Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/C3cHlejR8zJNzsUiwWLyScFScZA.roa
File: C3cHlejR8zJNzsUiwWLyScFScZA.roa (raw, json)
Hash identifier: UVPi0COX4ccO8QdZDtNxmv/BuUXLRCjPmoz7H+HeyNM=
Subject key identifier: 0B:77:07:95:E8:D1:F3:32:4D:CE:C5:22:C1:62:F2:49:C1:52:71:90
Certificate issuer: /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial: 018C83EDEC28B337A0F8E0EA2525D57CCC42
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/C3cHlejR8zJNzsUiwWLyScFScZA.roa
Signing time: Tue 19 Dec 2023 21:14:16 +0000
ROA not before: Tue 19 Dec 2023 21:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211085
IP address blocks: 2a02:6c20:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:ed:ec:28:b3:37:a0:f8:e0:ea:25:25:d5:7c:cc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Validity
Not Before: Dec 19 21:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b770795e8d1f3324dcec522c162f249c1527190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0a:da:ee:03:c6:9f:31:c9:7c:94:46:22:f6:
82:2e:36:c2:25:09:ad:e8:d5:e7:b3:16:be:4f:e3:
d3:3e:1e:b9:1c:a8:c9:e5:2d:21:8d:b2:3b:26:18:
6b:e0:10:1a:2e:5a:07:c8:88:e2:a1:e5:9c:ad:0b:
26:08:b4:19:dc:ef:81:bf:51:3f:e3:c2:11:74:5d:
4b:8e:16:28:9a:4b:b1:c1:08:0e:89:63:26:10:1e:
a7:82:ef:2d:b2:85:d1:09:af:7b:4f:59:27:50:5f:
57:b8:1d:a0:95:39:0e:0e:59:ca:aa:c2:a4:65:88:
24:f8:a1:38:dc:29:41:cc:90:34:2b:6b:e8:c2:4c:
a5:49:e7:a3:8c:db:59:3c:9a:2d:5c:97:74:d6:87:
5c:57:e9:17:2e:86:86:34:e2:f6:be:b5:a4:97:07:
90:c3:d0:ae:6e:b3:23:f0:f5:05:5a:43:fd:35:da:
59:dc:4f:66:bd:f2:8d:48:34:be:42:38:a2:9f:85:
6e:2b:df:aa:da:57:e5:64:49:08:4b:09:b8:b5:08:
29:d3:0b:53:af:6e:26:70:13:ec:97:b2:85:43:d8:
5c:41:0a:6b:5b:bf:d4:3a:18:6c:27:c4:6a:bb:57:
59:8c:7a:15:bd:71:30:b5:c8:64:67:50:48:cf:cc:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:07:95:E8:D1:F3:32:4D:CE:C5:22:C1:62:F2:49:C1:52:71:90
X509v3 Authority Key Identifier:
keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/C3cHlejR8zJNzsUiwWLyScFScZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6c20:7::/48
Signature Algorithm: sha256WithRSAEncryption
11:1f:02:4e:77:6a:15:d1:bb:72:0c:b8:13:6a:02:c7:ea:c9:
50:02:69:0d:25:81:08:9b:61:33:ac:ef:99:fa:19:02:7b:c9:
d6:26:cd:ef:5e:47:1f:b3:6e:3d:09:05:62:f8:8d:1e:ce:e9:
55:55:af:a2:8c:a8:75:41:9c:fd:80:c5:12:bf:01:ab:e9:5d:
48:44:5a:f1:07:88:37:6d:e3:41:e9:97:20:b1:cd:1c:89:9b:
7a:de:31:0c:25:72:fd:63:b3:db:5d:c5:b6:83:69:b3:9c:17:
f9:a7:20:76:ec:7f:c4:03:76:5f:e4:5f:e8:38:01:87:3d:89:
5a:22:6a:be:b0:98:9c:6d:31:5f:4f:5a:1f:cd:fe:0f:92:9e:
6b:3f:3a:58:a6:66:b7:7e:19:e3:83:a6:03:d2:50:c7:f4:01:
e8:db:72:91:fd:92:22:37:c6:92:b1:e3:97:1e:c8:41:b9:c8:
a1:2c:ee:f9:33:88:09:6f:ac:0c:49:8e:9f:41:2b:91:52:33:
97:97:ea:63:54:ca:67:9e:96:7f:26:35:59:f8:53:e4:e1:67:
f2:7f:fd:d8:b8:7e:bc:c7:cf:3a:a2:ca:68:0a:31:6b:4a:36:
b9:b2:ca:cb:74:bb:45:43:6a:6d:a8:db:7c:62:6b:b7:5d:a2:
b7:23:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:59 2024 by rpki-client on console-ams.rpki-client.org