Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Jk-8gxoE3w26WGvS2wC9HvsjQHs.roa
File: Jk-8gxoE3w26WGvS2wC9HvsjQHs.roa (raw, json)
Hash identifier: Rqkxl4Q6nOuX1BL76AT0klZlJbhAYEgciXqVejISVH8=
Subject key identifier: 26:4F:BC:83:1A:04:DF:0D:BA:58:6B:D2:DB:00:BD:1E:FB:23:40:7B
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 01856CF8803B128A83DEF63E97505AE0656A
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Jk-8gxoE3w26WGvS2wC9HvsjQHs.roa
Signing time: Sun 01 Jan 2023 10:55:03 +0000
ROA not before: Sun 01 Jan 2023 10:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213034
IP address blocks: 2a07:22c0:8003::/48 maxlen: 48
2a07:22c0:8002::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:80:3b:12:8a:83:de:f6:3e:97:50:5a:e0:65:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 10:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=264fbc831a04df0dba586bd2db00bd1efb23407b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:3b:91:df:af:13:62:85:94:96:7d:2e:f4:
a0:e8:d9:4f:82:57:01:0b:bf:80:08:3b:26:32:ea:
5c:ba:41:a5:43:70:fb:1d:f2:c6:c2:fe:a9:a8:09:
f7:af:82:d7:89:a6:87:83:49:7a:e5:c4:41:a0:90:
18:e2:f6:df:a1:60:09:e8:46:e9:bb:0a:26:15:a0:
d5:99:5a:fb:19:78:16:0e:fb:46:56:b6:1c:76:2c:
ee:87:b4:f8:54:d6:8c:47:ec:7f:9b:e8:b2:6f:e3:
f7:80:99:97:3a:13:b7:1e:06:97:b2:79:63:f9:f0:
6f:28:8d:51:54:d6:da:a4:4c:da:1c:c2:37:3c:a9:
e9:de:b9:0e:27:7b:97:29:b4:6c:59:10:26:ab:75:
dd:fb:01:cc:ab:32:24:50:a2:60:f2:a8:f8:70:20:
95:26:b7:07:e6:d5:80:fe:e4:4d:74:41:c4:8c:98:
54:e3:b5:fe:d9:81:30:81:27:69:73:3a:46:c6:61:
21:0d:60:e2:54:60:b4:46:9b:0a:c3:d6:92:12:2c:
c8:6f:8b:60:cf:d1:29:04:c7:5f:6c:e5:0a:4f:d9:
a7:17:bf:2a:46:26:f1:3c:86:e7:9c:e2:db:7f:23:
19:a8:cb:d4:3b:9f:80:b8:3a:4c:81:3e:dc:bb:de:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4F:BC:83:1A:04:DF:0D:BA:58:6B:D2:DB:00:BD:1E:FB:23:40:7B
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Jk-8gxoE3w26WGvS2wC9HvsjQHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c0:8002::/47
Signature Algorithm: sha256WithRSAEncryption
23:f5:0a:60:94:48:9e:2d:71:28:ae:2c:5d:19:e9:79:8e:87:
85:0a:b9:99:44:ed:71:ba:17:06:53:01:d6:63:02:3d:8a:66:
9c:06:34:9d:0b:d9:0a:a6:9f:3b:ee:a8:c2:e3:d9:f6:06:e1:
01:44:1d:c3:52:75:0d:8e:16:4f:d6:fd:27:c1:67:0f:e9:32:
dc:ff:3a:bf:aa:17:a9:77:b5:54:ef:05:59:8d:7e:20:d3:66:
e3:b1:fe:48:67:cf:00:f2:ea:12:66:45:09:7f:68:40:e1:31:
3f:e5:3d:bc:91:44:05:8c:72:80:d8:4d:5a:ab:c7:0d:43:99:
11:ef:fa:07:39:9b:3d:9f:b1:e1:28:8d:d2:b2:72:65:17:d7:
f4:6f:9f:31:02:72:64:3d:f1:00:ca:b9:8f:4e:e8:97:67:da:
1e:d3:a0:5a:c8:c1:77:21:80:c8:63:cd:94:42:ad:3f:7e:34:
a7:f3:e3:20:5c:1e:87:2e:9b:55:74:08:31:f6:21:73:e8:08:
56:d4:41:5d:76:ab:45:a5:d3:9c:7a:6a:61:20:d9:6b:5f:9f:
d9:fc:24:e8:09:4c:4e:b9:ef:2b:ad:27:b5:d5:65:be:e4:5c:
fe:98:10:60:d0:a1:7b:f1:24:80:9d:da:31:01:16:7f:c6:67:
4c:4a:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:35 2024 by rpki-client on console-ams.rpki-client.org