Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/76J-iNjPjm6pybishAdWb73q-fw.roa
File: 76J-iNjPjm6pybishAdWb73q-fw.roa (raw, json)
Hash identifier: ZBeN3LZwHOmRF25WOnaprX8tY1U/DbIGyJXq9g8GpAY=
Subject key identifier: EF:A2:7E:88:D8:CF:8E:6E:A9:C9:B8:AC:84:07:56:6F:BD:EA:F9:FC
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01856FF9432C5F26139D04D73CA3FABFA537
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/76J-iNjPjm6pybishAdWb73q-fw.roa
Signing time: Mon 02 Jan 2023 00:54:44 +0000
ROA not before: Mon 02 Jan 2023 00:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212789
IP address blocks: 2a0e:a6c7:1000::/38 maxlen: 48
2a0e:a6c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:43:2c:5f:26:13:9d:04:d7:3c:a3:fa:bf:a5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 00:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efa27e88d8cf8e6ea9c9b8ac8407566fbdeaf9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:da:9f:4d:e3:7e:52:72:3a:0b:23:a4:37:
fc:44:32:70:e0:89:15:b9:e4:b4:6d:cf:28:2f:e9:
55:34:a7:75:2f:73:c6:9a:7c:6e:53:5a:ea:29:8f:
55:b0:c7:4e:21:38:1e:76:6f:dd:df:14:be:03:49:
16:02:55:8a:f5:c0:f7:7a:eb:d2:07:83:ed:0a:6b:
7b:90:5c:15:ca:36:29:d6:db:10:62:26:72:20:fc:
9d:96:44:10:ff:48:72:c6:79:0c:83:62:6f:72:ee:
53:e3:0e:9e:a5:1d:51:4f:19:23:a2:21:87:6d:f4:
5e:d7:f9:d3:9a:23:ea:80:da:60:1e:22:a6:7a:2c:
68:f2:a1:cc:06:7e:9d:4a:cf:b1:68:61:c7:3c:56:
cd:c0:75:f4:95:c9:61:8a:46:61:3f:90:e6:d2:9f:
82:ea:a2:33:f7:b2:53:a6:fc:15:f1:14:bc:38:29:
5c:45:1b:c0:0a:ce:19:e7:5f:ee:9a:7d:7c:e4:25:
c1:30:d8:c9:da:30:7d:92:de:df:59:7e:13:4c:f1:
45:c5:58:03:32:1b:c3:20:42:98:4c:c1:31:19:6d:
20:4e:e8:f1:84:40:28:0a:9c:7f:37:01:ce:06:8f:
25:a9:68:a1:d0:96:89:12:fa:37:10:49:bb:ea:42:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:7E:88:D8:CF:8E:6E:A9:C9:B8:AC:84:07:56:6F:BD:EA:F9:FC
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/76J-iNjPjm6pybishAdWb73q-fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a6c7::/32
Signature Algorithm: sha256WithRSAEncryption
66:ec:87:4b:e5:33:9f:72:17:2f:4d:7d:ed:b3:01:8f:46:6f:
21:12:f1:46:69:bd:c1:1d:85:5b:2b:37:16:cd:0e:21:df:b5:
27:6a:0f:8a:65:34:e0:c7:a4:53:e1:12:cf:e5:86:38:97:99:
ca:ee:16:77:79:3d:ae:4b:29:bd:32:9e:0d:11:1e:05:02:08:
d2:20:42:61:61:01:f0:b8:22:12:5e:cf:b4:1f:6b:85:17:4b:
2a:6b:0b:25:11:ab:a0:79:a2:d0:09:c5:5b:b8:f8:76:68:4c:
e2:19:6b:9b:59:ee:f1:18:52:70:ec:50:a2:51:fb:96:50:51:
83:3a:14:b7:fa:9c:3f:2b:43:0d:51:80:b0:ba:da:b4:31:4b:
4a:94:ad:8c:42:52:ae:38:43:98:9d:ca:d6:9b:75:83:51:e6:
3c:aa:73:ff:26:85:58:83:69:57:ca:6f:96:1f:1c:69:2c:20:
ea:08:a9:21:0c:d4:27:2b:c8:23:97:8b:ff:eb:b4:88:8c:a5:
68:f9:33:53:a7:f9:ef:dc:cb:21:fd:e7:e1:e7:a1:89:b4:3c:
f7:92:00:86:11:41:32:f4:44:3d:71:86:99:2a:8c:0f:c7:7e:
77:a4:31:59:96:da:55:3f:27:f4:7e:4f:c3:0d:5e:19:56:89:
15:5d:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org