Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/i6mA7B1MQZA7WdCiXyhze-_eNlc.roa
File: i6mA7B1MQZA7WdCiXyhze-_eNlc.roa (raw, json)
Hash identifier: qlg3jMWjQen/W2nY0R5N/zg9v+EZp8BrdZryzGJ+h0k=
Subject key identifier: 8B:A9:80:EC:1D:4C:41:90:3B:59:D0:A2:5F:28:73:7B:EF:DE:36:57
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018BDDAECA15D960B67054D0522D250B9F4C
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/i6mA7B1MQZA7WdCiXyhze-_eNlc.roa
Signing time: Fri 17 Nov 2023 14:28:21 +0000
ROA not before: Fri 17 Nov 2023 14:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a04:1bc0::/29 maxlen: 29
2a0f:cdc6:2001::/48 maxlen: 48
2a00:4080::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:ae:ca:15:d9:60:b6:70:54:d0:52:2d:25:0b:9f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Nov 17 14:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ba980ec1d4c41903b59d0a25f28737befde3657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:e4:a9:99:af:8c:b1:bd:1f:44:75:9b:18:
d1:a7:42:78:e1:fb:4a:5e:77:60:b7:7b:a3:30:63:
68:bf:5c:54:3b:f2:f9:f2:d5:02:b2:4f:4a:8b:7c:
02:e1:85:50:30:72:90:b1:1a:59:7b:79:a0:8d:49:
9b:74:1d:70:db:97:16:d7:41:e0:b4:e2:4e:ce:1d:
a6:18:6b:5c:29:e3:dc:e1:89:92:30:a1:4e:c3:c2:
5c:e0:49:22:e7:f8:a2:58:80:27:91:45:10:ee:78:
58:7d:13:dd:e6:e0:73:24:e2:5a:c7:ba:50:50:b0:
42:d4:81:c5:5b:30:ce:5f:45:c4:9d:ba:b8:1a:2e:
88:a6:ec:1b:e7:ca:59:73:db:31:e3:38:ca:9b:02:
ab:fb:8a:ce:3c:04:84:60:b3:01:f9:19:f8:9b:98:
48:e3:dd:ef:81:c6:90:7d:36:00:79:10:a6:49:ea:
8d:e8:a2:55:27:31:cd:6c:98:8c:da:74:01:8c:c4:
50:32:33:c5:e4:19:ff:86:75:59:4f:fd:82:eb:6d:
79:e8:38:87:b1:29:43:f5:c3:e6:f9:1e:a8:2e:36:
b6:95:9c:4f:c6:aa:ee:c6:1c:20:f1:fc:43:37:13:
f9:8a:82:b6:b0:df:fe:73:e2:ee:0f:82:c8:27:81:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A9:80:EC:1D:4C:41:90:3B:59:D0:A2:5F:28:73:7B:EF:DE:36:57
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/i6mA7B1MQZA7WdCiXyhze-_eNlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:4080::/29
2a04:1bc0::/29
2a0f:cdc6:2001::/48
Signature Algorithm: sha256WithRSAEncryption
38:41:7e:99:fb:07:47:9e:ce:c3:10:74:b8:07:69:03:07:f3:
f1:41:8d:12:e7:3a:69:45:db:fb:88:c4:a7:3e:e2:46:74:0d:
5f:b0:d7:5f:e9:e5:af:8c:4e:b5:f2:81:35:71:d8:63:23:83:
eb:e1:23:c8:9e:50:45:bd:97:d9:84:ab:ea:f8:d7:e7:92:ed:
bd:06:ac:23:22:a1:93:78:f1:93:1f:88:d4:74:d2:fc:09:d6:
34:0e:bc:5b:dd:70:02:5c:0c:eb:c6:02:71:70:88:69:6a:78:
6e:4c:f3:c7:5d:0d:77:25:bf:73:90:87:2a:f2:ad:1c:30:90:
68:82:aa:1a:0d:64:4b:6a:11:2b:e7:b4:a6:7c:4f:33:62:73:
cb:f3:bf:65:ee:6b:9c:1b:e6:36:c1:dc:20:cf:e9:8a:d6:e9:
b8:6e:23:28:e3:eb:74:49:64:1e:f6:1a:bf:c0:4a:30:e2:bc:
15:ee:e7:c9:40:6f:f9:32:f9:43:13:f0:10:18:4c:ba:c1:79:
d6:7d:29:55:64:7b:e4:9a:65:1f:de:fa:0d:7d:c3:3c:c8:7a:
90:ce:a3:3b:75:8c:3c:04:07:e7:63:82:2b:cb:ce:47:27:2d:
3b:49:40:d0:b7:d4:44:25:e0:3c:a7:6d:27:b9:ff:ae:af:d0:
39:77:79:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org