Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/4wPG3ACDwIXltF0HmzPapwwqML0.roa
File: 4wPG3ACDwIXltF0HmzPapwwqML0.roa (raw, json)
Hash identifier: FbQ6WOmKZPeXYS2jBc/Xcz9Ha2r/G5qh/g6w8jUZQt4=
Subject key identifier: E3:03:C6:DC:00:83:C0:85:E5:B4:5D:07:9B:33:DA:A7:0C:2A:30:BD
Certificate issuer: /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial: 01856D8ABC8A2D3914CAE58D384667FBFDF7
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/4wPG3ACDwIXltF0HmzPapwwqML0.roa
Signing time: Sun 01 Jan 2023 13:34:46 +0000
ROA not before: Sun 01 Jan 2023 13:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48105
IP address blocks: 2a0b:b600:3c06::/48 maxlen: 48
2a0b:b600:1000::/38 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:bc:8a:2d:39:14:ca:e5:8d:38:46:67:fb:fd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Validity
Not Before: Jan 1 13:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e303c6dc0083c085e5b45d079b33daa70c2a30bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:0c:a0:6f:07:30:ff:98:76:ea:e3:b6:92:
5e:5e:94:7c:51:4f:87:96:6d:3a:5f:2e:8c:6c:2f:
59:fd:fc:52:76:a3:7e:b5:65:83:d0:43:f4:c0:5b:
2e:2a:7a:7a:af:1d:41:cf:a9:c8:e4:0f:0b:f7:43:
5a:5b:c2:54:fc:2f:14:0f:f0:b4:84:e0:6a:09:8e:
20:e4:b8:71:2f:33:d0:17:82:09:8b:88:e2:bd:89:
7a:d5:89:8a:02:04:93:c2:0e:7e:ad:c6:e4:70:a9:
58:8e:46:92:c0:12:71:05:e9:a1:59:c9:15:e0:b4:
0c:d9:49:da:7d:e5:45:9a:72:91:03:43:81:82:8e:
e2:11:54:63:33:a1:fe:d6:5d:84:27:d9:85:40:f8:
94:95:13:3e:28:2e:29:ec:76:f7:13:83:52:64:94:
91:82:2d:c2:e3:ec:a2:4a:2b:5a:aa:17:50:70:1c:
9e:c7:e7:3f:a0:55:a0:9a:76:67:3c:f0:c0:d5:23:
af:d1:09:26:03:91:c6:52:65:48:08:33:e2:6f:cd:
03:2b:11:61:d0:8f:ca:ca:83:dd:b9:51:f8:bd:ab:
da:f8:17:05:2b:96:aa:60:89:44:a4:6d:1b:87:fc:
c5:71:57:98:b5:23:80:22:12:bb:59:e1:f0:fb:08:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:03:C6:DC:00:83:C0:85:E5:B4:5D:07:9B:33:DA:A7:0C:2A:30:BD
X509v3 Authority Key Identifier:
keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/4wPG3ACDwIXltF0HmzPapwwqML0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b600:1000::/38
2a0b:b600:3c06::/48
Signature Algorithm: sha256WithRSAEncryption
6d:8b:65:63:4c:70:b2:54:96:8c:76:46:0d:26:cf:dc:48:aa:
34:23:65:a0:87:9e:41:17:0f:05:00:1c:e9:09:f0:33:e5:37:
e5:b2:b9:64:a6:cf:36:fb:89:98:0a:fe:67:5d:04:07:48:1e:
47:06:dc:38:b4:bd:86:e7:6d:35:50:c3:0f:b7:fe:50:71:f9:
13:a6:57:85:c0:f6:1c:b4:13:f5:61:61:4b:fc:8b:03:28:cf:
83:aa:0c:cd:f4:a7:c6:5a:84:0c:75:f9:0d:14:f4:3f:89:bf:
50:d4:d4:d2:c6:a3:77:a5:9c:15:a2:90:32:0d:c5:4c:32:93:
af:72:64:bb:21:49:64:af:b2:41:99:d9:84:cf:94:6c:9e:33:
4f:1c:2c:cf:3c:07:74:77:1b:4f:7f:38:bd:49:7c:22:c8:46:
a9:41:ef:41:1d:16:f4:c8:92:5d:f7:75:5b:7b:c8:b6:13:b4:
d2:e6:11:b0:c5:37:37:67:0a:2a:4f:d6:53:17:1f:1a:ee:3a:
02:c7:54:2a:44:c6:6b:34:ec:0a:e1:d0:09:94:ed:84:3f:46:
92:86:c8:22:4d:d0:1a:dc:37:bc:a2:8b:2c:21:8e:f4:a8:95:
d1:56:af:dd:98:57:0b:19:1d:32:18:66:08:44:cf:72:8a:9b:
79:5d:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:25 2024 by rpki-client on console-ams.rpki-client.org