Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/TtU-A0ht8pwOJDOGsSw636nvx3s.roa
File: TtU-A0ht8pwOJDOGsSw636nvx3s.roa (raw, json)
Hash identifier: TKTG916cL8nPijpQNPmAc1Urj2DGfpW/TW5L0BBdwys=
Subject key identifier: 4E:D5:3E:03:48:6D:F2:9C:0E:24:33:86:B1:2C:3A:DF:A9:EF:C7:7B
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 01856BDC66CCBB8D760C2E9EECDCC2F474C9
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/TtU-A0ht8pwOJDOGsSw636nvx3s.roa
Signing time: Sun 01 Jan 2023 05:44:44 +0000
ROA not before: Sun 01 Jan 2023 05:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7480
IP address blocks: 2a0f:607:1000::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:66:cc:bb:8d:76:0c:2e:9e:ec:dc:c2:f4:74:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 05:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ed53e03486df29c0e243386b12c3adfa9efc77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:bf:d5:60:5a:f6:94:e9:fa:92:b4:9e:2c:
40:d0:ef:8b:fc:a0:e1:69:3f:35:49:36:4e:77:bb:
c6:3f:6e:13:8d:e3:43:3f:b8:30:ae:01:e9:70:3a:
d4:88:0b:e2:24:d4:9f:42:0f:17:7a:ae:ee:08:9e:
67:d2:57:51:94:4e:1d:3a:eb:c2:84:cc:cb:63:88:
a7:9e:fb:a8:64:5e:d1:9c:3e:34:90:0c:c5:ac:7b:
01:d9:cc:35:a9:a7:67:81:b0:7b:ae:e3:de:14:51:
4a:0d:fa:b4:9a:b3:db:21:17:7a:73:de:82:45:e5:
b9:b3:18:08:b6:6e:ea:25:35:3d:ff:ff:51:91:81:
4c:a7:7f:c7:d6:91:39:49:d8:a7:12:26:97:ce:1f:
bb:f2:0f:57:e1:57:94:2a:99:3a:5c:4d:78:f2:a1:
7c:65:35:82:f4:e6:74:fd:c0:5d:0e:b5:87:f3:6f:
7c:10:12:dc:6c:c2:cc:d2:d8:3c:b1:4f:1d:da:17:
f6:e0:92:c0:8a:83:e8:61:f3:4f:df:0a:cd:f8:3f:
f8:44:54:ff:6b:5a:b8:76:bd:0f:cc:9b:b4:0f:06:
ec:bb:d6:39:c6:b1:99:9e:b4:db:e9:7e:aa:d7:6d:
dc:8c:20:10:0f:6a:e7:ee:d3:40:db:2f:73:da:05:
92:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D5:3E:03:48:6D:F2:9C:0E:24:33:86:B1:2C:3A:DF:A9:EF:C7:7B
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/TtU-A0ht8pwOJDOGsSw636nvx3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1000::/40
Signature Algorithm: sha256WithRSAEncryption
48:89:88:32:d0:47:65:25:d2:2c:b9:06:f0:fd:ae:16:78:7d:
d6:c2:66:a5:6b:63:c0:86:bd:57:a0:e3:43:d4:da:d2:39:c0:
77:29:c8:a5:0e:20:fb:c1:a2:cf:bd:61:b9:3d:ef:70:d2:29:
31:d2:40:d9:94:e3:65:70:f9:df:ea:f6:a5:3f:85:c4:7e:09:
15:c6:7e:aa:b7:be:37:84:86:b6:06:45:55:aa:e4:0e:d1:ac:
d9:71:08:f0:bd:44:16:95:cd:1b:43:ae:56:e0:9d:c7:5f:66:
3d:7f:0e:21:e8:c8:d9:73:c5:c5:e7:e0:2e:f8:ea:00:35:28:
dd:3e:5f:c9:ce:79:80:fa:c3:90:ce:59:4e:fe:08:7a:b1:64:
96:cb:d7:fd:fd:6c:f7:9f:c7:42:dc:06:8c:04:2e:c0:94:5b:
e9:70:ff:ae:4e:00:0d:f0:4c:2e:5e:7c:05:67:c1:1f:9a:36:
5e:3a:f0:be:bd:92:e1:10:f2:ce:03:e6:0c:27:1d:8a:49:cf:
4f:16:83:bc:63:6b:8f:1a:bd:00:8a:6b:c1:4b:5c:39:dd:62:
e3:56:56:22:ef:7a:1f:32:dc:05:fd:3d:00:e2:63:5a:9b:64:
87:4f:6b:8a:c7:a5:63:bf:08:43:f5:ba:77:2a:53:08:dc:f2:
2a:24:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org