Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/4heLAQpYlurJNfzOoN7FIm_T4bc.roa
File: 4heLAQpYlurJNfzOoN7FIm_T4bc.roa (raw, json)
Hash identifier: L87fnsfcyIlLOsLAN3Y1O15LfSF/ua3MAWK+HiHWihI=
Subject key identifier: E2:17:8B:01:0A:58:96:EA:C9:35:FC:CE:A0:DE:C5:22:6F:D3:E1:B7
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01932A817F8625120CC3777F10F70552D276
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/4heLAQpYlurJNfzOoN7FIm_T4bc.roa
Signing time: Thu 14 Nov 2024 11:49:10 +0000
ROA not before: Thu 14 Nov 2024 11:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 2a11:4b40::/32 maxlen: 32
2a11:4b41::/32 maxlen: 32
2a12:a340::/32 maxlen: 32
2a12:c304::/30 maxlen: 30
2a13:8580::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 17 Nov 2024 07:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:81:7f:86:25:12:0c:c3:77:7f:10:f7:05:52:d2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 14 11:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2178b010a5896eac935fccea0dec5226fd3e1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:99:0d:e2:a6:72:8e:a0:d1:ea:52:e4:b0:2b:
7e:1f:d5:bb:ce:02:b8:a7:c0:bb:91:3d:7e:cf:77:
9b:03:06:12:60:fc:1b:17:a1:28:61:7d:e6:ac:cc:
c0:85:cc:e5:b8:70:67:ba:54:5e:69:77:1b:8f:cf:
aa:0f:43:8f:26:c3:9c:f2:e2:a0:53:f3:5f:06:e5:
b2:bf:01:ce:5e:1e:f2:71:d5:7d:87:35:de:77:54:
97:77:66:d3:80:a1:97:a5:b6:f7:c7:b6:eb:87:25:
32:ab:d5:74:41:61:97:6c:29:c1:db:9a:ce:12:10:
0c:20:81:84:57:53:a4:f5:d1:88:2a:a3:2c:62:02:
dc:c2:f6:10:e8:b5:d8:05:17:bd:52:fd:9a:9f:bf:
14:c8:b5:d2:ca:e4:99:57:9e:73:ed:74:35:76:a5:
eb:13:48:de:03:d1:2c:0b:28:a9:7f:ad:9f:7f:ef:
d8:62:5a:65:c8:51:c6:02:e1:23:23:a1:82:3e:44:
76:a0:40:f0:11:c9:b5:2a:e3:77:f4:77:b1:15:dc:
1e:5f:7b:4d:69:53:63:52:d7:2e:3d:1d:89:ee:1f:
4b:c2:1c:9d:cb:05:2a:10:1b:2a:20:8d:1a:f0:32:
7b:91:22:8f:46:4b:b7:c2:41:44:80:c7:83:48:89:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:17:8B:01:0A:58:96:EA:C9:35:FC:CE:A0:DE:C5:22:6F:D3:E1:B7
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/4heLAQpYlurJNfzOoN7FIm_T4bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4b40::/31
2a12:a340::/32
2a12:c304::/30
2a13:8580::/32
Signature Algorithm: sha256WithRSAEncryption
43:4e:8f:f5:ec:7f:46:51:05:a4:65:23:8b:cd:1d:5d:cb:03:
03:08:83:ad:09:e7:47:e1:51:39:e4:bf:56:fa:d4:fb:59:58:
68:9a:9e:b1:96:37:25:9a:99:04:07:62:36:13:80:f6:67:fd:
04:3a:15:43:e4:a9:df:cb:c0:a6:17:85:e8:26:6c:4f:74:b2:
75:b1:60:3a:48:99:b8:de:38:5c:f4:ad:ca:59:ac:3a:ca:8b:
58:83:ff:47:f1:d1:a5:1d:d4:39:c3:f5:44:0e:98:a4:5c:d3:
a7:25:91:2f:ce:51:be:fc:f9:f2:f4:64:a7:5c:b2:c1:14:9d:
86:5a:03:01:fd:75:b5:58:80:f2:be:1b:85:47:1b:bf:65:11:
87:67:dd:55:6d:ec:c5:b9:57:ea:99:c4:e9:7c:ff:4a:c9:ac:
fc:6f:1e:4e:0d:91:e1:1b:81:a1:dc:ae:23:05:48:6b:fc:4b:
32:e4:5a:cf:c5:20:af:42:85:2e:45:54:a5:70:cf:71:6d:66:
63:4b:9c:9f:14:83:9c:73:47:9b:02:f2:c0:cb:af:0e:77:60:
cd:4b:a6:df:2f:9c:21:ec:bd:c3:22:df:e1:4e:bd:1f:32:a9:
0e:a9:7c:21:ca:be:4c:2d:95:12:21:f6:ab:b5:be:85:02:40:
ed:35:be:a6
-----BEGIN CERTIFICATE-----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Generated at Sun Nov 17 08:32:02 2024 by rpki-client on console-ams.rpki-client.org