Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/6jh9dIQHInmnWOyT2PedMIlXCco.roa
File: 6jh9dIQHInmnWOyT2PedMIlXCco.roa (raw, json)
Hash identifier: YGgAnfmXOCgKY8yUFufa1t/mWm898Fnnnd0je+tKOLk=
Subject key identifier: EA:38:7D:74:84:07:22:79:A7:58:EC:93:D8:F7:9D:30:89:57:09:CA
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 01856ECB8777454089F880CEEC64C595F069
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/6jh9dIQHInmnWOyT2PedMIlXCco.roa
Signing time: Sun 01 Jan 2023 19:25:10 +0000
ROA not before: Sun 01 Jan 2023 19:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199302
IP address blocks: 2001:67c:150c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:87:77:45:40:89:f8:80:ce:ec:64:c5:95:f0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Jan 1 19:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea387d7484072279a758ec93d8f79d30895709ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:0c:ac:39:ed:1c:ca:2c:ec:21:76:c1:b8:
4e:f1:17:4b:fb:88:5c:87:dd:ff:fd:bc:dd:38:44:
23:08:a9:21:6d:06:14:80:04:be:13:f7:eb:2d:c5:
9d:d8:b2:4d:b6:eb:de:fb:dc:cf:4f:da:4c:82:b4:
85:60:16:e1:81:f5:92:dc:6e:1b:0d:21:ca:2c:9d:
41:91:24:7f:65:37:a8:3e:b0:57:3f:41:3c:d8:0b:
ca:5e:f7:5b:e1:4b:00:f9:99:1f:de:70:70:31:b3:
95:56:58:17:f9:e6:38:e5:c5:6f:1d:0c:10:d0:11:
03:38:0c:cd:bc:99:0e:b0:36:a6:01:72:18:79:79:
2f:aa:ad:6a:7a:26:19:7c:b6:bb:33:89:e2:b6:61:
67:3d:7e:5b:80:a4:ef:b7:80:a0:8b:bc:0b:e7:90:
53:c2:11:4c:40:94:3c:c0:e3:b1:be:34:9e:d4:51:
93:4c:82:ef:8c:7b:e2:e6:0a:00:7c:82:35:3d:db:
cc:10:b5:da:85:1e:a1:43:32:a1:3e:71:fb:1a:95:
bc:6d:7f:4a:f8:99:d5:89:92:db:1e:9c:07:6e:e9:
14:e0:c5:9d:ac:a0:b6:53:d4:f9:fb:47:63:dd:aa:
c8:93:64:56:5c:46:49:82:ee:e0:87:54:e5:be:06:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:38:7D:74:84:07:22:79:A7:58:EC:93:D8:F7:9D:30:89:57:09:CA
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/6jh9dIQHInmnWOyT2PedMIlXCco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:150c::/48
Signature Algorithm: sha256WithRSAEncryption
1a:44:e0:97:b5:dc:95:d2:4d:3b:9b:63:f6:76:2f:f9:ef:ae:
e0:e7:2d:bb:ff:9b:89:1d:2b:b5:a1:1d:41:ad:24:7e:c2:fb:
98:08:e4:aa:fd:95:ca:d2:ca:fc:05:7e:2e:79:69:67:b1:ac:
1f:90:3f:01:15:ee:49:ab:47:8f:d3:32:af:0e:ea:a6:3a:f6:
19:04:cc:50:a4:8c:80:2e:4b:3b:a2:8e:a4:0d:bb:45:1c:bc:
8a:45:05:a6:03:1d:78:d4:fe:41:f8:c5:fc:8f:f8:72:8b:68:
2f:10:99:fa:29:f3:2d:dc:78:1f:38:cd:98:fc:14:38:82:e8:
c4:1c:df:75:71:5e:91:ef:67:07:de:bd:8e:cf:21:76:b8:8d:
4b:7c:dd:90:57:4a:8f:72:d6:34:0d:8c:c2:e6:f9:d8:a0:90:
0d:e0:90:17:c1:77:a6:6a:46:80:9a:32:53:92:38:10:57:85:
e9:bb:2f:bd:93:4a:ff:b6:ef:83:79:b5:e9:a2:79:a0:a6:e1:
3d:38:54:34:56:a3:d1:1e:cd:0b:b5:6e:60:5b:95:0e:78:17:
1c:30:b3:f9:6c:26:1a:a6:5e:44:e9:d1:1c:c3:77:72:2e:74:
55:4b:6a:9e:ab:ce:e6:43:93:be:b8:e4:1d:6d:07:c5:ae:a7:
22:d3:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:08 2024 by rpki-client on console-ams.rpki-client.org