Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cK0Vc6uFvLfLO5lSPHlcX_zKjHE.roa
File: cK0Vc6uFvLfLO5lSPHlcX_zKjHE.roa (raw, json)
Hash identifier: 6nF7g19wfIWFzb7DnyNJP5SEo3uhpY95ePP5jAi4BN8=
Subject key identifier: 70:AD:15:73:AB:85:BC:B7:CB:3B:99:52:3C:79:5C:5F:FC:CA:8C:71
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246D79BD5AC6D221C665EF31035352A
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cK0Vc6uFvLfLO5lSPHlcX_zKjHE.roa
Signing time: Mon 02 Jan 2023 11:38:42 +0000
ROA not before: Mon 02 Jan 2023 11:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208752
IP address blocks: 2a0c:9a40:81c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d7:9b:d5:ac:6d:22:1c:66:5e:f3:10:35:35:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70ad1573ab85bcb7cb3b99523c795c5ffcca8c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:b0:c3:97:b0:8c:2f:20:79:9d:fa:b3:c0:
81:4d:36:0e:d4:10:6a:47:39:17:d7:82:07:69:f6:
b8:d4:35:2f:bd:0e:f4:01:78:cd:78:f5:ba:b5:17:
2d:49:81:01:1d:87:fd:f0:1e:11:42:24:59:11:53:
27:2c:af:18:5c:49:37:26:a0:7e:e1:15:5e:4c:03:
33:a7:30:51:21:35:be:fa:b1:86:c1:ba:cd:fd:df:
9a:d9:62:10:dd:f4:7f:d6:50:cd:b0:51:46:95:94:
42:c1:2e:3c:d3:30:fd:15:ef:3f:2c:dd:ab:2d:ff:
0d:e6:c5:11:f0:48:a0:97:8b:de:65:40:76:d6:c1:
8a:d4:73:40:e2:dd:82:8c:b0:3d:3a:e8:03:26:1a:
2d:dc:50:ea:d0:f6:fd:ae:3f:82:e3:bf:c9:66:11:
1d:70:05:49:b5:68:6a:29:42:1e:fb:1f:7a:63:ab:
62:c9:bd:ff:ae:a1:5f:19:18:0c:ed:2e:01:11:84:
a5:ca:02:ad:34:60:45:c9:f2:1b:0d:7b:dd:e2:74:
4b:02:ba:8d:6d:42:73:d2:dc:1e:01:cb:5e:e2:3b:
b3:b6:11:fe:60:e2:b9:a8:78:1b:01:e8:ee:23:70:
17:07:16:12:c9:c0:49:47:9d:f2:1d:ee:09:28:36:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AD:15:73:AB:85:BC:B7:CB:3B:99:52:3C:79:5C:5F:FC:CA:8C:71
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cK0Vc6uFvLfLO5lSPHlcX_zKjHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:81c0::/48
Signature Algorithm: sha256WithRSAEncryption
bf:ec:5a:f4:da:9a:cb:10:6d:ca:c5:1b:b8:89:c0:72:f9:77:
7d:1f:17:2d:1c:33:23:39:1c:f0:f7:16:d2:65:f9:42:86:dc:
bc:39:47:15:70:26:68:fc:77:2e:34:0f:15:d0:0b:68:78:b6:
b0:83:67:a1:06:33:ad:05:9e:6b:e2:f7:6f:45:3f:33:5b:68:
85:e8:ef:5a:c6:9d:ab:b9:c0:95:42:57:aa:d7:69:3f:78:dc:
8c:0d:b0:b1:12:52:ef:bd:17:6e:19:bb:40:c3:dd:f9:7d:df:
20:99:48:39:8e:59:6f:a5:06:26:14:c7:52:b0:63:f7:97:18:
8a:27:a8:c6:74:72:5d:3b:4b:79:04:e7:05:34:40:6d:e4:05:
0d:a1:d2:b6:8b:d2:7f:24:bd:96:21:2b:fc:b9:3d:8e:7d:75:
6c:65:89:cb:c4:8d:f0:4b:84:2e:61:4b:80:c0:03:ed:a1:9b:
17:1d:5d:37:a9:c6:66:5d:2a:14:23:24:45:16:97:31:79:7d:
c1:f2:40:4e:e0:cf:42:99:ad:9a:4f:2b:e4:d0:90:ff:84:aa:
31:a9:a3:ad:0e:1a:1e:44:fc:03:af:de:10:bc:39:39:ee:d0:
95:93:47:1a:42:ff:1a:f5:5d:2d:d2:f7:f2:a2:6f:5a:8b:98:
3a:f8:53:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:15 2024 by rpki-client on console-ams.rpki-client.org