Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/_4zLUBOFEAkBnSkP-oVgS4dRLPc.roa
File: _4zLUBOFEAkBnSkP-oVgS4dRLPc.roa (raw, json)
Hash identifier: 2l+Z/ceNWmiZvSUuNJWpHbjacwi31zk6Qoa1A1pxQuo=
Subject key identifier: FF:8C:CB:50:13:85:10:09:01:9D:29:0F:FA:85:60:4B:87:51:2C:F7
Certificate issuer: /CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Certificate serial: 01856F4B82A16E6F9F0A5146135599EBE3A2
Authority key identifier: 61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/_4zLUBOFEAkBnSkP-oVgS4dRLPc.roa
Signing time: Sun 01 Jan 2023 21:44:57 +0000
ROA not before: Sun 01 Jan 2023 21:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39995
IP address blocks: 2a02:7da0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:82:a1:6e:6f:9f:0a:51:46:13:55:99:eb:e3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Validity
Not Before: Jan 1 21:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff8ccb5013851009019d290ffa85604b87512cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:33:6d:89:2a:c2:74:17:27:cb:91:f1:ab:
c4:14:b1:8f:e1:3c:96:60:96:4a:ce:cd:39:ba:68:
27:c7:79:e2:1b:0a:a8:5c:40:c7:c3:e2:9b:4a:98:
d7:d3:38:7f:6b:1a:2e:a9:b5:c4:b9:1d:55:05:c1:
1c:1d:ea:8e:6a:74:32:bb:76:6d:a7:25:d0:87:13:
33:35:1e:77:9b:9b:30:83:38:7c:f9:ec:20:93:ec:
1c:42:47:26:78:ef:4d:5a:43:79:56:03:aa:5d:51:
e3:c6:88:e6:f0:56:07:2b:bd:eb:ba:be:58:60:1a:
68:0c:35:93:01:5e:f8:9b:00:05:2f:23:1c:6c:24:
b8:82:23:2b:9c:d1:19:ea:19:f2:65:c0:90:dd:15:
f0:15:f4:87:d7:85:e5:4b:aa:70:9f:9a:58:fe:92:
ab:34:9c:fc:6d:39:21:f1:19:92:ac:29:b9:21:ea:
a9:b2:45:40:4c:e2:ef:0f:05:fe:3e:9e:53:f3:d4:
1c:e8:35:6a:53:0b:c2:26:ba:45:d7:3a:aa:c1:c4:
ce:a2:3f:7c:6e:f2:ea:0f:6e:72:06:58:d8:73:f8:
a6:95:a0:10:78:b3:19:49:36:a9:9a:7b:9a:93:72:
d6:23:dc:e2:c6:f8:1c:f9:a9:9a:03:eb:97:c7:0e:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8C:CB:50:13:85:10:09:01:9D:29:0F:FA:85:60:4B:87:51:2C:F7
X509v3 Authority Key Identifier:
keyid:61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/_4zLUBOFEAkBnSkP-oVgS4dRLPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7da0::/32
Signature Algorithm: sha256WithRSAEncryption
63:82:f1:6d:03:45:48:fa:63:00:e9:8f:d3:57:cd:b5:07:48:
ea:3c:9a:a4:76:3a:5c:60:5d:8f:e9:79:64:80:d6:09:8e:02:
7a:e4:95:09:a6:c2:39:d4:e9:1f:94:d2:e5:c9:54:e8:e5:ec:
76:b1:55:ce:0a:87:34:2f:64:38:e7:35:f7:b7:87:a8:dc:cd:
3b:ce:44:1f:42:9d:cd:0f:ab:1a:3f:9c:cf:f1:8b:8f:aa:be:
57:a5:69:c2:fb:18:2e:b6:c8:e6:02:74:99:9b:bc:54:7f:0c:
15:b1:82:a2:79:1e:68:76:d0:90:d8:e7:aa:b1:41:60:3e:29:
a6:57:ee:8d:b8:e8:b9:33:dd:ce:db:b0:30:3f:47:37:ae:de:
29:5e:da:05:8d:4e:28:ba:98:b1:c1:2f:5a:c3:e9:b3:20:41:
8b:7c:2e:40:b2:7a:06:7f:42:1d:2e:6a:a0:12:56:c1:3c:c7:
49:ad:75:94:1a:54:23:bc:80:8c:54:4e:db:83:48:8b:09:94:
e2:6f:38:c7:97:58:de:90:70:d2:0c:a8:86:66:a6:8b:ff:c0:
46:31:24:5e:b4:91:ee:cb:40:48:34:88:1c:f4:ef:9c:70:34:
af:e7:6b:80:62:84:8b:8f:ee:7e:9b:ef:20:65:49:f1:d7:59:
57:49:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:37 2024 by rpki-client on console-ams.rpki-client.org