Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6In-mYsamtiDJZA69UmFP_dbFY.roa
File: m6In-mYsamtiDJZA69UmFP_dbFY.roa (raw, json)
Hash identifier: R/rBwKuaAq1G9b8eMGWveDDXuEXkmBVe4U/Cmo79siU=
Subject key identifier: 9B:A2:27:FA:66:2C:6A:6B:62:0C:96:40:EB:D5:26:14:FF:DD:6C:56
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81ED9C05367FBB1234ABF768F49500
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6In-mYsamtiDJZA69UmFP_dbFY.roa
Signing time: Sun 01 Jan 2023 13:25:09 +0000
ROA not before: Sun 01 Jan 2023 13:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47748
IP address blocks: 2a00:1728:19::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:ed:9c:05:36:7f:bb:12:34:ab:f7:68:f4:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ba227fa662c6a6b620c9640ebd52614ffdd6c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:e2:b6:e6:da:1e:86:09:81:6a:04:31:38:
ce:fd:7d:63:c1:da:63:21:0d:54:d1:fe:94:38:1b:
e0:0f:db:0d:26:8c:37:9f:89:48:de:af:d8:8d:81:
fe:40:a0:23:b8:33:b6:60:92:9e:5b:86:19:2d:6a:
2b:96:bc:08:a4:a4:f2:b8:ad:a2:d8:de:f6:fc:df:
e3:ed:7a:ef:71:d2:5e:5e:7d:35:97:3c:e4:4e:fc:
b4:b8:26:21:1d:1f:d5:af:b9:78:aa:3d:64:72:f1:
2d:77:03:01:0c:db:6d:aa:1b:01:d8:d1:95:f0:aa:
f8:dd:6e:dc:7f:48:38:5e:0f:a3:a4:46:23:a9:50:
83:aa:71:02:ad:89:0a:47:49:6b:78:ee:4a:6b:a5:
36:4e:f3:74:f1:a0:09:1e:6a:a6:6f:b7:20:d1:2b:
50:fc:45:1d:16:1d:89:90:ba:01:08:78:09:f1:76:
da:e5:db:48:90:39:5c:ee:69:f4:94:f2:e1:cf:67:
21:c4:d9:a8:bd:af:a3:b6:cc:de:70:80:d6:87:2c:
f7:42:06:c1:f8:92:5b:1d:3a:44:df:b8:82:e3:ce:
25:ab:aa:db:13:96:4c:9f:3f:81:e5:9b:7d:31:16:
df:d7:42:7c:b4:72:39:e5:27:60:a4:ad:53:e4:4b:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A2:27:FA:66:2C:6A:6B:62:0C:96:40:EB:D5:26:14:FF:DD:6C:56
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6In-mYsamtiDJZA69UmFP_dbFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1728:19::/48
Signature Algorithm: sha256WithRSAEncryption
2e:cc:0e:c5:73:9f:7a:23:e3:19:21:29:fe:44:e5:50:b8:37:
10:67:34:4c:28:b3:7a:c8:18:61:a5:76:ae:bf:16:90:a5:c8:
4c:18:a7:23:a0:13:db:f7:4e:f4:12:33:69:d0:31:61:fd:b4:
4a:5f:c1:78:e4:d3:cb:3d:3a:b2:d5:cc:8a:1b:f5:55:ff:be:
8a:a4:c9:e0:7c:12:ab:2d:18:b7:18:c4:25:82:83:fd:7a:3a:
42:53:10:52:e5:f0:62:70:6c:71:d8:10:4f:ab:ed:a6:83:01:
2e:c1:bf:01:d8:f5:98:8b:a1:ee:54:1f:fa:b4:a8:d8:9b:3c:
76:ef:c1:7d:42:03:21:3a:ce:2f:8f:6c:03:35:72:f5:f3:f6:
10:c7:b6:45:8c:20:1d:74:52:e9:e6:e0:e7:2b:9d:41:df:4c:
8e:f1:f3:3f:a0:88:0e:d9:7d:b2:a9:d3:5d:35:36:47:3d:85:
83:e3:d9:57:d2:aa:ae:3b:35:5d:b0:69:57:a7:1b:88:11:38:
20:b6:9e:5d:f0:b5:aa:ca:dc:d6:6a:cb:f9:08:ef:ad:6f:f3:
bd:ec:0c:1b:cf:cd:9e:e0:4f:3a:81:08:03:64:41:03:2b:a6:
86:7e:dd:ca:ab:ba:b4:e6:5a:0c:ef:6f:8d:22:0f:4e:46:b3:
83:86:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:18 2024 by rpki-client on console-fra.rpki-client.org