Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_qk6uuLM0wEj8TRODCtIEjChzTY.roa
File: _qk6uuLM0wEj8TRODCtIEjChzTY.roa (raw, json)
Hash identifier: SbrSp0k39pD82p0XJyIIc28rgqYqfHoGTbfqYaf9hVI=
Subject key identifier: FE:A9:3A:BA:E2:CC:D3:01:23:F1:34:4E:0C:2B:48:12:30:A1:CD:36
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2ED36D74ECE08EA7640E1F1A9678D6
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_qk6uuLM0wEj8TRODCtIEjChzTY.roa
Signing time: Sun 01 Jan 2023 07:14:46 +0000
ROA not before: Sun 01 Jan 2023 07:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209864
IP address blocks: 2a0d:2146:8040::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:d3:6d:74:ec:e0:8e:a7:64:0e:1f:1a:96:78:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fea93abae2ccd30123f1344e0c2b481230a1cd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:0b:d2:f1:01:1b:36:7f:83:42:ba:7d:fc:
1e:8a:80:29:ad:93:88:f8:5f:a8:c7:16:f1:2e:b7:
50:d7:00:ce:21:c5:fd:4b:89:72:ce:4e:d7:83:a1:
97:14:0a:e7:67:09:68:02:8a:c1:ae:cf:26:ef:b8:
ca:3c:e6:42:f2:d5:b2:10:df:42:5c:05:c3:97:83:
bb:59:67:8f:fb:98:48:e3:c7:f0:93:cb:8b:ac:57:
5e:80:2e:24:02:79:05:ea:f8:21:6b:b9:35:75:89:
cb:c9:44:35:2f:7b:e3:47:6f:79:3c:5a:f8:30:cf:
0c:4d:56:e5:7b:5d:c6:d8:15:48:07:b6:7c:6c:3a:
0a:17:32:6f:c1:90:bf:c3:97:59:7c:b7:03:7c:5d:
d1:f7:32:4a:3d:f1:2b:9b:49:fd:8e:a2:69:82:82:
dd:fd:8e:38:e7:1b:5f:cf:95:4a:7f:6a:c4:c5:59:
f7:d9:0a:d0:17:4d:96:ac:71:3b:67:bc:8a:91:5f:
ff:dd:2a:bb:f0:14:1b:43:c9:b9:0e:7b:1f:57:10:
cc:08:7c:97:29:d3:4d:a9:72:06:a5:b7:ab:0f:a5:
1c:70:07:03:9f:73:66:c9:57:9e:ae:c6:e9:db:12:
71:39:f4:15:65:2e:4f:07:d6:1d:d7:01:aa:51:54:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A9:3A:BA:E2:CC:D3:01:23:F1:34:4E:0C:2B:48:12:30:A1:CD:36
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_qk6uuLM0wEj8TRODCtIEjChzTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8040::/48
Signature Algorithm: sha256WithRSAEncryption
33:85:e7:62:1f:72:cd:3b:f8:e1:27:dd:df:80:09:a0:50:a8:
38:25:ba:35:2f:9e:03:a5:cf:70:e9:29:d5:53:f3:8c:fb:73:
8e:cd:4d:f4:5b:56:86:38:e8:23:08:80:8c:6d:78:f7:2a:b6:
7d:a5:e5:42:8b:35:b2:9e:07:d0:6f:4b:56:df:5d:79:9c:f9:
7e:b9:92:da:ca:21:c1:ff:d1:3e:29:a5:8d:11:72:32:0c:7a:
fa:a5:86:24:70:0e:cb:39:e8:2a:16:8d:bb:39:44:f6:e2:3b:
f7:9e:90:a9:50:01:4c:7f:57:ed:f6:f8:c2:bc:bb:bc:28:df:
42:9e:2c:37:79:89:81:fb:74:a1:89:8a:3f:44:36:bf:e5:a6:
23:b2:c4:0c:74:6f:40:6e:1b:be:24:f2:92:d8:e3:4a:a7:68:
e0:95:40:42:cd:2a:36:af:7b:5f:47:7c:fa:9f:1c:c6:c5:df:
e6:e5:69:94:7e:b9:f1:8f:5a:68:14:7a:1a:9c:a2:9d:51:2a:
d0:7c:a1:01:2b:7f:e1:65:ee:fd:1f:ec:0b:4c:62:dd:14:42:
5a:ab:9f:20:d1:a2:d3:f2:a9:b6:c6:60:f4:bc:14:da:7d:5b:
11:5e:a6:c9:cf:53:28:27:41:a3:83:bc:76:93:2d:9a:d8:ea:
22:1c:81:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org