Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/jqKTR8wcaJyEFFKdg0cAxlkZhKw.roa
File: jqKTR8wcaJyEFFKdg0cAxlkZhKw.roa (raw, json)
Hash identifier: l7u5twgSId70d5FjXtSp4O04ULcoSi/127x2IfZ8OkM=
Subject key identifier: 8E:A2:93:47:CC:1C:68:9C:84:14:52:9D:83:47:00:C6:59:19:84:AC
Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d
Certificate serial: 0190923B3E76B40A15DEBE50F0715E87B01F
Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/jqKTR8wcaJyEFFKdg0cAxlkZhKw.roa
Signing time: Mon 08 Jul 2024 12:04:34 +0000
ROA not before: Mon 08 Jul 2024 12:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43519
IP address blocks: 2a0d:9b80:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jul 2024 10:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:3b:3e:76:b4:0a:15:de:be:50:f0:71:5e:87:b0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d
Validity
Not Before: Jul 8 12:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ea29347cc1c689c8414529d834700c6591984ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:93:ae:41:a4:c0:cd:25:ed:6e:ce:e2:5e:
d7:96:23:2c:f2:c4:c3:57:9c:b4:57:49:a9:30:94:
9c:cd:fb:17:c9:aa:74:8e:28:64:aa:64:95:77:18:
b1:78:ad:82:2e:6a:4f:7d:c0:9c:9e:7b:51:38:9e:
56:ed:52:a8:a8:58:be:0d:2d:07:35:10:3d:fa:2c:
3d:51:3c:ae:09:fa:9f:da:1f:67:2d:e9:71:3c:a5:
12:1a:7e:96:ff:c8:f2:f4:72:d6:65:74:d9:c6:ae:
91:ee:01:31:8a:57:88:90:5f:3e:7e:c6:59:f8:84:
b3:81:b7:63:21:9f:94:78:84:fa:50:c1:cd:ec:51:
1e:29:23:76:d1:00:22:da:c9:f9:dd:73:75:b4:7c:
1d:45:38:df:e6:fa:d6:95:f9:41:17:12:82:4d:40:
b0:ef:4b:cb:37:b4:99:c2:63:74:7c:80:f8:fc:b7:
68:ce:5b:48:fb:c9:4f:b5:e4:a9:29:1c:b9:b5:5f:
9f:4f:de:1b:84:a8:44:56:2a:72:be:27:56:51:34:
b4:ef:be:9c:d0:da:2b:f9:21:d1:8f:f6:a0:6c:89:
c2:28:2b:e0:2d:c2:2c:8d:3f:65:66:d3:b7:7b:c6:
a3:fa:5f:d9:20:38:40:fc:75:6e:aa:e3:d8:90:b4:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A2:93:47:CC:1C:68:9C:84:14:52:9D:83:47:00:C6:59:19:84:AC
X509v3 Authority Key Identifier:
keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/jqKTR8wcaJyEFFKdg0cAxlkZhKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
49:e7:5e:93:62:c6:83:af:79:4f:50:4d:2a:f0:ac:96:62:0b:
e8:38:a2:b5:dc:5f:87:bf:b9:4a:f4:e7:44:42:46:96:a3:f0:
3b:6f:a1:d0:49:61:5e:79:10:11:5d:50:ac:75:e3:55:ff:f9:
da:33:28:c9:f2:9f:da:58:99:34:0f:ee:20:c3:dd:84:bc:7b:
cd:49:01:92:d3:6f:95:4b:70:42:03:03:40:86:3d:71:7f:e8:
e4:bb:0c:88:93:87:4d:1a:d8:4a:f5:31:36:e6:87:3d:c8:67:
f3:46:79:86:2f:ba:ae:c5:3e:fb:74:76:03:cc:16:7d:bf:6d:
a7:89:4a:38:39:37:c3:34:6e:db:c8:78:f6:dc:f7:33:47:ae:
84:d5:5d:44:6b:79:90:6a:23:80:29:9c:2b:78:b1:f5:38:50:
d9:d2:02:18:b5:ff:96:81:1c:80:5f:a2:ba:c1:9c:06:ac:7f:
b5:65:32:94:63:81:01:99:64:51:09:c2:96:ec:c5:4a:1c:a7:
19:a2:f7:91:f5:8c:14:4f:ef:3f:b7:a1:26:8a:f8:04:db:85:
ca:c3:e8:e9:cc:1c:c1:af:62:85:db:2b:e6:5c:8b:27:b6:b3:
59:a5:04:fe:5a:d8:9e:96:cd:46:32:6d:8b:1a:9d:f2:0d:e0:
07:49:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 13:50:32 2024 by rpki-client on console-ams.rpki-client.org