Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/jUy6YV4dRYaKbz7hmMR632sDKA8.roa
File: jUy6YV4dRYaKbz7hmMR632sDKA8.roa (raw, json)
Hash identifier: OshbxpWDq/5vIPMtMzYeVQDj9KtwldiRus0MhS+Hs/A=
Subject key identifier: 8D:4C:BA:61:5E:1D:45:86:8A:6F:3E:E1:98:C4:7A:DF:6B:03:28:0F
Certificate issuer: /CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Certificate serial: 01912740D02B94C0535D7551A078BDA39125
Authority key identifier: 76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/jUy6YV4dRYaKbz7hmMR632sDKA8.roa
Signing time: Tue 06 Aug 2024 10:34:04 +0000
ROA not before: Tue 06 Aug 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206873
IP address blocks: 2a11:7681::/32 maxlen: 32
2a11:7684::/32 maxlen: 32
2a11:cd07::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 13 Sep 2024 10:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:40:d0:2b:94:c0:53:5d:75:51:a0:78:bd:a3:91:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Validity
Not Before: Aug 6 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d4cba615e1d45868a6f3ee198c47adf6b03280f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:65:8e:3c:8e:d1:62:54:b3:dd:d3:6c:f4:48:
08:cf:8d:86:30:a0:ee:af:42:fa:d9:3e:76:1d:76:
00:ec:21:a8:50:bb:f8:ae:77:c9:11:00:40:bd:0d:
4b:63:88:6b:de:41:af:93:cb:b0:fe:13:8b:bc:24:
83:a0:58:4c:ed:6b:d0:3f:3d:14:9b:8b:2b:a0:6a:
ce:d8:c7:2d:5d:17:03:78:d0:12:3d:77:0a:49:4b:
de:3e:39:06:ed:02:ce:5b:6d:92:1d:5a:1e:30:5b:
a6:2e:9b:18:14:2a:27:3a:60:72:05:08:f3:9a:cd:
2e:c3:b5:15:bd:a1:79:4d:ca:c5:57:35:5d:98:a8:
c2:d7:9e:93:26:cd:b9:96:65:27:e3:b6:6f:d8:6f:
53:d2:20:c3:8a:83:95:db:11:7c:0e:60:c6:af:9c:
a2:ec:c9:84:8b:46:cc:08:88:2f:df:7c:22:c6:44:
f1:07:31:f6:fe:23:d4:68:e2:b5:23:d4:5c:e9:12:
89:61:7e:97:1f:98:34:bd:ed:36:20:2f:71:4d:48:
23:06:da:e3:4d:b4:07:62:5e:d6:f4:8d:a5:e5:ed:
b6:15:c3:9d:8a:ea:66:fc:96:22:31:2b:73:e0:e4:
26:56:55:99:b0:d5:60:b0:54:36:c5:11:bf:bc:6e:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4C:BA:61:5E:1D:45:86:8A:6F:3E:E1:98:C4:7A:DF:6B:03:28:0F
X509v3 Authority Key Identifier:
keyid:76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/jUy6YV4dRYaKbz7hmMR632sDKA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7681::/32
2a11:7684::/32
2a11:cd07::/32
Signature Algorithm: sha256WithRSAEncryption
51:80:47:cf:68:28:75:61:b5:7e:41:77:44:9f:1a:b2:ff:8d:
72:c3:d7:03:f0:c0:ac:8d:b3:78:a5:8d:50:54:dc:c8:96:24:
50:2a:f1:a3:33:84:ea:b1:16:da:7b:b2:21:c8:ec:fa:64:f9:
64:74:24:0a:04:e9:75:1f:5d:1b:94:8b:a6:38:7a:65:40:99:
a5:5e:64:07:85:f7:14:38:e9:13:1f:bf:5a:3b:3f:36:de:34:
88:d3:69:76:7e:de:25:0d:1c:30:ad:85:2f:18:41:59:a3:55:
00:f0:fe:87:3e:f8:47:f1:8a:b3:7d:96:b2:92:7a:00:9b:45:
a7:e8:30:54:45:b2:fc:db:4d:08:24:fd:8c:08:60:75:80:a5:
31:8f:1a:dc:aa:3b:5f:1e:8f:f3:22:22:cf:57:ff:47:fe:f1:
cc:10:a9:1e:8b:f3:18:2c:ee:f4:34:b5:ef:bf:61:1d:65:1b:
73:32:7d:d9:55:09:de:5a:d9:0d:b6:8f:ea:e4:02:39:a1:0b:
93:14:01:de:b0:e7:dd:c7:4e:b5:52:4f:ed:a3:41:d6:72:2d:
4f:61:5a:99:a4:77:88:ad:fc:a2:22:80:e9:d6:7a:46:d6:77:
cc:7e:aa:73:53:e9:29:83:ec:77:04:ca:a5:de:36:6f:c9:8e:
be:f1:1f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 12:39:39 2024 by rpki-client on console-fra.rpki-client.org