Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/cDSaDyeeFgtBF8jBiYOi-YR3f2o.roa
File: cDSaDyeeFgtBF8jBiYOi-YR3f2o.roa (raw, json)
Hash identifier: /D6fDebP7+TGa1l2dtVQvErQkfpXiEkD9mVIK25E0Gc=
Subject key identifier: 70:34:9A:0F:27:9E:16:0B:41:17:C8:C1:89:83:A2:F9:84:77:7F:6A
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 018D16A11DE1E20800E899F2042E65115431
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/cDSaDyeeFgtBF8jBiYOi-YR3f2o.roa
Signing time: Wed 17 Jan 2024 08:54:34 +0000
ROA not before: Wed 17 Jan 2024 08:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 2a04:2ec0::/29 maxlen: 29
2a04:2ec0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 18 Jan 2024 11:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:a1:1d:e1:e2:08:00:e8:99:f2:04:2e:65:11:54:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Jan 17 08:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70349a0f279e160b4117c8c18983a2f984777f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:81:ba:1e:77:2e:61:e2:02:ce:28:cb:00:
52:4d:89:a8:22:03:92:b9:4a:80:02:37:d2:16:96:
ef:e3:19:c8:e9:31:66:8a:c4:9b:07:8a:f7:af:49:
22:d7:b3:4c:6e:f5:35:e3:ba:52:d1:1a:e6:23:1b:
b6:48:3c:ce:cb:94:6d:3a:80:e9:70:13:16:18:e5:
2c:af:25:6a:87:1f:5b:3f:6d:e8:2e:7b:14:7d:08:
2d:12:f2:7e:87:aa:77:e3:1f:18:09:7e:dc:30:b3:
53:49:a6:e4:2f:f5:05:f8:82:8a:13:f2:17:79:05:
cc:26:1c:13:d4:f5:2d:db:34:fc:7c:9a:92:b8:0d:
46:8d:ec:57:db:81:0c:57:db:fb:1d:dd:05:f0:92:
e2:9b:78:b0:3e:06:2d:25:fb:c0:df:9c:fa:a5:52:
4d:7b:22:67:60:69:a6:f5:80:0d:32:7c:8c:78:e1:
15:5e:d8:9f:be:25:d3:6e:a0:33:b0:7d:6d:d2:c5:
ce:c0:a7:da:34:c5:41:11:ac:b9:35:d7:cb:39:98:
8c:32:73:f9:04:4f:de:9c:08:8f:1e:4d:56:3d:aa:
72:5a:28:45:0d:16:79:2a:42:39:19:fe:db:0b:78:
22:98:63:c4:01:2a:c5:f7:c0:13:13:d1:28:63:85:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:34:9A:0F:27:9E:16:0B:41:17:C8:C1:89:83:A2:F9:84:77:7F:6A
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/cDSaDyeeFgtBF8jBiYOi-YR3f2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:da:af:e8:dc:c7:c5:ef:07:e9:69:7b:11:59:ca:a4:3f:18:
71:0e:95:77:09:c8:e9:cc:a0:3e:77:fc:17:23:49:cc:50:52:
91:44:91:61:de:3f:f2:85:01:53:24:85:01:49:66:5d:9f:3b:
8f:5a:e2:19:da:06:11:bc:94:02:5f:f8:cf:33:8b:d2:1e:91:
a0:49:f3:d8:91:8b:1b:96:1e:4f:90:9d:c1:f6:81:38:7f:cf:
39:61:58:00:70:5f:a2:db:6a:70:c8:84:10:12:31:9f:d1:f8:
b4:02:7e:24:76:63:f3:71:de:10:a4:aa:75:d1:4a:30:cf:85:
c3:79:8b:e9:82:65:18:ab:ee:76:bf:6b:44:84:17:5a:4c:79:
d4:b2:25:6a:22:14:98:fb:3f:ce:56:0f:98:ac:fc:2c:10:3b:
38:97:2a:e5:dd:1f:ff:08:1f:bd:5d:c0:fa:e6:af:71:41:fc:
8f:28:b5:3e:58:77:e1:8e:b3:0f:01:9e:a1:22:5a:13:ef:36:
2c:a8:1c:31:fa:bb:5d:cb:c7:ef:cc:08:31:34:e0:8f:b8:4f:
72:57:75:d5:93:6b:95:c2:b1:06:68:7b:f7:e1:fb:87:bf:3f:
3b:3f:30:5c:8f:67:70:f2:7e:2e:53:9b:d0:44:e9:17:5e:50:
c9:1c:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:34 2024 by rpki-client on console-fra.rpki-client.org