Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/mZlDQoM8_wtr7QCQrOEa7wov7Lo.roa
File: mZlDQoM8_wtr7QCQrOEa7wov7Lo.roa (raw, json)
Hash identifier: 5f+onU03WgMfGfnO+16Or8sz7GS6SkGESp5Xacnb+g0=
Subject key identifier: 99:99:43:42:83:3C:FF:0B:6B:ED:00:90:AC:E1:1A:EF:0A:2F:EC:BA
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0ADBE2B7F25C9B80B675FACA34A442
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/mZlDQoM8_wtr7QCQrOEa7wov7Lo.roa
Signing time: Sun 01 Jan 2023 11:15:06 +0000
ROA not before: Sun 01 Jan 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207806
IP address blocks: 2a00:7180:8004::/46 maxlen: 46
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:db:e2:b7:f2:5c:9b:80:b6:75:fa:ca:34:a4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99994342833cff0b6bed0090ace11aef0a2fecba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:b6:56:a9:27:25:ad:e0:32:0e:43:58:76:
4e:48:27:e9:0e:82:12:c8:61:fc:1a:c2:10:06:6f:
49:0a:bf:07:94:76:2c:64:89:d9:49:5d:1d:f5:8e:
57:47:df:02:7e:0e:1f:93:04:c3:75:10:b9:02:1e:
f1:25:b2:ff:9f:f8:8f:ef:47:0c:06:74:88:e4:f2:
e7:84:43:81:12:d4:12:80:51:40:a9:fc:2a:4d:ce:
f2:4b:8b:4c:d0:79:5d:b4:fa:e4:7a:07:75:74:d3:
d0:d1:05:27:c1:0a:c3:44:da:9a:21:d9:d1:d8:2f:
c1:5e:f3:00:a2:2f:a0:7d:f7:73:d3:bb:1e:6c:81:
82:12:0b:c5:e0:4c:0d:76:df:03:38:59:ab:b5:d8:
ae:8c:51:99:a1:f2:f4:61:f2:e9:43:76:63:25:a0:
94:a5:74:d8:2a:9d:0c:dd:02:d8:34:58:f8:8f:3d:
f2:0c:36:db:1f:32:22:26:fb:b4:4a:bd:fd:c5:58:
f5:fb:13:9e:d1:95:d8:d8:3a:d1:38:2a:fc:36:f9:
74:8a:11:ae:56:fb:90:16:7b:fd:a1:c9:02:16:ac:
f7:b3:29:24:b4:29:1c:a4:e3:25:88:49:ec:b9:0c:
48:95:c6:99:5a:a7:e9:ea:41:0d:3c:67:1d:ed:2a:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:99:43:42:83:3C:FF:0B:6B:ED:00:90:AC:E1:1A:EF:0A:2F:EC:BA
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/mZlDQoM8_wtr7QCQrOEa7wov7Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8004::/46
Signature Algorithm: sha256WithRSAEncryption
80:d5:c6:08:11:9f:c2:18:fc:d2:45:86:b4:d6:df:67:09:35:
d2:2d:10:3c:57:f2:c0:f3:58:5d:26:13:76:d9:f7:49:6d:ea:
a7:5d:42:00:fc:d0:b3:e2:8e:db:9d:e0:b9:f9:0e:e5:12:1c:
7a:99:32:e2:3e:30:a3:cd:30:bf:ab:aa:f6:73:76:2f:a1:98:
12:2e:a5:86:a2:e3:05:c7:78:b3:47:b5:fb:02:78:00:52:0f:
fb:dc:cc:76:78:a5:e7:cb:02:b7:42:7b:1d:7b:ea:3e:3d:5e:
68:8d:b0:1c:1e:0d:8a:5b:e3:31:ad:b2:8a:45:7b:28:6d:0b:
66:63:42:8f:7f:9d:e3:fa:28:b6:8c:44:a3:c5:42:8c:4a:58:
56:4b:cd:29:0a:d9:a8:23:cc:e5:4a:11:1c:ba:43:e9:2c:47:
5a:7c:2c:3a:17:1f:45:ec:06:2c:9f:d7:2a:3b:aa:96:68:a1:
42:7a:45:b4:26:0d:57:7e:ab:f0:02:58:0e:b4:9e:d6:81:de:
dc:70:f0:4b:04:68:b0:d0:a4:2f:69:7f:94:58:5c:24:a9:82:
2b:49:79:c0:d1:59:92:04:92:45:52:cc:ef:5a:ce:f9:03:2e:
58:18:30:c0:63:ca:ac:24:6e:0c:a9:44:1b:3f:96:7b:f6:d3:
d0:98:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:51 2024 by rpki-client on console-ams.rpki-client.org