Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/aja67tZWyki_A7FIHaRIkHxNoM8.roa
File: aja67tZWyki_A7FIHaRIkHxNoM8.roa (raw, json)
Hash identifier: h2v1k9bGbq+OOULjmSQxu4m2SU8Ws9zDevTUjzQzCEI=
Subject key identifier: 6A:36:BA:EE:D6:56:CA:48:BF:03:B1:48:1D:A4:48:90:7C:4D:A0:CF
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 018570FB947D0EFFDD6703BD3B277211E4A0
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/aja67tZWyki_A7FIHaRIkHxNoM8.roa
Signing time: Mon 02 Jan 2023 05:36:53 +0000
ROA not before: Mon 02 Jan 2023 05:36:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203728
IP address blocks: 2001:678:90c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:94:7d:0e:ff:dd:67:03:bd:3b:27:72:11:e4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Jan 2 05:36:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a36baeed656ca48bf03b1481da448907c4da0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:82:f8:c0:98:90:e7:86:af:f4:00:01:df:
9d:4e:f6:79:f1:18:67:14:0e:58:e3:51:f2:c6:9f:
a0:be:d6:e1:b0:f8:b1:de:02:23:0c:53:13:e5:73:
fc:58:7e:e3:38:9a:da:a0:d6:c6:70:4e:d7:97:87:
de:40:c5:f1:5d:b2:40:58:1e:67:16:b6:22:67:1a:
8f:c5:e1:b1:3a:f9:25:9d:94:34:8c:22:fb:19:80:
e0:47:7b:b7:10:47:ee:68:e3:a9:f2:63:4c:fa:13:
fa:8b:cf:36:76:3b:64:a3:aa:35:99:dc:f9:44:ef:
a4:35:51:2a:07:18:21:5a:1f:3b:0c:ee:61:d4:18:
7b:7b:b5:5a:c1:ed:33:76:20:80:cf:8d:b3:41:cb:
97:95:db:e4:de:b8:84:64:50:03:85:b0:56:48:c3:
ae:35:ae:ed:c4:bf:ba:f3:f7:b3:36:c8:69:d3:87:
42:d4:12:4d:18:4d:aa:e3:8e:01:ef:7a:c2:50:be:
12:f3:42:77:d5:59:fd:49:98:28:2c:41:25:e9:6a:
e9:f4:f6:83:1f:b1:78:12:ba:c6:7d:6b:4d:b3:31:
76:ac:bc:27:b7:4e:24:31:3a:97:af:31:65:92:e7:
86:86:56:a2:30:53:ea:6c:1d:4c:47:62:5d:e7:26:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:36:BA:EE:D6:56:CA:48:BF:03:B1:48:1D:A4:48:90:7C:4D:A0:CF
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/aja67tZWyki_A7FIHaRIkHxNoM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:90c::/48
Signature Algorithm: sha256WithRSAEncryption
94:39:18:07:29:cd:c5:29:33:d1:7c:83:c5:fe:74:04:93:30:
bd:9d:36:65:74:3e:a6:c9:33:e0:6b:8c:7e:72:c8:14:57:47:
1b:a5:74:a8:c7:57:ab:66:e3:6d:68:3a:2c:c5:0e:c8:c9:dc:
ae:57:8f:05:7e:ea:dc:38:db:e2:17:e7:0a:7b:67:e6:50:a7:
56:f4:8c:6a:91:ff:73:3c:26:62:c2:9f:35:24:d5:66:19:c9:
13:b9:44:44:b9:07:75:09:4f:05:07:33:5a:db:04:d4:e3:82:
9d:56:95:04:06:04:3a:13:9f:87:4d:db:ee:d7:b3:97:6e:b1:
84:41:ef:3f:3d:db:c9:c2:bd:fc:e9:de:b9:60:1e:a2:a8:f6:
cd:f5:f8:e5:df:8d:97:3e:05:6f:1b:aa:12:9d:32:56:ce:af:
b0:d1:57:3e:62:68:3d:7d:11:ec:52:3c:ab:36:9c:bd:29:b4:
2d:ae:c2:12:9f:30:c9:ce:ed:b1:61:f3:9d:1e:37:35:b9:49:
0a:24:c5:56:e5:8a:cc:4b:a0:81:3b:a5:10:e8:48:7d:d0:ed:
76:77:12:21:ab:2e:05:44:7f:fa:a7:8a:f9:10:fd:2a:2a:c8:
62:b2:08:04:57:d3:8f:a5:8f:6b:4e:25:43:20:dc:aa:0e:ca:
2e:65:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:43 2024 by rpki-client on console-ams.rpki-client.org