Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/6vZgADwGDbrGlLJWX4ooMtcXLX8.roa
File: 6vZgADwGDbrGlLJWX4ooMtcXLX8.roa (raw, json)
Hash identifier: 8I7gKbWSa4yk+EGvxNRIv5BQu5uZMdQv9gz5CxihuEg=
Subject key identifier: EA:F6:60:00:3C:06:0D:BA:C6:94:B2:56:5F:8A:28:32:D7:17:2D:7F
Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial: 01856E0AEEE483DDAB81841F619023700681
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/6vZgADwGDbrGlLJWX4ooMtcXLX8.roa
Signing time: Sun 01 Jan 2023 15:54:48 +0000
ROA not before: Sun 01 Jan 2023 15:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8271
IP address blocks: 62.48.0.0/19 maxlen: 19
2001:4bf8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:ee:e4:83:dd:ab:81:84:1f:61:90:23:70:06:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Validity
Not Before: Jan 1 15:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf660003c060dbac694b2565f8a2832d7172d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:86:e0:92:10:64:7e:27:ab:cb:1b:f5:cd:
17:1d:27:e8:a3:e1:46:fa:d2:fa:de:aa:3a:6b:fd:
4f:61:f9:a1:3d:4f:6f:19:af:67:34:db:de:ad:c1:
15:06:4f:7b:e2:c7:3d:ca:eb:b6:de:65:8d:5d:d4:
09:cf:0e:1f:aa:aa:a6:35:d4:71:da:c7:3d:ab:0c:
2c:ce:5a:fa:6e:c8:5a:a7:29:ac:ef:9a:a3:49:34:
5f:45:b8:c6:6d:dd:f8:b5:d8:24:48:8f:21:8e:a1:
ab:65:2f:a8:fe:0f:76:14:4e:04:c8:95:e7:31:12:
16:43:0a:fb:e4:c2:a7:a8:15:0d:33:b3:62:ce:18:
fd:80:f6:00:41:09:5c:b4:90:91:e6:be:8a:a1:92:
28:95:e1:16:09:e7:1d:da:ba:c1:95:5d:c9:e9:38:
85:8c:0b:1a:ff:42:53:af:d4:a9:5d:7a:8a:c9:4d:
82:44:fe:79:66:40:ae:c7:a9:c4:bb:80:89:f9:f5:
af:27:75:26:62:ac:1b:93:64:39:4f:b6:42:b8:f9:
47:67:7b:e2:ca:d6:48:56:8e:d2:d0:95:f7:e3:be:
71:bc:2d:de:8c:5d:d4:4f:f9:c9:5c:b5:60:a6:cf:
a2:fa:3a:ba:65:40:0c:a1:15:57:fc:86:c0:3d:8e:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F6:60:00:3C:06:0D:BA:C6:94:B2:56:5F:8A:28:32:D7:17:2D:7F
X509v3 Authority Key Identifier:
keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/6vZgADwGDbrGlLJWX4ooMtcXLX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.48.0.0/19
IPv6:
2001:4bf8::/32
Signature Algorithm: sha256WithRSAEncryption
47:66:22:38:68:4b:b1:f2:91:5f:56:b7:14:db:2c:ce:9c:00:
26:d8:57:d3:64:2c:fc:f5:1b:d6:30:65:02:9c:03:13:7f:62:
1a:32:e9:66:23:d3:dd:b7:73:86:86:91:ed:6e:02:b5:17:74:
94:12:44:9b:b6:e2:d6:1a:38:70:f5:c9:6e:2a:43:66:15:b4:
37:dc:56:31:f6:c0:5c:fe:2e:2f:8a:f7:55:e4:d6:a6:53:dd:
88:64:3b:8c:32:3a:57:05:e4:89:ed:a9:ef:05:6a:2f:bd:24:
3b:14:9d:03:41:19:ea:aa:68:3a:83:43:ed:d9:8e:77:c1:fc:
91:eb:99:7f:23:e3:5f:42:0e:85:c8:bd:a3:98:d5:f9:7e:19:
5f:9d:8f:97:71:49:38:23:91:07:e0:7a:5b:44:44:20:6d:87:
f8:fc:8c:94:35:64:4b:0e:d7:3d:85:a0:03:d2:79:78:e8:a6:
05:04:05:cb:a0:a2:96:d5:3c:ff:d1:d4:79:0a:bf:a8:da:f1:
39:c3:e8:cc:8e:34:4e:7a:84:0d:9d:8e:d9:91:2f:56:1f:28:
74:88:3c:8f:a4:fa:da:22:82:c9:63:19:e6:7c:40:d3:87:b4:
a9:69:f8:2b:c3:e6:83:97:b5:45:57:70:3f:18:9d:c1:d9:fe:
ca:38:04:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:24 2024 by rpki-client on console-ams.rpki-client.org