Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/2fXFtD-4wP-KAVJ2qdjov6H2QDs.roa
File: 2fXFtD-4wP-KAVJ2qdjov6H2QDs.roa (raw, json)
Hash identifier: KHUq56Rali5ouZh/XXUvlSRbiHEEjwygNc0okd9DeSY=
Subject key identifier: D9:F5:C5:B4:3F:B8:C0:FF:8A:01:52:76:A9:D8:E8:BF:A1:F6:40:3B
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01856B811541553487EA3A556B82DAD4ECAD
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/2fXFtD-4wP-KAVJ2qdjov6H2QDs.roa
Signing time: Sun 01 Jan 2023 04:04:59 +0000
ROA not before: Sun 01 Jan 2023 04:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49030
IP address blocks: 2a01:240:ab01::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:15:41:55:34:87:ea:3a:55:6b:82:da:d4:ec:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 04:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9f5c5b43fb8c0ff8a015276a9d8e8bfa1f6403b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:7f:a6:15:4e:3f:97:65:11:a1:3d:3b:b7:
e3:b8:e2:81:db:74:b2:be:aa:4f:bf:1d:d0:2d:8c:
2f:6b:85:52:ce:1e:63:97:4f:a9:5f:63:85:4d:a7:
12:7f:bd:33:ac:58:dd:20:c2:d9:73:0a:66:c4:5f:
86:eb:2f:90:b1:2f:18:c3:d8:cf:32:06:2e:30:b2:
da:e2:db:11:49:76:65:1d:21:e0:bb:22:d5:32:61:
11:1e:a9:6f:2d:4d:94:41:00:47:19:ce:c9:ae:1f:
a4:ef:81:96:7e:39:b5:64:59:f0:2d:9e:5a:01:4e:
1f:a7:cb:1a:6d:6c:81:f9:3e:5d:54:db:e2:c4:e8:
bb:f6:e9:0d:6d:38:c9:4d:77:12:80:e9:48:07:30:
d9:d2:f1:73:1b:74:2f:ec:88:36:b0:aa:3b:3e:fe:
a1:f8:7d:da:d2:4a:a9:be:1b:9a:6b:3f:93:d2:d4:
c7:9a:23:d3:c2:92:1c:8b:14:12:dd:48:2d:6b:cb:
a4:4c:e9:b9:a2:8e:f3:77:59:9a:ac:ae:a9:26:cc:
4a:c4:a1:03:fd:d5:3a:7e:9e:b4:2d:8b:06:f8:02:
4c:e3:6d:2a:90:99:c1:ea:e6:71:43:47:74:6f:b4:
b7:9b:cb:3a:bc:35:b1:ac:62:64:bd:a9:2c:15:bf:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F5:C5:B4:3F:B8:C0:FF:8A:01:52:76:A9:D8:E8:BF:A1:F6:40:3B
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/2fXFtD-4wP-KAVJ2qdjov6H2QDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:240:ab01::/48
Signature Algorithm: sha256WithRSAEncryption
a3:46:b0:49:49:34:b8:f7:0d:f1:e4:13:80:12:55:e3:8e:0b:
ad:ec:c9:72:18:25:ef:31:0f:ea:34:5b:81:ad:a0:74:70:4f:
5e:13:2f:a5:6e:c4:fd:9a:08:f7:e6:a7:b6:09:2c:e6:c2:eb:
42:96:a5:20:30:8a:5d:8d:f7:2c:54:a3:8c:56:df:22:f4:f5:
ae:ca:9a:a3:4b:c0:36:8d:76:10:7f:a5:32:6d:4b:32:e3:d1:
69:0f:8e:d4:34:b5:40:59:d2:11:6c:05:10:21:30:1e:fb:d3:
89:e4:8c:ee:5d:16:23:a3:d1:fd:01:4a:cf:25:a7:b3:5f:ed:
77:b6:23:64:b7:4a:96:00:26:be:59:83:08:25:10:0e:b5:b3:
76:3f:87:8b:dc:0d:86:8c:a0:93:75:28:c8:e7:56:d6:ca:ea:
1f:01:70:58:48:4f:5b:ab:a1:7b:8f:9b:a4:c2:bc:57:9e:10:
e5:a8:0b:31:c6:f2:b4:1d:09:79:0e:7c:ff:8a:2f:09:4f:d8:
e4:74:d5:2e:cd:ed:db:a4:eb:1b:8c:30:44:9d:64:9f:08:b3:
6c:d0:b5:bc:52:a5:33:fb:b6:49:14:0a:7e:7f:a5:76:bf:4c:
d9:cb:2d:b7:a4:96:8f:8b:b1:a7:42:d3:d1:f7:40:b9:7f:18:
9f:a0:1a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:17 2024 by rpki-client on console-ams.rpki-client.org