Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/9pKMeP8leHIAqMsHOzZBBNeglfw.roa
File: 9pKMeP8leHIAqMsHOzZBBNeglfw.roa (raw, json)
Hash identifier: yA2iGPOmILY7uAvYgnZd1glWsHL9lImyA9y+B9+1FJE=
Subject key identifier: F6:92:8C:78:FF:25:78:72:00:A8:CB:07:3B:36:41:04:D7:A0:95:FC
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 018FECE1BBF8DC2356B0721DF48B446CB85F
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/9pKMeP8leHIAqMsHOzZBBNeglfw.roa
Signing time: Thu 06 Jun 2024 09:29:27 +0000
ROA not before: Thu 06 Jun 2024 09:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49747
IP address blocks: 2001:67c:c6c::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Jun 2024 13:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:e1:bb:f8:dc:23:56:b0:72:1d:f4:8b:44:6c:b8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Jun 6 09:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6928c78ff25787200a8cb073b364104d7a095fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:2c:15:5b:e7:3e:59:c8:25:76:57:02:da:
72:e0:08:97:a8:6f:53:88:32:ce:0b:53:fc:f6:a7:
0e:31:3a:ba:1b:d7:72:fe:88:3d:1c:e0:a7:82:d9:
e6:a5:39:fc:90:41:02:08:33:35:5b:61:65:65:e9:
39:7f:57:26:6d:29:c7:86:72:62:18:e1:57:15:63:
bd:32:cd:01:fb:a8:83:a0:46:43:d2:7d:02:5f:f4:
23:bf:bb:2d:36:c5:b7:a0:e7:7f:78:b9:7c:84:25:
d2:62:7f:2b:3a:a4:4c:98:41:92:2c:7e:cb:b4:28:
51:13:df:35:53:97:c9:90:f6:65:ab:4e:1d:20:12:
6c:a5:d9:99:ab:54:61:68:7f:eb:be:0b:87:fe:9d:
33:4b:61:79:84:b9:55:07:4f:a0:ab:17:1c:f0:a0:
f2:e6:24:b8:cd:7d:ad:39:fa:2c:ad:47:c0:ec:79:
bf:99:72:e7:36:0f:d6:a9:d9:7b:83:f3:85:8f:41:
6a:4c:38:c9:47:a6:ae:90:43:de:ee:0d:57:85:60:
b9:30:de:d3:6b:1e:80:0b:8f:0a:23:e0:ae:46:12:
0f:ae:6d:50:6c:b7:43:ef:79:e8:ff:92:fc:ef:c2:
e3:90:fe:01:e6:e1:46:a4:f4:ff:b9:23:13:fb:53:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:92:8C:78:FF:25:78:72:00:A8:CB:07:3B:36:41:04:D7:A0:95:FC
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/9pKMeP8leHIAqMsHOzZBBNeglfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c6c::/48
Signature Algorithm: sha256WithRSAEncryption
b8:16:77:01:8e:ea:78:57:41:ab:c2:19:91:00:c0:aa:f2:00:
7d:e4:6c:17:fa:e6:d8:30:ec:99:2d:ec:28:6c:5a:c8:c6:ea:
fa:2b:fb:9e:03:dc:18:05:a0:b2:9b:1d:b1:de:33:97:84:9c:
b4:6d:ee:a9:6d:87:67:ad:e4:20:10:77:b5:c0:53:d4:56:4f:
26:a1:ed:9a:d8:6d:79:77:41:34:2a:cb:4c:72:e2:7a:95:c5:
3e:ee:48:f9:98:12:8c:ac:f4:9b:50:f5:d5:88:7c:32:61:9f:
32:25:9c:89:ba:cd:bc:a9:33:3d:45:57:54:79:21:93:15:fe:
c3:a4:ee:a6:32:9f:2c:98:8f:72:62:11:29:5d:c3:01:d4:23:
92:5d:ac:ff:74:6b:75:01:d0:fe:a9:d5:0f:df:25:fa:25:14:
74:d9:7e:72:05:88:1a:9f:95:af:bb:0d:fb:23:d9:a3:06:76:
b2:47:37:70:fd:a5:d9:e1:9e:41:ec:af:ce:e4:cc:0f:0b:6c:
96:24:b3:fd:84:03:ab:67:0c:64:91:d2:e4:bd:28:66:b9:81:
15:bc:a3:76:f5:d2:ee:0b:f1:65:ef:41:75:db:f9:c2:43:f3:
45:27:44:71:b9:8d:0d:34:54:36:5c:29:e2:62:6c:d4:d8:26:
9b:57:24:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:17:21 2024 by rpki-client on console-ams.rpki-client.org