Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/vvn4z6kkzJZtydSCK7-8wJYJb_A.roa
File: vvn4z6kkzJZtydSCK7-8wJYJb_A.roa (raw, json)
Hash identifier: khZZ6c+eKsjuQd3PEDQimiF8S1AA/E467BkdnVbGbPo=
Subject key identifier: BE:F9:F8:CF:A9:24:CC:96:6D:C9:D4:82:2B:BF:BC:C0:96:09:6F:F0
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 018CE459EE6D50741CE75835029ED1BBACA3
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/vvn4z6kkzJZtydSCK7-8wJYJb_A.roa
Signing time: Sun 07 Jan 2024 14:35:48 +0000
ROA not before: Sun 07 Jan 2024 14:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202685
IP address blocks: 2a10:c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 04 Feb 2024 22:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e4:59:ee:6d:50:74:1c:e7:58:35:02:9e:d1:bb:ac:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Jan 7 14:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bef9f8cfa924cc966dc9d4822bbfbcc096096ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:b1:0d:38:19:53:10:13:d0:b2:37:f5:13:
d4:7c:3f:bb:24:69:4d:36:4e:35:35:9d:39:27:8d:
18:e4:07:5d:4d:fa:6e:f2:3d:ee:12:02:79:67:1b:
e6:a6:24:d7:4a:b4:9e:bb:25:7c:ac:33:2c:38:e0:
d6:d0:3c:f7:69:80:6f:95:e1:5e:88:ac:64:ea:5c:
27:d3:9e:ca:d2:7b:2d:9b:47:1f:a7:f5:b3:71:48:
74:ac:9a:88:dc:47:c6:7d:45:91:8a:ce:5c:6d:98:
72:f8:97:87:d1:21:c4:14:30:d3:9a:a5:0b:38:0a:
af:0b:b6:00:53:86:f0:67:8c:96:54:06:df:ff:01:
a4:08:c6:92:7c:19:05:ae:6c:cf:bb:33:43:89:7f:
d8:ac:86:91:8e:95:44:f1:9b:87:73:4c:dd:7f:28:
25:4b:9f:1a:f3:45:86:c3:78:83:06:60:0e:fd:92:
8f:2a:10:d3:4d:f8:b6:07:80:2e:b4:14:9d:ff:bb:
26:37:b7:cb:93:03:1a:24:62:94:9f:d9:96:8d:a7:
61:e6:6c:85:99:11:72:c8:72:19:1c:a6:e9:62:54:
d8:9f:fd:33:5c:4b:6a:04:21:09:88:ae:2b:c4:78:
da:f9:cd:fa:60:aa:3a:a1:dd:49:e2:17:e2:34:c5:
fd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F9:F8:CF:A9:24:CC:96:6D:C9:D4:82:2B:BF:BC:C0:96:09:6F:F0
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/vvn4z6kkzJZtydSCK7-8wJYJb_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:c0::/29
Signature Algorithm: sha256WithRSAEncryption
a3:3b:c9:8c:30:13:49:85:19:20:42:42:a1:b5:cd:41:c6:33:
c6:11:bb:65:8f:62:a6:9b:d7:72:d3:d6:d1:88:13:93:59:64:
13:0b:e3:13:ef:65:d7:45:b3:34:bc:84:f3:56:80:5e:f7:31:
f7:f4:a5:44:24:98:87:0a:c1:76:65:8f:6e:30:3e:1f:8e:ca:
df:c9:2e:7a:ac:33:38:aa:0e:ba:ad:c3:23:00:aa:31:4e:27:
59:c9:81:76:53:22:a4:fd:46:5f:6e:e5:cd:4a:63:ab:a8:ec:
67:e8:13:6e:97:dc:8d:d4:89:c4:c7:40:21:f8:67:37:da:e5:
20:53:44:98:b8:a9:98:8c:8b:0a:7d:ca:aa:21:7f:a2:e6:7e:
43:86:58:ff:ef:cc:1a:29:b8:5f:0e:f9:eb:7f:44:63:49:6c:
78:51:ed:d2:9d:b3:b1:06:5d:1b:9a:80:cd:30:22:8f:47:7e:
d2:12:a2:fb:98:04:53:16:33:d5:1e:6a:43:43:cc:37:28:84:
e1:a9:95:8e:ed:6c:94:75:a5:fa:e8:ee:c0:63:ce:cd:5c:26:
be:59:70:84:64:4e:c2:49:73:f7:be:d1:8a:97:78:57:df:cd:
d6:5a:77:9c:fd:d7:ca:3b:98:2e:56:43:08:f6:cb:a4:58:22:
57:78:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org