Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/xg7rNlqnl9a3fAHCd__jyu0LbaE.roa
File: xg7rNlqnl9a3fAHCd__jyu0LbaE.roa (raw, json)
Hash identifier: RIR7zz945KJDXURZzEBPzFqynUAMfiZu+/lvnZ10SJs=
Subject key identifier: C6:0E:EB:36:5A:A7:97:D6:B7:7C:01:C2:77:FF:E3:CA:ED:0B:6D:A1
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 018572711D70DB1E0E6AC8F38862DDB5E8A7
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/xg7rNlqnl9a3fAHCd__jyu0LbaE.roa
Signing time: Mon 02 Jan 2023 12:24:53 +0000
ROA not before: Mon 02 Jan 2023 12:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207491
IP address blocks: 2001:678:c08::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:1d:70:db:1e:0e:6a:c8:f3:88:62:dd:b5:e8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Jan 2 12:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c60eeb365aa797d6b77c01c277ffe3caed0b6da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:d9:62:28:4c:a9:84:1c:7f:0e:6e:b8:98:
46:8e:04:65:5b:50:16:7d:a0:8d:8b:4d:c3:d6:b5:
73:2c:9b:06:e3:80:1d:41:d8:e1:dd:bc:35:60:50:
63:a1:bf:c0:6d:17:b2:98:67:d4:13:8f:1f:0e:2c:
c0:fe:fc:7d:26:55:15:1a:1d:4d:b3:08:74:31:cb:
71:b8:7e:b8:28:50:a3:aa:7d:38:10:bd:9a:7c:17:
ba:b3:d4:2c:6b:c7:cb:24:1e:99:dd:b4:34:73:9f:
ad:8a:92:4b:a7:89:c7:db:c1:5c:fd:0c:f2:e6:33:
b0:2e:79:cc:a5:21:93:10:2c:ab:e1:69:28:b5:83:
31:ec:f1:75:4c:37:4b:cb:ea:67:49:ca:8b:79:a7:
7d:50:37:2c:27:76:9c:0b:89:4e:f3:58:a5:60:5f:
88:e5:82:c6:0d:ee:a8:96:9c:bf:4c:76:6d:a5:9b:
30:d8:73:96:11:df:7b:8b:67:6d:60:e8:5c:28:34:
7a:fc:3d:b5:06:44:97:06:b7:fc:c9:d3:b9:fb:02:
ea:d8:1c:6c:42:b3:1f:62:e5:a9:18:cf:5e:be:b6:
05:48:a3:43:d8:31:fe:6d:2e:bc:98:34:b7:23:c6:
07:64:a4:a3:c4:4d:c7:06:ed:54:91:f7:a8:ab:95:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0E:EB:36:5A:A7:97:D6:B7:7C:01:C2:77:FF:E3:CA:ED:0B:6D:A1
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/xg7rNlqnl9a3fAHCd__jyu0LbaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c08::/48
Signature Algorithm: sha256WithRSAEncryption
a9:70:03:cc:b1:df:b4:04:e9:a2:bb:9f:34:b5:f5:26:d1:88:
3b:72:29:7a:df:5e:28:27:04:d9:06:ea:6c:36:00:89:ab:bf:
a4:c6:1e:a3:0d:7d:02:2c:3c:b3:9d:1f:d5:2b:9e:9d:34:84:
0b:ab:81:05:84:5c:fa:45:b5:86:16:17:9d:f2:ed:04:1f:dd:
12:c4:5b:82:bc:fb:c0:0a:12:9b:0a:a0:3e:b1:9e:3f:86:a0:
98:e1:27:87:ed:fb:b6:63:36:6a:b0:92:1f:cd:ab:a1:0c:f9:
28:ba:32:f1:9b:d7:d3:61:ef:1f:b6:c7:8c:94:1a:e0:44:81:
ea:f6:2a:02:43:a3:19:40:44:bc:d7:a8:d3:1f:eb:e0:e7:4d:
f3:0f:4a:4d:6d:be:79:33:55:67:95:5e:56:17:df:fa:ec:de:
7e:e8:1f:12:90:81:e2:6c:64:1f:1e:16:fc:79:13:bd:f2:36:
97:a7:2c:20:b9:7c:bb:52:e9:2d:e1:88:79:2a:c1:91:6c:32:
da:87:12:46:65:e8:df:f9:92:4b:4e:a9:92:07:b7:7b:4c:ae:
c9:77:d4:63:53:3b:e6:74:d0:5b:86:22:90:37:7a:21:74:37:
55:1f:07:07:c9:b4:40:23:cf:fc:f6:3e:29:9b:ce:26:8f:04:
08:2e:22:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:57 2024 by rpki-client on console-fra.rpki-client.org