Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/pHKhVq1doHITn9_tDjgdnE_tA1Q.roa
File: pHKhVq1doHITn9_tDjgdnE_tA1Q.roa (raw, json)
Hash identifier: +w7JelZGqskJyzeZ4sgG1hLCY1609DEYT6jj36dD9wE=
Subject key identifier: A4:72:A1:56:AD:5D:A0:72:13:9F:DF:ED:0E:38:1D:9C:4F:ED:03:54
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 018CC5015B4FBEEC49EE4B22467E27662951
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/pHKhVq1doHITn9_tDjgdnE_tA1Q.roa
Signing time: Mon 01 Jan 2024 12:30:49 +0000
ROA not before: Mon 01 Jan 2024 12:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211603
IP address blocks: 2a0f:6580:105::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 May 2024 09:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:5b:4f:be:ec:49:ee:4b:22:46:7e:27:66:29:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 12:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a472a156ad5da072139fdfed0e381d9c4fed0354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:2a:55:f1:c9:a2:b3:fb:4b:ba:0d:74:61:
69:34:ab:f5:af:af:22:24:41:4b:07:82:50:87:95:
e8:60:d7:48:16:45:5b:04:97:9c:71:80:ec:01:c0:
03:19:ab:1b:92:70:85:09:d7:df:cc:e0:8c:0d:9d:
38:0f:af:68:56:9b:56:ec:e7:b8:0a:ef:a1:75:63:
2c:89:c2:c0:68:e1:0c:08:28:bb:53:32:fc:13:70:
f9:9b:5b:7a:37:6a:6e:06:b5:7d:f7:23:0a:9f:0e:
4c:9b:f1:f3:3d:b9:b3:19:b9:ea:7e:28:91:cb:ea:
63:08:a8:ef:aa:13:d4:17:d2:a8:9e:67:35:f1:06:
27:51:a4:fc:e5:79:e1:23:37:b7:5f:04:cd:1c:26:
e7:82:bf:0d:49:4a:40:be:22:7f:17:84:9a:da:27:
dc:3d:97:1c:1c:41:03:59:87:3d:9a:51:9b:77:c3:
bb:d8:aa:51:e3:98:77:f2:44:7a:6d:7d:f3:79:15:
8f:a4:b2:db:89:85:86:00:19:1b:37:df:1f:8a:ad:
50:7d:34:e8:53:3b:63:d5:1a:9e:52:2e:a2:d2:d0:
82:0f:8a:0e:d5:6a:77:4e:13:f2:bb:63:2e:9b:34:
df:85:59:31:58:c4:c4:a2:e1:89:38:9d:a0:55:f7:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:72:A1:56:AD:5D:A0:72:13:9F:DF:ED:0E:38:1D:9C:4F:ED:03:54
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/pHKhVq1doHITn9_tDjgdnE_tA1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:105::/48
Signature Algorithm: sha256WithRSAEncryption
32:ae:fa:f5:ea:c1:c1:24:b6:91:dc:3e:90:d1:e4:f2:ec:d5:
c8:d4:e0:66:60:de:5d:f0:da:e7:3b:17:40:03:0b:4d:0d:c0:
a8:a5:c1:60:53:a6:06:7d:b1:e8:d4:50:d4:84:bd:f1:9e:d8:
0a:bc:92:b7:2a:8c:c4:10:da:1f:e7:e8:34:86:1a:06:1e:a3:
da:e6:38:29:64:fb:30:ca:ae:8c:7a:5f:ee:af:4d:ab:7c:54:
54:a7:37:3f:0f:a2:91:f8:44:0b:d5:66:86:ca:71:d4:d4:56:
9b:16:06:49:da:3f:1a:88:26:16:66:8c:e6:71:03:c8:6c:e3:
76:5f:f8:44:d8:de:7f:f9:db:fa:46:91:d3:26:eb:4d:33:af:
37:67:38:f7:be:a7:8e:8c:62:a4:c4:e1:6c:6e:d4:51:5c:bb:
2b:a5:fc:d0:f5:a1:90:6b:e8:d5:ab:64:f2:cc:9f:e4:79:82:
ff:ab:92:c4:ac:56:8b:4e:4c:5e:46:fe:8a:20:51:fe:3f:7a:
d9:3c:c6:a2:7d:74:cf:90:79:30:c7:b0:72:d5:8c:50:67:e9:
46:91:ce:ce:0d:55:2b:00:8b:ed:0e:0a:c2:1c:fc:4d:f9:79:
76:02:cf:d8:d2:f4:f6:ad:4d:2b:35:49:b7:34:32:85:b6:d5:
25:50:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:41 2024 by rpki-client on console-ams.rpki-client.org