Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/uGCqPJpi3v9dDPWwOW9zI4N0GuE.roa
File: uGCqPJpi3v9dDPWwOW9zI4N0GuE.roa (raw, json)
Hash identifier: 6Es4FGr+WN2aNZOKakhem9iX5x+SnZYZCFTNWT8EA7s=
Subject key identifier: B8:60:AA:3C:9A:62:DE:FF:5D:0C:F5:B0:39:6F:73:23:83:74:1A:E1
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 018EC2E1A8A4BB39CA181E0A804BC7AB087F
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/uGCqPJpi3v9dDPWwOW9zI4N0GuE.roa
Signing time: Tue 09 Apr 2024 12:42:32 +0000
ROA not before: Tue 09 Apr 2024 12:42:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5404
IP address blocks: 2a02:16a8::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Apr 2024 10:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:e1:a8:a4:bb:39:ca:18:1e:0a:80:4b:c7:ab:08:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Apr 9 12:42:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b860aa3c9a62deff5d0cf5b0396f732383741ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:6e:4a:21:72:2e:a9:6f:4e:d2:99:c7:e5:
71:02:a4:90:c4:23:e8:ac:bd:1c:73:fc:78:63:b0:
80:bf:9a:45:75:ca:77:6e:78:a1:a4:1d:0e:ef:c9:
bb:c7:93:a3:3c:df:f5:8f:df:e9:e2:4f:be:5b:d7:
a2:ce:5f:6b:b7:ec:c8:bb:b1:0a:57:5f:f3:0e:48:
d5:58:0e:ec:13:ee:f3:2e:39:e7:4e:9e:2a:a0:52:
94:64:f8:90:cc:06:15:1c:2a:c6:57:04:aa:c2:d7:
bc:04:6e:4d:5e:36:a2:7e:8c:08:e2:1f:64:ed:6f:
ca:21:11:de:85:c4:07:c6:53:b8:54:43:2f:fd:53:
91:91:7e:d1:13:30:4a:c7:30:d9:96:d8:dc:11:b5:
41:e4:3b:53:64:9d:81:40:19:91:c2:8c:ae:7c:14:
56:2e:d4:db:f8:08:b5:61:c0:5d:35:9f:9f:99:53:
18:2f:1b:80:59:69:a7:00:96:75:89:b6:53:e0:7c:
06:7b:ce:a2:85:ba:51:de:43:47:9c:78:9f:d6:f7:
ba:94:69:26:e3:d7:00:3c:5e:08:6f:35:12:68:e0:
7b:0a:02:a1:31:55:33:62:6e:b1:05:28:3e:c5:2d:
ba:5b:8b:4b:8a:40:f2:b6:7d:a0:9d:ee:cd:7a:df:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:60:AA:3C:9A:62:DE:FF:5D:0C:F5:B0:39:6F:73:23:83:74:1A:E1
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/uGCqPJpi3v9dDPWwOW9zI4N0GuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:16a8::/32
Signature Algorithm: sha256WithRSAEncryption
65:50:80:4c:28:95:45:f4:40:df:ae:ca:3d:40:25:96:96:6e:
59:29:00:fe:d9:87:03:a3:a0:03:c6:b7:da:86:c5:90:fa:85:
a1:1c:a1:51:1c:bb:01:38:e0:d9:3a:89:04:e3:59:85:d8:42:
14:78:70:f7:1c:03:7f:10:b3:96:79:f8:99:0f:58:ab:1c:25:
e0:67:1b:eb:74:22:b3:ef:8d:b7:b8:e1:4b:16:e3:7d:92:1c:
d2:20:28:2f:ec:cb:b2:76:3c:5a:e2:9e:fd:f7:dd:31:22:ec:
87:d2:aa:ba:83:42:ef:6e:8a:11:5c:dd:3e:c3:98:ac:b7:bc:
49:1e:2e:bd:de:be:cd:2c:da:2f:a9:3a:2e:29:48:88:7a:83:
08:69:6a:ab:fa:66:75:29:01:69:8f:e5:01:f4:4e:b8:27:b2:
a9:5a:4a:19:4f:80:18:21:c6:3a:fe:3e:4a:05:67:5d:d8:e3:
ac:9c:9f:06:02:bc:ae:c4:6d:cf:33:da:1f:99:85:a8:62:f3:
44:dd:7a:d9:79:33:cb:ab:06:14:ee:ff:44:db:62:bb:49:1d:
98:2c:37:42:ed:a6:db:19:12:26:f9:8b:ad:8c:5d:32:5a:11:
82:e4:ae:38:39:56:d0:fa:f8:7e:3a:63:87:96:85:7b:4e:a8:
25:9c:ba:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:49 2024 by rpki-client on console-fra.rpki-client.org