Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ASHFN4hJBoUu_UPZRWROFTzLez4.roa
File: ASHFN4hJBoUu_UPZRWROFTzLez4.roa (raw, json)
Hash identifier: aepJjcZwejOdU63BjwELepS7ShaRpVnUcvkgpo55OGg=
Subject key identifier: 01:21:C5:37:88:49:06:85:2E:FD:43:D9:45:64:4E:15:3C:CB:7B:3E
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2ECE11B4FF0C87B2450499EEA67B0D
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ASHFN4hJBoUu_UPZRWROFTzLez4.roa
Signing time: Sun 01 Jan 2023 07:14:44 +0000
ROA not before: Sun 01 Jan 2023 07:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50801
IP address blocks: 2a0d:2146:be00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:ce:11:b4:ff:0c:87:b2:45:04:99:ee:a6:7b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0121c537884906852efd43d945644e153ccb7b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:e9:6a:0a:16:13:58:21:87:08:6b:df:42:
29:f4:75:4d:87:8b:92:a1:58:d1:02:10:91:0c:41:
42:6b:9a:aa:33:95:a0:09:9d:d1:5c:a6:08:f3:f2:
a0:51:df:da:22:60:a2:7f:c5:b5:54:17:08:37:c3:
e7:f7:9b:7f:a3:e2:ce:c2:19:73:03:6e:ee:c5:65:
f4:d7:83:13:9f:93:61:5c:70:56:2c:00:99:23:ad:
22:43:29:cd:ef:b5:1e:86:4b:8a:8b:3b:16:cb:d4:
88:dc:e9:91:a3:40:3b:15:da:9a:11:58:30:f7:72:
e5:36:9a:cb:61:ba:66:ec:2c:97:f6:80:64:41:b8:
53:78:93:b1:07:bb:51:af:ad:63:a5:5b:91:08:78:
76:92:3c:b0:d2:ac:b9:49:94:c3:e3:a7:15:30:1a:
ed:ed:55:fd:ad:e5:45:cf:6d:d0:f6:da:31:a0:0c:
29:5a:05:79:07:8c:99:d5:fa:5f:0e:4c:cb:fc:bd:
7d:6a:b0:53:d9:65:51:fc:a4:07:4e:19:97:f6:d5:
a8:8f:87:b9:51:1e:c9:14:0b:2b:5d:e5:4e:12:c6:
53:e5:3d:80:fd:78:bd:d6:e5:56:0f:88:fe:d4:11:
c5:a2:b9:b2:6c:9a:cd:be:81:af:68:c1:dc:11:c8:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:21:C5:37:88:49:06:85:2E:FD:43:D9:45:64:4E:15:3C:CB:7B:3E
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ASHFN4hJBoUu_UPZRWROFTzLez4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:be00::/40
Signature Algorithm: sha256WithRSAEncryption
06:99:08:a6:4d:c1:c3:7b:2b:72:3c:90:cb:79:4b:d2:df:f5:
a0:76:39:39:84:f9:d0:c8:27:9a:7b:ed:47:0b:02:da:2b:da:
e4:9b:88:22:d7:e1:4d:b2:2d:ae:aa:f9:c2:83:d3:a0:0d:04:
59:cd:46:3e:95:c8:6f:86:c9:e6:65:94:04:86:03:a0:2a:d3:
df:80:57:bc:5f:81:f5:0e:1a:72:e2:22:82:a3:aa:21:94:21:
d9:62:ed:77:62:0f:21:9f:e8:99:36:6c:12:0c:b8:1d:2f:92:
7d:b0:bd:44:96:f2:ef:8a:46:ab:5e:44:0e:11:6d:a2:b4:f3:
d6:81:ad:01:9c:0d:fe:c6:33:8d:05:d3:0c:24:42:c6:69:b4:
1c:63:c9:d1:94:91:b2:b9:7d:83:1d:1b:0c:a4:17:4e:8b:0f:
bd:fd:b4:0f:b7:50:bd:51:c5:1a:36:b0:88:4e:82:53:fe:d5:
63:02:b6:ff:a6:f6:c2:69:5d:71:64:fa:69:92:87:b6:67:d9:
49:c6:29:82:e9:4e:d9:e6:2b:9d:79:2b:e2:1b:03:e9:36:3c:
9a:d4:62:17:7d:f8:82:18:f9:51:d9:c4:de:39:48:1e:73:29:
33:a7:7e:db:b9:28:d5:d7:3b:b5:56:dd:35:ee:1d:c5:e1:d0:
72:58:7a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org