Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/6JgDphbiAiUzH51IWDVnISt-CrM.roa
File: 6JgDphbiAiUzH51IWDVnISt-CrM.roa (raw, json)
Hash identifier: qo2BuKmjliAlBBNXnAelVXM8iHeCLGOJvQN8p1r/qSA=
Subject key identifier: E8:98:03:A6:16:E2:02:25:33:1F:9D:48:58:35:67:21:2B:7E:0A:B3
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FFB56110341750165FEB26921E63A
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/6JgDphbiAiUzH51IWDVnISt-CrM.roa
Signing time: Mon 02 Jan 2023 17:38:13 +0000
ROA not before: Mon 02 Jan 2023 17:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204893
IP address blocks: 2a0b:b87:ffd2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:fb:56:11:03:41:75:01:65:fe:b2:69:21:e6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e89803a616e20225331f9d48583567212b7e0ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3d:d9:20:ea:6f:ad:16:33:14:7b:d6:12:bc:
97:7d:e0:b4:aa:8b:35:99:5e:ce:42:54:84:a9:3a:
76:71:3a:c6:06:5e:1e:8f:87:9e:b3:9f:6c:50:cd:
26:12:d9:0f:f4:54:6c:99:1d:e0:9e:f3:fd:e6:8a:
72:0a:45:65:4a:2a:8b:38:32:a1:41:5a:72:6c:1c:
c9:6d:e2:81:84:87:2a:dc:e4:8f:e9:0d:6e:4c:f0:
87:9b:ce:23:83:df:aa:fa:52:25:e2:7f:55:a3:c9:
5b:8b:99:86:46:fd:43:9f:7f:18:59:63:02:77:5b:
39:40:2e:25:75:72:c3:58:95:0a:ab:2e:1e:86:90:
12:a1:97:77:6d:e0:8b:99:d7:b9:1e:0b:e4:de:88:
9f:7a:db:0e:44:20:cd:b9:e9:f6:88:14:37:c7:b3:
27:5a:e4:7d:76:eb:90:5b:88:43:ec:49:66:e9:23:
18:f3:0a:a1:43:a7:16:e8:b8:83:8d:f0:2d:66:4b:
d0:3b:c5:e2:e7:26:78:4a:5e:71:22:d5:3d:c8:75:
36:9b:69:7f:64:dc:35:ca:6d:25:df:b1:80:c9:70:
75:0f:9f:2c:d8:67:6b:df:f3:7e:10:3f:09:e8:d2:
b7:ed:50:d0:76:33:35:4c:23:14:5f:d1:21:60:47:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:98:03:A6:16:E2:02:25:33:1F:9D:48:58:35:67:21:2B:7E:0A:B3
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/6JgDphbiAiUzH51IWDVnISt-CrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffd2::/48
Signature Algorithm: sha256WithRSAEncryption
c7:d6:97:8b:01:41:51:62:01:54:c1:86:03:e6:16:2c:ab:32:
7f:a2:4a:6d:57:a6:3e:b8:be:1f:ec:88:77:e9:b4:3b:a5:b6:
dd:38:36:b4:fc:44:aa:ad:cf:c6:ba:d0:cb:59:33:cd:00:7c:
24:b5:75:7c:75:0e:7b:9f:86:73:70:51:bd:4d:5c:de:41:4b:
9a:40:9e:0a:2e:99:50:f7:ac:4e:c4:9e:54:38:62:18:2f:2f:
46:26:fb:e9:51:6e:1b:98:5b:2c:6e:e0:3b:88:67:e0:d2:8d:
27:fd:6d:23:87:bb:04:02:a4:aa:f1:80:67:1c:d2:8d:0a:3e:
00:ee:20:71:b9:ae:be:af:da:8a:4c:1d:cd:38:91:54:98:5a:
86:5c:3a:d8:d9:6e:8c:98:3b:15:dc:62:91:4e:a0:47:6c:7e:
6b:59:f1:f3:ff:1f:ec:82:4e:8e:87:84:85:89:b2:42:53:b7:
29:6b:46:cd:d5:cd:a8:a7:17:8e:24:13:df:13:b7:e3:9b:50:
d0:51:26:3e:46:cc:83:5d:59:33:11:db:17:41:81:08:52:aa:
1c:6d:f5:6a:fe:f5:d7:e8:3f:39:78:b7:bf:7a:7a:9c:68:5b:
4b:5f:8b:6f:a3:c1:9b:33:3c:2f:d7:fe:4f:3d:1c:46:e8:a0:
c4:b4:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org