Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dLkxsMjf1iSqnLAe60bkCENcjbs.roa
File: dLkxsMjf1iSqnLAe60bkCENcjbs.roa (raw, json)
Hash identifier: hBHho5ntJWm1YzDrwa8EZdFSB9MA5RuDZq3ZjyXdk0k=
Subject key identifier: 74:B9:31:B0:C8:DF:D6:24:AA:9C:B0:1E:EB:46:E4:08:43:5C:8D:BB
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2EC6C339F0BF7439D9293D7FC34465
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dLkxsMjf1iSqnLAe60bkCENcjbs.roa
Signing time: Sun 01 Jan 2023 07:14:42 +0000
ROA not before: Sun 01 Jan 2023 07:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a0d:2146:848a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:c6:c3:39:f0:bf:74:39:d9:29:3d:7f:c3:44:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74b931b0c8dfd624aa9cb01eeb46e408435c8dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:aa:f6:e3:77:01:21:91:81:76:54:a3:75:78:
00:b8:ca:ba:c4:a9:b5:fd:1d:d0:28:82:fd:70:b8:
70:49:15:ac:3b:e4:fb:c3:c6:4f:0c:ae:0e:51:20:
bd:5b:28:40:b0:bc:57:45:f8:23:03:34:f9:f6:4e:
9f:e4:d4:57:d0:0c:32:62:9a:0c:af:4f:fe:f7:40:
de:0d:2f:14:e4:12:65:22:d5:90:c0:f5:2f:95:a7:
be:bf:4e:cb:2d:71:5e:9c:b2:91:22:6c:0f:ba:75:
63:3f:0d:13:fa:ab:27:8b:c0:b9:ad:fd:b1:6d:ec:
f3:67:75:de:f7:1c:89:3d:6e:53:ad:ad:30:fb:9d:
d4:4f:53:1a:4e:c5:57:62:bd:e5:7f:b6:73:d6:dd:
45:7a:d2:12:24:75:a1:4b:9b:87:84:9c:ce:3b:4d:
e2:cf:0b:06:38:76:f0:d3:15:35:44:93:21:b7:6b:
af:d2:d3:41:2b:ed:53:e6:12:b2:98:5c:b7:ae:d2:
d6:50:46:f5:85:c1:2c:95:89:fc:23:1e:ed:41:99:
22:87:d0:83:af:62:90:3b:8f:e0:f5:1b:6d:31:08:
1f:f3:45:72:a8:3f:c5:45:a4:36:f0:04:57:96:77:
43:bb:ab:95:b9:0a:b5:e1:00:5f:68:70:4b:4f:55:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B9:31:B0:C8:DF:D6:24:AA:9C:B0:1E:EB:46:E4:08:43:5C:8D:BB
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dLkxsMjf1iSqnLAe60bkCENcjbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:848a::/48
Signature Algorithm: sha256WithRSAEncryption
26:1d:30:e4:2a:75:41:64:47:e7:ce:51:7b:de:bb:86:4b:cd:
ae:2e:4e:0e:3a:0f:fc:16:01:3d:fe:5b:72:e0:6d:01:2b:27:
94:df:e7:61:24:6b:88:95:97:27:80:24:7d:e9:84:af:30:96:
ec:7f:a9:c7:3f:9d:14:7a:27:1f:56:ac:44:cc:12:25:6b:b9:
b1:15:f5:9e:85:e9:8b:5f:24:7d:a7:b8:af:49:3e:fa:37:88:
b3:51:33:36:e0:9e:7a:ad:8a:43:39:66:7a:a5:0e:3c:9e:a7:
6e:fd:51:e7:8a:71:90:95:37:32:69:e9:bf:0f:50:61:38:ff:
20:af:59:10:b6:1d:25:e6:a0:26:15:70:26:21:ce:99:6e:0f:
68:67:4f:8e:30:24:02:01:fd:2d:4c:d6:01:a3:63:db:96:9e:
db:1a:51:00:c4:6f:8a:80:b7:68:fd:2c:9e:d2:a7:cb:3e:67:
eb:fd:b7:fe:a4:ca:fa:75:93:36:4e:60:5a:87:c5:c1:5a:c0:
fc:1a:ca:84:cd:18:c7:08:12:5a:0c:e3:d7:27:30:fd:41:ec:
50:cc:5f:53:13:85:ca:a0:59:d3:09:bd:84:33:64:e5:ad:5d:
ef:fa:b9:cb:0a:33:cb:75:25:f9:87:d3:f1:b1:db:d0:66:62:
c3:b2:dc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org