Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/iGqcJwn34mqAa4fPtY1fHumvmpM.roa
File: iGqcJwn34mqAa4fPtY1fHumvmpM.roa (raw, json)
Hash identifier: mKwlGdyzIrDNE3++FyjvTJW3bD29NRtRlCtl2rTdVBI=
Subject key identifier: 88:6A:9C:27:09:F7:E2:6A:80:6B:87:CF:B5:8D:5F:1E:E9:AF:9A:93
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 0186C0870EF37956C00E7BE1FA26CB742961
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/iGqcJwn34mqAa4fPtY1fHumvmpM.roa
Signing time: Wed 08 Mar 2023 09:22:02 +0000
ROA not before: Wed 08 Mar 2023 09:22:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61180
IP address blocks: 2a02:166b::/38 maxlen: 48
2a06:2602::/38 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:87:0e:f3:79:56:c0:0e:7b:e1:fa:26:cb:74:29:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Mar 8 09:22:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=886a9c2709f7e26a806b87cfb58d5f1ee9af9a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6e:be:9b:09:a2:82:8b:cc:3e:ee:de:e1:9f:
eb:c5:9b:05:8b:ec:c5:44:3f:0c:7c:06:4e:a4:82:
06:77:b7:18:83:dd:fa:9a:ad:6d:06:13:2a:5e:51:
db:90:c1:13:16:17:ca:8c:18:76:cb:97:14:a0:fe:
d6:6b:06:0b:78:3e:ca:47:f1:03:c4:23:52:40:d7:
5a:ce:ed:0e:e3:81:26:1f:85:28:e0:c7:6e:7b:71:
e3:ec:d0:46:24:9a:9f:d6:27:c1:70:7e:f1:6c:8c:
fd:21:7b:e8:85:1a:51:1f:64:3d:f8:98:31:b6:5f:
3f:fd:2f:7e:11:88:04:33:1f:de:24:b4:df:da:5e:
de:3c:72:6c:66:c1:be:00:7c:38:f0:ce:33:91:bf:
1e:73:b8:90:27:5a:d2:b6:e8:c0:7f:38:f1:25:e4:
72:a4:ed:27:9a:92:88:d9:a0:99:36:08:ec:d8:54:
6c:ed:99:48:13:7f:fc:dc:17:e0:68:e3:cd:4a:91:
fc:f4:55:b1:ce:e6:53:d3:46:73:6d:22:10:c4:0d:
9b:0b:33:ad:f0:43:2d:49:fc:d1:56:a4:14:cb:f5:
c7:a1:b2:42:f1:54:80:52:f9:92:2f:93:aa:0f:f6:
11:89:2f:3e:31:78:54:aa:c4:96:f2:d8:20:31:2a:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:9C:27:09:F7:E2:6A:80:6B:87:CF:B5:8D:5F:1E:E9:AF:9A:93
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/iGqcJwn34mqAa4fPtY1fHumvmpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:166b::/38
2a06:2602::/38
Signature Algorithm: sha256WithRSAEncryption
9a:7f:87:43:df:81:68:12:d5:36:8e:ae:e0:9a:b0:b9:1e:b7:
23:19:88:3d:c1:3d:b9:51:4b:62:40:dd:f8:38:1a:53:4e:72:
b1:0d:7e:a6:3b:9d:12:77:12:52:15:15:99:2a:c3:db:1e:8c:
ef:bf:f3:86:9c:ef:98:bc:de:ec:ba:93:1c:0c:59:93:0a:60:
07:33:3d:cd:d1:48:42:3d:5d:41:40:98:cb:4c:88:5e:4a:4b:
c3:7e:e5:77:b5:f0:ec:93:3e:0c:ed:3f:13:18:d0:27:2a:19:
6c:c8:95:e1:46:ff:d3:54:20:b2:53:a1:13:db:80:15:ba:18:
80:1b:a6:55:bb:2a:66:5a:b7:fe:bc:31:0b:d0:6a:67:83:e8:
b2:5a:9b:33:aa:33:30:57:c2:1d:48:eb:3d:ab:7b:1d:df:c6:
61:96:85:63:e3:95:da:27:d6:da:99:03:db:fb:73:7e:27:a7:
10:38:16:55:f8:17:6e:3f:f6:de:d9:c8:a7:71:da:ec:60:bf:
f6:99:2f:ee:d4:77:19:e0:55:1e:68:6c:64:3e:c7:da:24:bc:
16:0c:d1:f0:53:97:61:bd:68:50:37:1e:01:26:75:b7:06:de:
d4:62:32:0d:a1:78:31:ec:04:8e:e0:62:2a:0b:df:3c:9a:9a:
42:ee:eb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:21 2024 by rpki-client on console-ams.rpki-client.org