Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/6wgpgKJJeKmlWzC6CRy5DXLDmPk.roa
File: 6wgpgKJJeKmlWzC6CRy5DXLDmPk.roa (raw, json)
Hash identifier: X1jXMnDVtU/CaFinZc4VviEFSvjlcYTN8erWEP1L7uM=
Subject key identifier: EB:08:29:80:A2:49:78:A9:A5:5B:30:BA:09:1C:B9:0D:72:C3:98:F9
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018E4C75FE67F0E95AA1D1B9C54E5366CE2E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/6wgpgKJJeKmlWzC6CRy5DXLDmPk.roa
Signing time: Sun 17 Mar 2024 12:49:44 +0000
ROA not before: Sun 17 Mar 2024 12:49:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 2a0e:b900::/29 maxlen: 29
2a10:4900::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 22 Mar 2024 03:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4c:75:fe:67:f0:e9:5a:a1:d1:b9:c5:4e:53:66:ce:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 17 12:49:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb082980a24978a9a55b30ba091cb90d72c398f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:d2:2d:ce:8a:3c:cc:e3:c8:6a:df:89:51:
5c:aa:92:1f:a6:7e:0f:63:ae:8e:a2:68:63:a6:7d:
3b:cc:fd:38:d1:1d:49:f0:88:7c:fa:36:e2:95:8f:
a1:c1:32:f8:40:bd:eb:cc:3f:3c:6e:2b:96:e9:48:
c8:57:c6:93:c5:4a:93:23:89:ca:38:3d:29:a2:e8:
b0:83:d1:b2:cb:43:ba:03:b6:19:3f:c8:2d:13:31:
21:8e:9f:d1:12:f8:0f:b1:11:01:0f:d9:b0:15:af:
ef:e8:da:5f:d8:12:72:49:06:d3:d8:47:93:d2:d9:
45:f0:ce:c2:63:82:8c:6e:47:a0:42:8e:75:d9:17:
c3:24:67:7f:cc:fc:6f:3a:bf:44:f2:04:1c:10:8f:
29:74:7b:3d:57:3e:b7:6e:d4:06:8e:c8:49:6a:3a:
3d:88:a0:d7:9d:c9:44:04:bc:61:60:64:6d:73:36:
65:c2:e1:e9:b7:55:35:08:0d:83:1d:15:8e:cc:5e:
f1:02:9f:14:83:ee:98:fe:5a:ac:12:18:68:1c:de:
d6:ea:cd:d5:c9:42:e2:d0:f7:cb:28:1d:41:41:57:
fb:63:7d:44:16:d4:fc:bb:40:7a:82:0f:2e:83:f3:
df:0d:5b:7e:08:e4:ea:b4:d1:05:df:4e:7a:b1:8f:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:08:29:80:A2:49:78:A9:A5:5B:30:BA:09:1C:B9:0D:72:C3:98:F9
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/6wgpgKJJeKmlWzC6CRy5DXLDmPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b900::/29
2a10:4900::/29
Signature Algorithm: sha256WithRSAEncryption
c7:fe:94:b3:1a:55:aa:67:85:ed:99:81:e5:28:b3:34:03:c6:
1d:e9:0a:c3:86:fd:6e:7a:bc:d2:7c:e5:82:08:84:ff:4e:a7:
cb:17:bb:fa:94:68:e0:d1:07:9a:24:86:d9:0a:f4:43:cb:47:
11:70:10:c2:1f:9d:5d:d9:8f:81:c3:eb:02:52:cf:09:e6:c3:
c1:dd:e1:e5:34:f5:60:ec:2c:f1:8c:7b:57:1d:31:d5:ed:97:
07:fe:81:76:e5:a8:84:28:ea:7d:53:b1:a4:f7:b0:62:3f:4b:
23:a5:e0:2f:a4:b1:4d:01:75:9f:06:4d:c9:c3:28:dd:fd:f3:
53:25:66:13:c9:c1:f0:2a:d8:86:6e:6a:c4:8d:45:50:be:29:
19:35:b6:07:4f:af:55:97:2a:06:fb:f3:8e:88:bc:08:7e:f6:
8d:44:66:fc:49:df:c6:26:ff:30:51:4f:91:d0:e2:86:82:97:
61:e6:93:9b:70:75:31:80:ed:1c:b9:50:81:28:e3:ee:cc:89:
65:ba:53:a1:3b:cd:ec:80:b1:e4:6b:20:ba:ae:c9:ac:09:bf:
cc:7a:43:a6:f1:4d:11:f2:0e:3b:d6:0d:a0:28:2f:90:6b:01:
ba:da:b6:13:50:29:13:29:27:f2:38:c6:be:1c:5d:d2:71:f8:
d2:c2:b4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org