Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AQYKjH9hy0yQo0F-ZiFcndWtPbw.roa
File: AQYKjH9hy0yQo0F-ZiFcndWtPbw.roa (raw, json)
Hash identifier: LZjMQua2i73ZAJWU2cX92Qf6SqX/Rg8JurCAqnzkTUE=
Subject key identifier: 01:06:0A:8C:7F:61:CB:4C:90:A3:41:7E:66:21:5C:9D:D5:AD:3D:BC
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018B6331E677FA0759CC3248D68233497FC7
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AQYKjH9hy0yQo0F-ZiFcndWtPbw.roa
Signing time: Tue 24 Oct 2023 19:38:16 +0000
ROA not before: Tue 24 Oct 2023 19:38:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216101
IP address blocks: 2a0c:9a40:9b00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:63:31:e6:77:fa:07:59:cc:32:48:d6:82:33:49:7f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 24 19:38:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01060a8c7f61cb4c90a3417e66215c9dd5ad3dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:f5:5e:8c:91:59:bf:f0:13:c4:62:16:ee:
48:12:a1:b5:c6:e6:19:e2:af:41:11:b2:13:93:8c:
f7:97:d5:a2:8c:69:97:e3:70:f5:c4:29:44:a5:bc:
11:17:da:ac:17:97:20:6c:1d:b0:c3:84:38:c2:c9:
34:bc:90:68:d9:f7:61:fc:96:e4:df:8b:42:d4:f1:
4e:d9:fe:47:5a:0e:87:4d:4e:bd:ee:43:65:df:56:
61:61:f4:f0:7f:4f:08:6c:de:33:75:8d:0e:cf:86:
1e:8f:48:c7:ef:0f:c3:cc:05:af:4e:3d:9e:26:7d:
48:5d:d3:22:92:d3:bd:50:ea:d8:e7:dd:e9:8f:f4:
ca:f0:e7:7c:6a:29:08:e3:b8:21:99:ba:f6:c2:77:
d9:62:26:37:95:87:91:f5:3c:0e:26:9d:58:bb:b4:
7a:12:07:1c:6c:5e:82:c9:3a:13:55:96:3d:94:c3:
a0:ef:a3:9c:5a:9a:5e:72:a8:8e:ea:d7:85:4d:6b:
09:20:a9:7a:b6:ba:97:8d:33:41:76:da:3f:75:18:
4a:bd:92:8c:10:6a:78:cc:e3:2c:1a:dd:bf:e3:0d:
d8:4c:80:b0:a8:a1:4f:d8:98:f4:f8:d0:a6:db:e4:
b4:a1:67:3d:d4:be:bf:b3:03:e8:8d:de:9e:28:9b:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:06:0A:8C:7F:61:CB:4C:90:A3:41:7E:66:21:5C:9D:D5:AD:3D:BC
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AQYKjH9hy0yQo0F-ZiFcndWtPbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9b00::/40
Signature Algorithm: sha256WithRSAEncryption
9f:3d:4c:10:3c:dc:c9:b4:3f:b5:eb:ab:fa:a3:54:4e:1b:2a:
32:d7:2e:e2:58:e8:da:c7:b7:41:ea:4e:8a:2e:df:b1:d4:51:
1e:5e:f9:8c:56:8b:86:b2:b5:18:09:13:65:e2:62:f2:c8:73:
54:78:fd:60:5f:a1:10:f8:57:07:c8:50:2f:51:ea:c1:b5:4e:
65:d1:6d:60:75:63:90:94:f2:0e:9f:05:0f:58:de:e7:e7:83:
39:ff:ba:6f:22:da:fa:8c:48:5c:83:a7:02:21:e4:db:a6:9e:
4e:c5:98:11:e2:ba:b3:4b:6e:95:74:3a:e1:45:3e:db:35:b6:
2a:a1:4c:8b:de:9a:08:5a:ce:61:e4:32:c0:c6:72:8a:bd:b0:
e6:92:94:4e:a2:d3:c4:37:c1:32:67:f2:34:5c:60:cf:5f:86:
82:79:f3:c2:ad:d4:df:07:56:ec:ee:c5:4e:ac:d0:da:39:7f:
09:de:8c:a6:87:f8:6a:a6:5a:4d:40:11:77:3f:da:1b:c0:30:
a7:11:22:fa:18:23:01:07:6a:73:33:73:da:21:79:23:7d:76:
30:d7:90:bb:e7:9b:4e:e3:a8:43:03:28:6c:1b:c0:df:9c:27:
84:71:1c:c2:64:cb:14:b3:d0:34:3b:f8:e3:f9:0b:75:88:fe:
09:3e:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:49 2024 by rpki-client on console-fra.rpki-client.org