Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/pskZRvxzsvqt8eyqVamcGLNDUOM.roa
File: pskZRvxzsvqt8eyqVamcGLNDUOM.roa (raw, json)
Hash identifier: ecrLKZppuaPfO/fCfaB7jjMLagb209lQvQYyQvsPSdk=
Subject key identifier: A6:C9:19:46:FC:73:B2:FA:AD:F1:EC:AA:55:A9:9C:18:B3:43:50:E3
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 01869748062D88CF6664611A88A3CA72F939
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/pskZRvxzsvqt8eyqVamcGLNDUOM.roa
Signing time: Tue 28 Feb 2023 09:08:45 +0000
ROA not before: Tue 28 Feb 2023 09:08:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41609
IP address blocks: 2a00:4080::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Feb 2023 17:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:48:06:2d:88:cf:66:64:61:1a:88:a3:ca:72:f9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Feb 28 09:08:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6c91946fc73b2faadf1ecaa55a99c18b34350e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:31:cc:12:7c:87:5f:51:d8:c7:96:89:f7:62:
27:b1:4a:91:97:5a:7c:18:51:3c:a2:8f:a1:0a:87:
f9:db:a2:5e:5e:e1:0c:6b:32:53:c5:bf:f3:f5:19:
39:a8:98:5f:8e:d5:ee:59:db:78:63:07:b2:48:5f:
73:4a:74:15:a8:00:46:4c:25:9f:13:0a:ea:a1:1b:
8b:7c:91:3a:14:75:de:25:be:ce:04:49:de:d0:c3:
d5:2f:ec:80:15:b3:11:61:3d:db:9c:1c:b0:e9:2b:
ea:05:11:89:cd:bf:a7:0a:cd:f1:49:60:77:e3:cc:
09:46:07:f9:f8:48:ac:4f:e6:f0:9b:2f:97:90:f4:
b1:de:32:ae:2c:48:7d:58:75:bc:06:b5:1c:8e:26:
8c:d3:3c:08:8b:44:93:f9:f4:77:cc:ea:48:14:bd:
d3:0b:8d:96:db:e0:cf:8e:0d:66:a9:56:0b:8c:74:
b3:e7:2f:d1:7e:a3:8e:2e:86:52:0c:23:89:3c:bd:
96:b1:bf:34:05:08:e0:a5:30:7a:38:b6:0c:30:9a:
10:31:14:40:0a:7e:5c:26:10:ef:ca:b4:d5:61:c3:
43:b3:30:fe:b8:3a:06:32:aa:7c:05:d3:10:78:c1:
d7:99:cd:1c:02:fd:00:fe:52:68:89:7c:61:8d:9c:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C9:19:46:FC:73:B2:FA:AD:F1:EC:AA:55:A9:9C:18:B3:43:50:E3
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/pskZRvxzsvqt8eyqVamcGLNDUOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:4080::/48
Signature Algorithm: sha256WithRSAEncryption
52:ff:a3:ad:73:00:09:7f:33:3c:44:d2:25:9a:57:21:66:bf:
84:4f:a9:48:ba:24:e5:fd:8c:ae:fc:e6:55:c0:f5:14:f7:ad:
1a:81:19:f3:fa:b8:cd:db:dc:54:53:aa:21:86:8b:84:23:38:
7a:6a:68:6e:e2:38:fe:21:64:94:94:4e:ff:d4:65:82:95:fc:
f3:7b:2e:ae:56:fb:37:ce:f5:82:0d:af:6c:8c:60:0d:da:00:
fd:0e:92:91:2d:74:dc:9a:57:2d:61:4c:c0:f0:fd:af:85:d8:
81:be:88:e1:54:ea:3e:51:b4:b9:92:98:ce:d1:ec:97:40:be:
3d:64:6b:34:65:5e:9a:c7:00:4b:ce:3d:af:5a:25:94:c3:4a:
d8:15:4e:fd:ad:ba:ea:ac:c4:39:79:60:58:5c:1b:b0:57:a3:
8e:19:c2:08:92:cd:da:c7:00:bf:63:e1:80:56:87:a3:cc:a1:
38:e2:13:5a:4e:17:d5:f8:f4:4f:a6:16:fd:16:a3:af:9a:7f:
cf:de:3f:5c:f2:83:ca:e6:fd:59:b0:ef:a4:67:97:ab:b9:a6:
62:c6:8b:83:a0:dd:c7:c5:62:70:20:2e:66:88:c4:77:56:58:
f8:58:4c:76:c8:25:cc:22:fa:73:5b:0a:a1:ab:60:4b:47:c1:
36:e6:e5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org