Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/uamkEbvdDmIgxpf_d3NqQJyDQmo.roa
File: uamkEbvdDmIgxpf_d3NqQJyDQmo.roa (raw, json)
Hash identifier: nkQV3CjXF2fFhSragk+u92a0iDHwAEEP6heTXude18w=
Subject key identifier: B9:A9:A4:11:BB:DD:0E:62:20:C6:97:FF:77:73:6A:40:9C:83:42:6A
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 018B73025AB4ED7B4C16AB343D892F05732F
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/uamkEbvdDmIgxpf_d3NqQJyDQmo.roa
Signing time: Fri 27 Oct 2023 21:20:15 +0000
ROA not before: Fri 27 Oct 2023 21:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202525
IP address blocks: 2a13:d047::/48 maxlen: 48
2a13:d046:fffc::/48 maxlen: 48
2a13:d046:ffff::/48 maxlen: 48
2a13:d046:fffe::/48 maxlen: 48
2001:67c:c00::/48 maxlen: 48
2a13:d040::/48 maxlen: 48
2a13:d046:fffd::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 Nov 2023 13:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:73:02:5a:b4:ed:7b:4c:16:ab:34:3d:89:2f:05:73:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Oct 27 21:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9a9a411bbdd0e6220c697ff77736a409c83426a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:32:07:a1:d2:1b:83:26:66:29:5c:60:e9:
89:e9:f5:8c:8e:97:59:60:64:54:82:73:da:04:75:
34:73:51:2f:e9:8c:73:91:da:50:cc:53:2b:42:64:
62:74:6c:6b:95:3a:d7:63:ff:48:ab:64:a7:76:63:
8b:04:d2:3f:42:58:7c:82:4b:3d:0f:9f:b0:3c:e9:
08:ab:69:85:de:fa:e4:ea:8c:55:9e:5b:fd:b0:30:
90:1a:f9:a2:be:2c:5d:da:7e:75:d6:20:17:09:d4:
05:0e:98:79:2c:3d:92:4c:6a:b2:fc:d0:25:03:9a:
e2:a3:cd:26:2b:ee:f5:3d:9b:f8:c0:7a:d1:1a:a1:
c0:a4:20:45:e4:56:1b:2c:a3:9b:74:96:de:24:2f:
7d:f2:2f:34:90:bc:4f:7d:bb:af:b5:ed:65:72:a6:
08:06:da:e6:8f:72:7c:39:57:80:55:46:ef:45:bc:
8d:72:ad:65:b2:32:11:25:94:39:71:f2:12:0a:f0:
63:89:dc:0c:82:01:55:4c:4c:cc:ac:b2:99:c3:3f:
32:af:1d:a1:0e:ab:83:37:d9:79:c9:33:1d:cb:43:
47:3c:17:a1:37:19:c1:87:07:1b:cf:63:21:ad:a8:
1a:3c:fd:a7:d5:a0:25:12:d7:62:71:f1:1d:a2:e6:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:A4:11:BB:DD:0E:62:20:C6:97:FF:77:73:6A:40:9C:83:42:6A
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/uamkEbvdDmIgxpf_d3NqQJyDQmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c00::/48
2a13:d040::/48
2a13:d046:fffc::-2a13:d047:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
93:85:f5:9a:47:35:6c:86:a2:77:cc:07:c1:a4:4f:47:15:d8:
65:a2:44:84:2e:39:52:80:88:4d:66:ae:d7:b3:fa:46:30:14:
4e:f9:9e:fb:37:14:62:e6:2d:59:cd:94:ed:78:b8:f9:32:81:
2c:0c:ab:b3:5a:d7:ff:c3:3f:9a:ba:77:b7:5d:9e:ce:3e:01:
0b:91:c1:fa:00:46:f2:a8:ed:6c:c5:79:13:64:7e:b6:64:08:
a6:02:09:f7:d8:a7:cd:b9:bb:dd:39:a8:4a:db:75:d6:82:9a:
9f:47:ef:ea:19:57:c0:fb:64:51:5e:7a:8d:db:f8:84:8b:87:
b9:8f:60:eb:20:b4:46:6b:78:e2:61:58:e5:bd:59:78:06:12:
12:80:b5:d4:24:d9:b1:13:66:fc:ca:3c:7b:4c:60:63:24:6d:
ef:0e:d7:05:a4:cf:05:d1:92:47:6b:e0:2c:d1:87:2c:d1:cc:
80:ca:73:dc:44:49:20:ad:9e:a8:9b:df:34:19:e1:65:51:ea:
0d:17:c3:58:5c:6b:d7:22:95:99:03:5d:45:33:37:00:c6:aa:
a1:b8:25:3a:31:8d:16:5b:be:73:14:61:6c:11:34:4b:9e:5d:
83:8e:5b:d1:24:6c:d4:25:f6:dd:44:30:f9:80:d8:dc:56:7a:
9e:f4:a7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:29 2024 by rpki-client on console-ams.rpki-client.org