Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/t_dTjpm8P_I3PQa20SvRaiagzps.roa
File: t_dTjpm8P_I3PQa20SvRaiagzps.roa (raw, json)
Hash identifier: U1ImueErWaFdPMPB1aqD2LETZZXdpxJhqQj3zZ2C/Nc=
Subject key identifier: B7:F7:53:8E:99:BC:3F:F2:37:3D:06:B6:D1:2B:D1:6A:26:A0:CE:9B
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 0185C5995AA4193170DF8AA7471533F2F96A
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/t_dTjpm8P_I3PQa20SvRaiagzps.roa
Signing time: Wed 18 Jan 2023 15:57:19 +0000
ROA not before: Wed 18 Jan 2023 15:57:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210779
IP address blocks: 2a0d:c740:f::/48 maxlen: 48
2a0d:c740:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Jan 2023 01:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:99:5a:a4:19:31:70:df:8a:a7:47:15:33:f2:f9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Jan 18 15:57:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7f7538e99bc3ff2373d06b6d12bd16a26a0ce9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:81:d2:56:55:ae:c6:8b:29:95:f3:2c:92:
fe:67:e9:cf:d1:c4:73:a2:11:d4:9f:90:59:3a:85:
3d:9a:80:66:ca:dd:ae:e7:64:2e:d1:78:c4:66:b7:
ec:1f:ed:59:0b:3b:2f:2e:6d:7e:8d:b4:da:14:f0:
dc:f5:f7:54:9e:dc:3c:67:07:67:09:6e:b4:2c:9d:
3b:91:05:78:3f:87:9f:a8:93:01:5b:fc:87:a3:0f:
d3:4e:d5:7c:97:4a:d8:82:34:98:fd:56:4c:60:c0:
b5:75:af:f1:ec:8d:e6:c1:73:32:8a:ec:10:8d:35:
ee:9c:8d:77:d4:6a:a3:af:0f:2c:d5:1d:b9:6e:f4:
0e:cc:3a:e2:b9:d1:11:19:3e:15:22:df:f7:71:d4:
26:e6:59:b8:20:4a:cc:82:a6:52:48:78:4f:4e:51:
2f:4b:45:9d:dc:15:ff:36:eb:04:76:bf:c8:66:24:
d6:44:de:53:94:17:8a:8f:fd:63:7a:ca:cd:45:0b:
7e:35:80:e8:e7:cd:6c:59:6a:1b:d6:97:b9:77:2c:
94:50:50:bf:66:71:53:0f:b6:e1:83:e7:55:65:17:
4f:cd:a0:cb:64:c7:b6:9b:6a:96:69:75:06:c8:9c:
bd:58:0e:2e:23:af:56:5b:34:99:08:4e:b7:a8:15:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F7:53:8E:99:BC:3F:F2:37:3D:06:B6:D1:2B:D1:6A:26:A0:CE:9B
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/t_dTjpm8P_I3PQa20SvRaiagzps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:c740:a::/48
2a0d:c740:f::/48
Signature Algorithm: sha256WithRSAEncryption
ac:e0:f9:b6:0e:b7:f9:ba:a6:a5:5b:53:ed:50:c3:7e:72:57:
ec:93:61:16:b9:4e:0b:c7:0f:c2:c7:a8:c7:e0:ea:a5:a1:d1:
ff:6e:6e:62:c9:54:0d:9c:1f:59:a9:ea:a7:ed:db:60:09:82:
36:24:33:4c:6e:09:7f:82:ea:f9:8c:ce:0a:d4:f3:0a:e4:68:
c0:9c:ee:5e:63:86:b9:ab:a3:58:4f:dd:1d:a3:13:dd:43:ae:
85:fa:01:aa:52:6d:c7:bf:bb:97:5b:60:aa:64:b6:4d:bb:2e:
54:9a:48:b7:fd:14:c3:0e:fb:e1:06:bf:7d:c8:11:8a:98:3b:
f7:e6:ed:c3:b5:07:dd:3e:a0:48:57:01:fe:95:b3:b3:6b:54:
59:ea:3f:cb:f9:88:38:26:9a:77:df:bb:df:18:7c:f8:d5:7e:
26:5b:62:8b:dd:17:65:71:9e:5b:67:f2:91:a4:05:a9:cd:38:
5b:36:89:cc:46:67:d0:86:75:87:fd:b2:45:ad:ee:99:d8:df:
5c:3d:c4:ae:b6:e9:c3:17:80:36:c1:10:bf:44:40:11:52:bb:
f9:38:11:cd:de:a4:77:18:7e:9a:08:17:8f:95:83:d9:ae:c4:
ac:10:d5:75:4e:4c:a3:3b:2f:7f:62:ca:35:27:de:d5:43:c2:
7d:da:1f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org