Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_0c0KjnuE8EiT1Fg9xgl7yOCMNM.roa
File: _0c0KjnuE8EiT1Fg9xgl7yOCMNM.roa (raw, json)
Hash identifier: 5PapBpm1ViWvOTqSpnt7NwMrsIVceWoVNsWMGHt33HU=
Subject key identifier: FF:47:34:2A:39:EE:13:C1:22:4F:51:60:F7:18:25:EF:23:82:30:D3
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0188E3D2B4989EF2578F0628C9DCC1CA8C1E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_0c0KjnuE8EiT1Fg9xgl7yOCMNM.roa
Signing time: Thu 22 Jun 2023 15:56:56 +0000
ROA not before: Thu 22 Jun 2023 15:56:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210718
IP address blocks: 2a0b:b87:ff12::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:d2:b4:98:9e:f2:57:8f:06:28:c9:dc:c1:ca:8c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jun 22 15:56:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff47342a39ee13c1224f5160f71825ef238230d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:eb:7f:a1:e1:12:e8:e2:37:c9:9d:1e:79:
13:8f:a7:1d:b9:f7:da:e4:21:3b:85:94:38:2f:b0:
bc:89:86:f6:9b:e1:7d:f8:83:01:47:e2:e7:3f:45:
f8:86:39:65:4a:65:40:b2:9d:e9:55:d5:48:ed:13:
15:1a:b3:be:17:2e:ca:6b:48:e9:21:bd:d0:a1:d4:
91:0c:1e:52:84:b1:71:4b:2e:11:09:91:f7:83:95:
e6:f6:25:3f:da:7e:a0:b6:72:71:a8:88:92:66:76:
3c:80:0f:76:cc:7d:94:46:84:a2:0e:34:c5:64:c1:
ed:19:d6:e4:45:19:e5:45:fc:98:80:74:d7:01:35:
a3:c3:09:90:09:d1:05:ba:d3:e9:3a:fb:ac:a1:9d:
92:e5:20:ff:bc:de:86:b6:14:91:28:5d:2e:fc:09:
30:ac:96:67:5f:81:85:b6:7f:50:db:f6:14:d0:54:
45:81:14:81:0c:39:14:fb:a2:0d:86:96:1e:ec:a2:
3d:dd:18:f8:86:cb:7b:7a:94:c1:11:59:ec:70:65:
51:b5:ad:f0:e5:7f:7b:52:33:af:03:82:5e:40:3e:
07:78:79:9d:bd:a6:ed:5b:5d:82:fe:db:a3:79:b2:
97:36:77:c0:90:7a:36:5e:1f:8c:ee:f7:b5:51:39:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:34:2A:39:EE:13:C1:22:4F:51:60:F7:18:25:EF:23:82:30:D3
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_0c0KjnuE8EiT1Fg9xgl7yOCMNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ff12::/48
Signature Algorithm: sha256WithRSAEncryption
89:dc:8a:58:b1:cc:d2:d7:d5:72:5d:3f:87:3a:74:13:87:f9:
69:ff:0e:1f:11:ee:f7:ba:5e:32:2c:1a:1f:63:d9:51:b4:38:
6f:be:d7:b8:2a:85:71:8d:38:16:b9:be:20:56:d0:d3:11:6d:
21:b6:54:b7:18:93:18:0d:70:a7:c3:af:b2:aa:ca:d0:bc:94:
fe:c4:71:ad:a8:92:10:51:87:63:2e:9c:af:46:33:2c:d6:6b:
42:8c:0d:db:e2:15:d7:eb:4a:dd:2b:37:d4:13:00:45:1d:5a:
8c:e4:29:d4:36:59:62:76:ee:1b:ee:7d:54:76:ab:b6:fd:9c:
cc:25:43:73:74:83:28:cb:e5:7b:44:19:93:aa:a2:eb:70:6c:
f3:7e:f7:c9:cc:3b:52:fd:9c:a1:30:1e:b9:84:d1:0e:76:6c:
61:5e:95:9d:61:6f:2a:ee:a6:56:29:36:d2:04:58:4d:07:b3:
91:91:30:20:4a:3e:4a:b9:4d:f0:de:3d:e1:da:fd:db:f1:98:
fb:69:7d:9e:76:10:84:34:a3:d6:52:07:d4:54:3a:23:53:35:
48:65:5d:cc:39:5e:bf:d9:21:fa:9e:a0:55:ab:38:0b:26:15:
7a:86:c8:42:5f:46:28:79:3b:7d:0a:ad:7f:3a:bc:4c:55:bc:
27:1d:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org