
55:17:f7:7e:35:7e:8c:79:b9:dd:3c:f3:8e:fb:8a:5c:9f:ae:
0c:b1:f8:21:09:5c:03:7c:af:55:68:33:ad:e6:e0:d0:84:79:
a2:f0:39:ac:47:e3:bb:93:a6:f7:bb:0d:ec:f8:d6:50:e6:ec:
d2:0d:f7:95:50:cb:0a:00:ac:5a:b1:95:18:67:dc:ee:ba:b2:
58:3f:17:f8:b0:c9:bb:a6:5d:0b:cb:3d:92:ff:c6:65:51:e9:
d4:71:32:c5:82:89:89:9f:15:b7:d4:b4:5f:49:65:e9:51:6c:
b7:34:2b:a2:83:bd:06:01:33:d7:ed:62:7c:8a:ce:56:b0:10:
f1:63:34:1a:7c:e4:fa:2d:d7:a0:e4:37:86:06:09:e2:21:dc:
64:9c:46:81:d1:b3:fc:a5:46:9e:1f:0b:5b:9f:d4:e3:cf:a9:
6c:95:ac:c5:b8:59:55:e2:0b:ea:e4:3c:35:71:8b:b2:38:a8:
79:c0:70:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:17 2024 by rpki-client on console-ams.rpki-client.org