Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/7UfE3O2a1ASVAw6keyIJ3sDqpQ0.roa
File: 7UfE3O2a1ASVAw6keyIJ3sDqpQ0.roa (raw, json)
Hash identifier: 5EauGgb8uJkTla4NmwAyz3ml+TRfkmoPjunZjyEGK0A=
Subject key identifier: ED:47:C4:DC:ED:9A:D4:04:95:03:0E:A4:7B:22:09:DE:C0:EA:A5:0D
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0ADF9B47347420CCFDE8AFC0165665
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/7UfE3O2a1ASVAw6keyIJ3sDqpQ0.roa
Signing time: Sun 01 Jan 2023 11:15:07 +0000
ROA not before: Sun 01 Jan 2023 11:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210675
IP address blocks: 2a00:7180:8014::/46 maxlen: 46
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:df:9b:47:34:74:20:cc:fd:e8:af:c0:16:56:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed47c4dced9ad40495030ea47b2209dec0eaa50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:5f:6e:db:99:14:2c:a6:1c:c3:c0:76:82:
e4:81:27:26:24:e1:4f:55:9f:91:fb:b4:20:1f:90:
62:3b:74:73:e0:fc:89:75:2c:8f:30:8f:ec:72:42:
20:48:f7:f4:26:dd:ee:7e:ea:bb:59:36:fb:e0:f6:
b7:56:6d:6f:f1:96:f3:b5:ec:fd:87:8c:23:ac:15:
73:54:d7:2b:94:fd:7d:51:4b:4a:60:17:30:d1:36:
50:25:db:2e:be:04:7e:fc:2e:45:42:6e:ca:db:fe:
0e:03:6c:a2:72:d2:c3:b3:aa:2e:2e:14:d0:80:c8:
8c:67:49:4a:b0:5a:30:6e:72:fb:3f:b9:74:b3:bd:
65:c6:2b:ba:cd:35:0c:71:0f:7d:1c:90:51:6d:72:
8a:8f:f6:dd:84:9a:bd:2f:f5:84:e1:af:f2:ef:b8:
bd:e2:86:c1:2c:95:24:14:2a:c6:19:b0:67:62:b7:
7c:96:ca:34:07:0b:aa:52:aa:88:e2:8f:2c:79:83:
8d:ef:64:58:e8:0a:87:bb:18:4a:5f:0f:9f:6d:d3:
7c:6a:fe:96:2a:fd:29:64:3c:a3:bb:eb:86:5c:83:
57:d6:f1:fa:02:53:a6:49:c7:93:29:f7:f6:23:c0:
f1:b0:1c:0a:95:02:d6:56:04:53:5a:f7:25:97:f2:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:47:C4:DC:ED:9A:D4:04:95:03:0E:A4:7B:22:09:DE:C0:EA:A5:0D
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/7UfE3O2a1ASVAw6keyIJ3sDqpQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8014::/46
Signature Algorithm: sha256WithRSAEncryption
75:d0:66:72:4b:2f:69:a7:62:21:ce:36:60:29:15:9e:91:a6:
aa:4b:fe:08:a0:5d:d7:e2:03:ca:49:69:54:fa:8d:7d:81:e2:
fc:0c:1f:4a:be:b0:19:ea:24:30:40:f7:cc:0d:6c:02:4e:f5:
ad:5b:96:76:39:60:dd:9c:f7:2e:7c:ea:36:19:1a:6c:4d:34:
fc:cb:5b:ae:4a:f4:23:27:4f:f5:56:51:07:d7:32:a1:51:19:
7d:a5:99:1d:ab:f7:df:4e:f2:e4:c8:e0:1e:7f:eb:90:b1:ae:
bd:0d:ac:08:38:49:63:c7:c1:56:fb:fa:d1:42:c1:f8:1c:17:
29:db:d8:9a:2a:d5:eb:68:16:96:f3:c2:99:6d:45:8d:33:41:
4f:08:77:0e:4f:6c:d7:2f:5d:65:7e:b8:ed:6c:08:11:24:e4:
43:2a:11:4a:27:0c:1e:74:56:73:45:3e:aa:fa:41:ee:0e:42:
32:e1:bf:f1:53:29:df:19:64:73:e7:7b:ef:53:31:ae:3d:4f:
d0:6d:59:d1:55:ab:f1:5b:76:ea:7c:2f:00:d7:91:9d:c3:6e:
16:b9:00:c9:6d:58:c7:a8:40:4f:47:2c:af:60:f0:d2:a5:99:
98:4b:63:3d:06:72:da:f8:6e:ea:83:bd:40:bf:66:68:cb:42:
15:ee:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org