Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/SGDJ0k5iGc1y6l3qGDsnSwUUrSI.roa
File: SGDJ0k5iGc1y6l3qGDsnSwUUrSI.roa (raw, json)
Hash identifier: qruLv7GbD/rjHFFTvxf0rS+ZwmlvivgrQTS6Bw6Bpfw=
Subject key identifier: 48:60:C9:D2:4E:62:19:CD:72:EA:5D:EA:18:3B:27:4B:05:14:AD:22
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64AEB2263E5FD5AB1B2CEFC3E36350D
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/SGDJ0k5iGc1y6l3qGDsnSwUUrSI.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208602
IP address blocks: 2a09:e1c1:effe::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Apr 2024 17:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:eb:22:63:e5:fd:5a:b1:b2:ce:fc:3e:36:35:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4860c9d24e6219cd72ea5dea183b274b0514ad22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f8:20:ff:4e:ab:62:20:06:06:9e:50:1f:6c:
3a:00:51:bb:a5:78:d2:63:67:92:06:ab:7e:0a:41:
87:ff:33:7e:b6:79:5b:ac:2f:37:5c:e5:b9:48:c1:
a8:af:dd:5b:37:d7:d5:6c:04:63:46:7b:57:b4:38:
9b:e3:73:f0:03:76:df:e6:64:82:9c:5d:a5:83:07:
e2:37:7c:64:7c:d2:ee:f4:ee:78:44:87:c2:14:cf:
9c:04:25:56:80:fa:0c:d3:e0:c6:21:6f:4f:1d:3d:
bf:81:e6:9a:ca:15:86:5d:ad:33:bf:4c:b9:29:e1:
d5:2e:8d:f6:61:70:a2:c9:c4:28:bd:54:c5:96:88:
11:a7:4f:38:83:e6:65:35:c0:e4:ae:5f:20:74:52:
2f:d2:d1:f8:96:d3:9e:10:48:c1:6e:18:31:48:bf:
84:27:14:c1:e8:f6:e0:59:82:a5:b5:d5:ae:4b:81:
9c:6d:1e:d9:1e:cb:34:8c:48:1b:33:4c:a3:0b:a5:
e9:76:42:f9:c6:9b:cb:e8:cc:56:48:0e:67:84:d4:
8c:3d:90:48:91:16:16:19:25:32:e2:e1:70:1d:08:
8d:91:8e:10:af:ef:a7:4f:a7:00:0b:73:6a:84:b2:
fe:a7:22:3d:7b:8b:b6:bd:97:2f:f6:d0:df:6f:b5:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:60:C9:D2:4E:62:19:CD:72:EA:5D:EA:18:3B:27:4B:05:14:AD:22
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/SGDJ0k5iGc1y6l3qGDsnSwUUrSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e1c1:effe::/48
Signature Algorithm: sha256WithRSAEncryption
76:dc:2c:e2:88:da:db:ed:80:8a:89:aa:27:e1:6b:ee:a5:ea:
6e:cc:b3:a2:5d:4c:a5:6e:9e:a3:03:55:9c:a7:4d:36:f3:84:
4f:57:69:28:83:98:31:7b:3b:c5:b0:89:45:d4:7a:db:50:74:
2b:3e:ef:73:de:33:9b:6b:0a:70:a4:f4:ba:91:f1:e3:dc:e5:
03:61:f9:3b:e2:94:f2:66:66:57:2b:9d:0d:90:74:e3:66:e4:
4d:54:1d:59:e5:ce:3b:fc:92:2f:de:3f:d1:67:74:6b:94:50:
9f:ec:a3:3d:a8:a6:06:7d:8c:74:51:87:8d:4c:de:3f:6c:42:
34:32:9a:da:c8:74:81:8b:53:16:a5:97:c1:64:c3:73:b4:81:
8c:53:c7:7b:47:5e:de:c6:9d:3e:e2:e4:10:21:70:5d:ec:d0:
13:89:29:71:4c:bb:b5:70:6c:37:ac:55:ca:98:e7:9b:b2:ea:
14:95:76:61:ff:0f:a1:be:e6:58:48:a2:a0:d1:36:63:05:cc:
6a:8a:5a:3a:de:60:a8:1f:b0:31:f1:1b:54:b7:66:34:a1:b5:
4b:94:38:09:f6:fc:95:9c:64:d9:e9:0a:02:75:8a:37:2c:0e:
25:46:8c:14:3c:01:a9:c9:d2:d0:6a:4a:96:cc:79:3e:55:03:
67:aa:44:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org