Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ttdnro2gjGc3FijqV2IsvklL-8c.roa
File: ttdnro2gjGc3FijqV2IsvklL-8c.roa (raw, json)
Hash identifier: PSakZfV1vhCkW2wtXQ3tMBxdhyADwAiVdZ8LIchJwQU=
Subject key identifier: B6:D7:67:AE:8D:A0:8C:67:37:16:28:EA:57:62:2C:BE:49:4B:FB:C7
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018D67E633C22CBC2904DFEEC64551D860AB
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ttdnro2gjGc3FijqV2IsvklL-8c.roa
Signing time: Fri 02 Feb 2024 03:39:16 +0000
ROA not before: Fri 02 Feb 2024 03:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44812
IP address blocks: 2a11:4b40::/32 maxlen: 32
2a11:4b44::/32 maxlen: 32
2a11:4b45::/32 maxlen: 32
2a11:4b46::/32 maxlen: 32
2a11:4b47::/32 maxlen: 32
2a12:a343::/32 maxlen: 32
2a12:a344::/32 maxlen: 32
2a12:a346::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 09 Feb 2024 03:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:67:e6:33:c2:2c:bc:29:04:df:ee:c6:45:51:d8:60:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Feb 2 03:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6d767ae8da08c67371628ea57622cbe494bfbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:d1:87:66:e6:bc:5d:ca:4b:8e:1d:e7:b0:
79:24:96:36:b2:b8:98:11:55:0c:30:17:a8:2b:01:
cf:d3:55:f2:89:16:bc:7e:5d:72:d8:e7:1d:82:1b:
c0:6c:f0:ce:fe:68:1d:7b:31:29:c5:71:41:ae:70:
f6:15:76:ae:75:be:5a:87:83:cf:34:54:a1:58:89:
82:7e:b2:84:f7:91:96:bd:b1:ac:90:66:99:c2:b8:
64:c7:39:98:98:c5:55:cb:ed:35:7a:b6:41:cb:22:
74:9b:eb:d2:16:a4:d3:b4:6b:6a:75:d0:e2:e0:0b:
b6:07:30:02:98:40:d2:3b:a5:bb:2b:6b:37:93:44:
7a:ec:6d:fb:9a:2e:61:ff:9a:56:6e:ff:f4:b4:74:
69:ee:5f:9f:15:15:f3:2b:d9:35:ad:c3:6b:39:9a:
12:71:01:29:59:b5:a9:9e:b6:32:0c:a4:ee:15:3d:
3b:a8:68:76:5e:01:c7:03:49:27:5a:bd:88:c0:d3:
0a:ae:05:6b:64:dd:81:87:90:76:89:fe:5f:7b:98:
f3:9d:e6:30:bf:1e:95:62:cf:e9:e7:b3:d6:bc:c9:
a7:19:7a:1b:d1:d0:96:a3:ac:05:7b:04:b9:73:eb:
c6:18:d4:95:4b:5d:10:df:39:b8:80:3b:7d:25:49:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:67:AE:8D:A0:8C:67:37:16:28:EA:57:62:2C:BE:49:4B:FB:C7
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ttdnro2gjGc3FijqV2IsvklL-8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4b40::/32
2a11:4b44::/30
2a12:a343::-2a12:a344:ffff:ffff:ffff:ffff:ffff:ffff
2a12:a346::/32
Signature Algorithm: sha256WithRSAEncryption
27:4b:3b:70:73:26:26:19:4a:cd:d6:c3:70:0d:a5:5c:83:47:
4f:c5:54:73:91:d0:35:51:12:43:2c:a3:ef:67:46:ba:d6:06:
52:57:cb:8a:08:e0:50:08:95:ad:40:a1:80:0c:3d:ce:58:24:
9a:7f:0a:d0:31:81:4c:86:5f:13:58:4c:d8:a3:d2:5a:dd:c6:
36:22:57:ce:41:59:53:5b:db:90:93:53:35:70:fa:36:1d:f6:
a8:5c:ec:3d:e7:12:49:b1:5d:ba:21:18:32:5f:c4:dc:0c:c4:
de:49:55:6e:55:2b:c1:4a:b1:79:09:59:3f:d1:a0:6b:49:8d:
c4:11:3a:a2:46:e0:35:ef:26:2f:fa:31:c1:50:6f:8f:ff:0c:
00:f8:11:ad:15:1d:34:97:6a:ff:a7:40:db:be:12:44:f5:31:
94:3e:73:54:6b:83:46:d1:33:fc:7d:e6:ad:af:b2:8c:36:47:
df:4f:e6:95:c9:28:f0:01:ff:b0:26:95:35:be:3c:dd:16:0e:
f7:8d:64:03:de:50:bc:a5:50:03:35:f5:ac:da:9a:ab:83:3a:
3a:cc:2d:f1:9a:02:50:04:c9:e8:8c:89:44:c6:30:b3:40:fe:
a8:ab:84:38:db:b1:5d:bc:a5:62:58:0c:0e:4c:bd:a6:ec:72:
45:a1:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:03 2025 by rpki-client