Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/M7GZG6aTxbtTqkahWI-bPZJaVFU.roa
File: M7GZG6aTxbtTqkahWI-bPZJaVFU.roa (raw, json)
Hash identifier: XkwJsmm3xWe8habTZ8Zt1PuNE51VIN/HJuJ6ff3kjI0=
Subject key identifier: 33:B1:99:1B:A6:93:C5:BB:53:AA:46:A1:58:8F:9B:3D:92:5A:54:55
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 01856D016468D9CD506ADA269A622D9419E3
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/M7GZG6aTxbtTqkahWI-bPZJaVFU.roa
Signing time: Sun 01 Jan 2023 11:04:45 +0000
ROA not before: Sun 01 Jan 2023 11:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207563
IP address blocks: 2001:678:be8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:64:68:d9:cd:50:6a:da:26:9a:62:2d:94:19:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Jan 1 11:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33b1991ba693c5bb53aa46a1588f9b3d925a5455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:c3:20:1a:f9:a7:50:44:61:ba:a2:f6:f0:
0a:2d:bd:62:8b:07:10:54:94:50:63:15:61:92:d7:
8f:59:13:53:87:18:92:2e:3d:8a:b3:1d:70:dc:94:
0e:7e:66:ce:ac:eb:3c:b9:7c:75:df:11:ee:03:a1:
95:e6:23:17:a0:e1:fa:2e:7d:8e:a3:10:5e:16:3a:
dc:5b:74:48:83:a4:84:17:1a:19:f4:ba:5c:66:fb:
37:5a:1f:44:25:6f:5c:c6:a4:f4:91:7f:9d:e3:4f:
45:0d:bf:27:75:08:85:94:38:65:02:99:b1:c8:44:
be:76:4b:e4:96:5b:9e:73:9a:43:cf:68:09:7d:22:
b3:2e:fd:fd:09:5b:3b:8f:63:41:5b:c3:1f:9c:45:
31:e2:23:13:fd:5e:57:1e:8a:56:8d:22:f5:31:b1:
00:e6:08:6b:34:45:44:21:aa:69:9b:7c:e0:76:ba:
d4:ed:f5:3b:9c:61:f9:86:c2:94:e8:23:fb:48:65:
d0:a8:51:51:ce:a0:8a:06:7d:b5:f3:0f:0f:b0:5c:
4c:5f:b3:a2:7d:bf:e2:18:4e:6b:cf:c2:9a:c8:8d:
04:19:e5:a3:5c:dc:5c:ad:46:92:57:78:64:7e:53:
2e:51:ab:48:40:3f:da:75:c0:10:9e:72:cc:d4:31:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:99:1B:A6:93:C5:BB:53:AA:46:A1:58:8F:9B:3D:92:5A:54:55
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/M7GZG6aTxbtTqkahWI-bPZJaVFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:be8::/48
Signature Algorithm: sha256WithRSAEncryption
30:4a:32:83:57:e1:9b:ba:4f:14:fe:a6:65:81:c3:a4:8b:72:
0b:31:64:fd:a8:e6:fa:06:72:79:85:11:2b:af:21:92:0c:7c:
a1:a8:b3:a3:58:b6:2c:3b:03:d6:6d:a6:ca:f4:bb:86:cd:2b:
f6:b8:51:ac:38:d2:17:1e:7b:21:3b:5d:ee:9f:59:62:7a:ff:
44:53:6e:5d:90:c9:ed:57:4c:d8:86:80:bd:b8:95:d4:d6:16:
6c:ff:d3:76:4c:55:b4:8a:07:09:76:c2:21:47:b0:06:52:67:
34:cf:af:e8:07:db:de:fc:f6:87:48:f3:70:08:ef:e8:b7:f3:
07:c6:9a:76:01:46:55:f3:cc:c2:87:87:e2:0b:57:8c:70:12:
c2:d2:18:16:b5:7f:14:b8:3b:ae:ab:5e:c4:01:d6:69:1c:f9:
e8:4c:38:25:2c:5c:2d:4e:7a:50:97:8c:cd:38:8a:44:aa:16:
b2:a9:7f:c9:a1:ab:8a:78:f5:21:0d:34:aa:5f:de:1d:af:e6:
76:eb:dc:21:08:c2:49:09:af:bb:74:dd:86:7b:1e:45:58:2c:
71:32:28:ec:0d:61:75:77:56:a6:a4:5a:64:d5:eb:17:cd:7c:
a9:aa:86:1d:cf:b8:83:17:10:e2:82:6f:01:b8:4e:03:dc:12:
bc:30:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:41 2024 by rpki-client on console-ams.rpki-client.org