Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/1NQ6Ddwibh3wWMr8ICslEoI6MCU.roa
File: 1NQ6Ddwibh3wWMr8ICslEoI6MCU.roa (raw, json)
Hash identifier: cC3X8WGXYZiPzjy5n7Bziy/Oz7dKmdZYAWzFk50uybs=
Subject key identifier: D4:D4:3A:0D:DC:22:6E:1D:F0:58:CA:FC:20:2B:25:12:82:3A:30:25
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 01856D4ACCED0F379D1B6DE6A1D1EF4AE18D
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/1NQ6Ddwibh3wWMr8ICslEoI6MCU.roa
Signing time: Sun 01 Jan 2023 12:24:56 +0000
ROA not before: Sun 01 Jan 2023 12:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47343
IP address blocks: 2a07:c281::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:cc:ed:0f:37:9d:1b:6d:e6:a1:d1:ef:4a:e1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jan 1 12:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4d43a0ddc226e1df058cafc202b2512823a3025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:2f:5a:f8:a0:e6:20:44:a3:60:fe:34:19:
83:e9:53:54:59:37:8f:15:d5:d8:b8:7e:8e:66:a2:
40:92:f6:00:f1:5f:0f:51:11:a7:bc:49:ac:ef:e6:
37:56:0b:a7:19:a9:f3:38:7b:2a:cc:a0:38:1d:63:
e5:16:70:7e:be:cd:63:7b:51:8b:8e:c3:40:2d:c6:
74:2a:a5:72:0b:f0:ef:eb:9a:71:cb:9d:d1:03:6a:
48:00:56:de:74:69:9f:1e:46:17:3c:39:f6:54:b8:
3b:1b:09:55:1d:7a:19:a3:44:db:7a:d8:90:7a:61:
14:75:3e:26:9a:84:52:ad:5c:14:d5:ec:35:0f:0c:
b2:17:a2:70:fe:e5:45:ef:68:9f:50:69:df:e7:3b:
3b:e8:7a:66:0f:a5:1d:57:d2:3d:2a:80:5c:85:03:
fd:bf:77:ef:69:5d:e1:8a:9f:3a:34:7b:cf:c4:f0:
10:90:1e:b5:ec:9d:87:4c:8a:eb:e2:17:e8:ea:e7:
6e:c1:a7:e0:f1:22:a7:ea:d0:7f:d2:a3:f3:82:02:
cd:f9:d2:8e:5d:dc:4d:40:68:1b:d2:f8:a4:e4:15:
06:24:97:62:cc:16:d6:9b:04:66:72:e0:2a:d3:ed:
c2:e3:48:18:1f:70:01:02:25:78:e3:76:ec:d1:f7:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D4:3A:0D:DC:22:6E:1D:F0:58:CA:FC:20:2B:25:12:82:3A:30:25
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/1NQ6Ddwibh3wWMr8ICslEoI6MCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:c281::/32
Signature Algorithm: sha256WithRSAEncryption
f2:d2:d8:28:e8:e4:50:19:13:b9:a9:a5:a6:48:79:ab:de:ab:
75:e1:cb:a1:d0:27:10:12:c8:e4:7f:02:c4:63:a6:aa:09:e7:
18:04:3f:3b:5e:cd:7e:87:59:ea:f8:58:bd:44:80:4c:a7:73:
89:31:aa:5e:95:de:e7:b3:1b:59:ca:45:b0:49:4a:98:3c:64:
59:56:14:c4:97:ca:22:93:7c:84:96:27:bd:46:77:bd:29:57:
ed:1b:93:de:25:49:86:c2:18:c1:1c:b2:43:72:eb:77:e1:21:
92:74:22:4f:42:a9:c8:01:62:f9:87:07:7f:59:8e:8c:d8:e7:
92:96:67:91:69:01:b0:11:47:64:a1:eb:cb:63:a4:1b:c5:5b:
67:0a:ba:3d:a7:24:b0:5b:3d:62:14:26:fc:b1:4c:a9:e6:e2:
8e:d1:ff:50:f2:d1:68:d1:91:cc:d9:e6:5a:6f:0c:ff:51:bb:
61:b2:4e:a0:bc:a6:98:5f:e8:f0:65:71:81:56:51:9b:39:1d:
e5:93:88:0e:9b:9c:b9:49:e3:af:0b:59:53:e6:7f:09:35:31:
01:9d:10:72:eb:41:57:4c:fd:67:83:ee:a9:9c:27:b5:cc:95:
46:98:aa:57:ad:98:50:53:01:94:7d:82:77:8b:ac:86:b4:37:
c2:b5:3e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:32 2024 by rpki-client on console-fra.rpki-client.org