Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/nz7zEs6orR8eqhqjv1tKtpYyNtg.roa
File: nz7zEs6orR8eqhqjv1tKtpYyNtg.roa (raw, json)
Hash identifier: 4d9nj1zeDz2fA4vZpRBYux4E/sNAzSjniYAc0oJP2jc=
Subject key identifier: 9F:3E:F3:12:CE:A8:AD:1F:1E:AA:1A:A3:BF:5B:4A:B6:96:32:36:D8
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 01860030474C5880E716114F5CF7FF6CE99F
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/nz7zEs6orR8eqhqjv1tKtpYyNtg.roa
Signing time: Mon 30 Jan 2023 01:00:09 +0000
ROA not before: Mon 30 Jan 2023 01:00:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210779
IP address blocks: 2a0d:c740:3c::/48 maxlen: 48
2a0d:c740:f::/48 maxlen: 48
2a0d:c740:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Feb 2023 19:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:00:30:47:4c:58:80:e7:16:11:4f:5c:f7:ff:6c:e9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Jan 30 01:00:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f3ef312cea8ad1f1eaa1aa3bf5b4ab6963236d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:ca:14:2b:92:a9:0a:ff:bc:07:c2:b9:e1:
7f:47:b9:41:71:da:35:ae:3a:4c:92:71:89:7e:58:
ae:10:bc:a2:80:18:5b:9e:e1:08:7e:56:db:e8:b8:
23:e7:4a:1b:a8:a6:bd:bf:d5:c8:cc:59:9b:9b:31:
24:fc:dc:0e:9a:1c:27:e0:0f:fa:2c:c0:38:25:cd:
15:e6:41:32:08:7c:0d:dd:7b:5c:77:de:92:6e:90:
9f:f1:a3:f5:0d:b6:f6:4d:83:0b:53:5b:31:49:b7:
c4:32:84:01:0f:23:1d:dd:a8:6c:89:e6:d2:88:89:
43:7a:d7:be:85:40:a6:42:74:b5:75:ac:20:50:14:
51:ee:6b:cf:5d:e1:84:cb:ed:26:18:57:69:ab:5c:
e3:50:cc:4c:87:7b:38:f9:65:68:a0:8c:e1:31:cb:
7d:a9:d7:c5:d7:a5:d0:c5:11:ef:54:4f:d5:ef:a6:
df:1d:26:4f:6b:f2:3c:b0:73:1f:9a:de:2b:f7:56:
e7:11:ca:dc:b1:c7:97:91:f5:56:38:e8:96:c9:94:
5a:84:f0:cd:5d:64:8e:aa:1f:59:e7:ca:d4:7c:dc:
f9:a2:32:31:63:74:b5:6d:e1:1e:fa:06:16:96:91:
8a:ff:47:24:97:f4:47:3b:39:e5:5e:b7:2f:b0:61:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3E:F3:12:CE:A8:AD:1F:1E:AA:1A:A3:BF:5B:4A:B6:96:32:36:D8
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/nz7zEs6orR8eqhqjv1tKtpYyNtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:c740:a::/48
2a0d:c740:f::/48
2a0d:c740:3c::/48
Signature Algorithm: sha256WithRSAEncryption
3f:5f:5f:eb:a1:25:e6:9f:10:a3:ca:fb:25:d9:37:47:11:e8:
63:68:49:14:25:74:d1:72:19:a9:ad:e6:a0:b2:8b:50:e4:ec:
d0:9b:dc:e0:45:16:87:f9:b4:11:9c:b4:4c:9d:c8:f3:c4:d2:
50:b0:f4:04:57:90:f8:10:7c:85:11:3c:2c:2d:7f:92:d7:9e:
ab:b7:2e:32:b6:91:e9:3b:94:3a:e6:45:4f:90:93:c2:2f:98:
77:77:59:7f:6b:59:19:c5:17:26:35:15:73:82:c4:03:31:4a:
8f:04:99:5d:03:4e:94:0d:45:df:c4:85:25:71:cf:8c:67:a4:
9d:6b:8a:f3:69:d7:40:e7:43:9a:c1:f9:5f:43:2e:30:92:f2:
28:d5:52:83:44:dd:ff:40:2c:b0:24:de:bb:94:a0:12:1f:59:
6a:77:3b:ce:02:b8:47:17:6e:04:9d:46:38:b5:ca:07:08:44:
4e:82:93:ab:6f:d1:bf:cd:0d:90:b3:60:c1:ca:c1:f9:da:8d:
13:bc:11:f7:9d:8f:fe:4f:fc:8f:63:02:f3:77:d1:fe:7f:8a:
31:02:24:24:af:a9:d0:f2:0e:a7:df:b5:95:b8:e8:21:d8:13:
e8:14:71:f2:ed:d1:84:ca:85:7f:c9:42:89:f1:e0:d4:7f:cc:
fa:b4:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:41 2024 by rpki-client on console-ams.rpki-client.org