Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/_Ior0rMrwB00v3LidOzb2NICSUs.roa
File: _Ior0rMrwB00v3LidOzb2NICSUs.roa (raw, json)
Hash identifier: 5jinOsi4+o/6T2/ojU08RUfHM4ycnBFAxZOmpLGGRGM=
Subject key identifier: FC:8A:2B:D2:B3:2B:C0:1D:34:BF:72:E2:74:EC:DB:D8:D2:02:49:4B
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 0185706747D20EF6198703EFD2A822375446
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/_Ior0rMrwB00v3LidOzb2NICSUs.roa
Signing time: Mon 02 Jan 2023 02:54:54 +0000
ROA not before: Mon 02 Jan 2023 02:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209460
IP address blocks: 2001:67c:918::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:47:d2:0e:f6:19:87:03:ef:d2:a8:22:37:54:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Jan 2 02:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc8a2bd2b32bc01d34bf72e274ecdbd8d202494b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:81:5f:e5:01:86:f1:63:9c:95:f8:2a:4c:
36:7b:cb:fe:78:1d:60:ab:73:2d:ba:89:64:7d:c5:
f1:6e:59:bf:31:f9:87:97:3a:f5:73:40:8c:55:4a:
58:28:9f:2e:d7:0d:84:e7:b7:48:2b:9a:38:08:03:
bd:2e:03:4f:3a:05:6f:9e:aa:d6:76:f5:52:d0:ae:
10:44:04:4a:54:6a:b9:af:83:91:c4:90:e7:a6:88:
52:45:0c:84:4c:64:87:e8:9b:4e:a4:ef:be:db:24:
40:7b:d8:5a:ab:33:62:c9:67:6b:76:10:52:33:d3:
66:1b:b9:64:fd:9b:2d:84:e7:7e:c6:d2:6e:93:e9:
6a:30:a4:5c:cd:44:02:0b:e1:9a:52:63:41:c9:f4:
d4:2b:c9:2b:be:be:96:f9:59:15:aa:0e:a5:f6:1c:
22:81:40:2b:79:5c:c7:93:3f:91:fd:c0:27:71:51:
e7:13:6f:d7:4a:03:14:8a:a7:c2:a5:d7:ac:c5:f5:
c0:ae:63:71:73:7e:17:0a:22:7a:94:48:e0:d0:7f:
0b:3a:a2:f8:5e:7e:38:2e:7a:b3:0c:46:bc:c4:d8:
5e:77:3b:1c:42:6a:98:72:dc:5b:0f:a1:ae:a8:74:
6d:2e:ec:91:7d:6c:a1:d5:6c:c9:6c:17:20:2f:e1:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8A:2B:D2:B3:2B:C0:1D:34:BF:72:E2:74:EC:DB:D8:D2:02:49:4B
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/_Ior0rMrwB00v3LidOzb2NICSUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:918::/48
Signature Algorithm: sha256WithRSAEncryption
87:c4:10:0f:9d:8a:ef:0a:d6:d4:50:a2:63:88:3e:d7:3b:dd:
b5:4e:52:d3:7f:fc:53:06:8b:1f:f0:f9:cc:ff:00:bb:9b:6b:
b0:b3:15:02:43:61:9c:90:19:75:37:82:7d:6d:e9:51:1b:8b:
7d:50:ec:4b:1a:f5:99:81:51:28:ad:c4:16:66:7f:62:f5:ca:
1c:b3:9e:b8:91:d4:79:ce:80:79:6d:42:f6:6e:96:95:df:3f:
b6:7f:22:b2:7f:03:ae:b4:32:35:24:28:cc:b1:9a:af:41:90:
0f:99:dd:c9:d8:bb:20:d6:16:81:18:f5:3c:db:37:e2:22:be:
7d:03:05:3e:70:0b:ae:df:3d:aa:53:31:61:1e:20:93:cc:9e:
5b:b2:bd:c2:1f:f3:3c:6f:4f:b1:86:6b:4e:95:32:3b:4e:f5:
14:9a:25:e0:f9:7b:d2:cd:25:96:85:ba:13:6f:b7:38:ad:7f:
7a:16:e4:e9:6d:a4:75:fe:0e:f5:89:69:db:69:8d:4a:a6:9f:
bc:fb:ba:d7:2a:ab:6a:87:3e:90:7f:b7:f8:24:de:ef:fe:ae:
bf:06:61:9c:98:b7:7c:38:4d:89:4d:71:91:6d:39:e1:6a:a2:
38:ea:b6:38:29:e2:f3:73:61:59:e4:7e:fc:84:c6:ca:a5:fc:
29:fc:f4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:27 2024 by rpki-client on console-ams.rpki-client.org