Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/0cIRcnw2amO_uISFMWVfSXlsFJk.roa
File: 0cIRcnw2amO_uISFMWVfSXlsFJk.roa (raw, json)
Hash identifier: CAr9Jy8XyhvEF6xMj8GUNPCuQKaeT6BqTM+kgJYbTt8=
Subject key identifier: D1:C2:11:72:7C:36:6A:63:BF:B8:84:85:31:65:5F:49:79:6C:14:99
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0185BB3662FD762A3096190B6764EF188614
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/0cIRcnw2amO_uISFMWVfSXlsFJk.roa
Signing time: Mon 16 Jan 2023 15:33:01 +0000
ROA not before: Mon 16 Jan 2023 15:33:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49245
IP address blocks: 2a05:4140:14::/48 maxlen: 48
2a05:4140:12::/48 maxlen: 48
2a05:4140:13::/48 maxlen: 48
2a05:4140:3::/48 maxlen: 48
2a05:4140:11::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:36:62:fd:76:2a:30:96:19:0b:67:64:ef:18:86:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 16 15:33:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1c211727c366a63bfb8848531655f49796c1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:eb:8f:52:64:74:37:d4:1d:29:90:ec:1c:
10:d1:ee:45:54:c6:12:7c:1a:89:14:1a:65:62:76:
cd:00:a7:74:27:27:30:6e:8c:d9:7d:7d:e4:97:6e:
49:61:3d:c2:d2:95:65:d2:ae:40:d3:3d:c3:80:92:
df:10:db:c0:5f:50:f8:74:64:1b:02:b4:f2:47:3c:
69:e3:d4:c2:6d:4e:b1:11:88:98:2b:70:94:2f:6e:
e9:72:5a:86:a7:e5:d8:52:9d:a0:da:cc:fb:dd:dd:
dd:f9:c6:15:67:19:44:e7:18:a0:76:2b:e7:24:4b:
9f:20:4f:5b:76:46:0f:7d:01:51:13:e4:df:8a:05:
1a:3a:ef:29:51:6d:12:f3:6b:27:a3:6c:22:63:8e:
7e:a4:20:71:30:5c:c2:65:06:5d:5c:14:94:b4:45:
b9:2d:f3:70:06:26:50:f5:4e:aa:2f:42:b5:1c:56:
4c:b2:d3:aa:6c:6f:67:b0:fd:ac:a3:56:6e:2e:48:
f3:ad:27:35:aa:df:d8:e2:49:87:7b:b3:5c:c1:db:
9a:24:ab:6d:68:3b:6c:db:e6:0e:f3:8d:9a:ee:46:
19:14:02:c5:93:06:aa:05:ed:56:1c:78:74:11:33:
1a:78:0a:d6:eb:24:27:a6:d8:11:7a:08:be:27:5e:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C2:11:72:7C:36:6A:63:BF:B8:84:85:31:65:5F:49:79:6C:14:99
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/0cIRcnw2amO_uISFMWVfSXlsFJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:3::/48
2a05:4140:11::-2a05:4140:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
59:06:73:65:5c:e7:bd:b9:b9:3c:70:69:f5:3e:3a:3e:5a:c5:
02:0e:c0:c9:12:61:8c:89:be:6a:47:06:af:d7:f3:8c:7e:e8:
fc:86:70:48:b9:15:50:97:5b:4b:c0:c8:04:df:11:7d:60:67:
07:c2:f2:49:0d:90:49:d5:0d:c6:f3:11:f7:91:9a:2d:a7:e8:
6e:e6:04:ea:82:d4:d8:89:83:d5:b8:ac:88:71:19:43:29:0d:
14:93:a9:a7:56:5a:aa:b8:7b:72:04:13:42:0a:06:60:ca:9d:
5e:39:bb:c1:0d:4b:28:aa:7d:d0:ed:a6:9a:da:08:41:4b:5a:
be:9b:f4:c3:5a:9f:7f:b2:23:84:5e:39:03:a3:ef:46:c0:ae:
f4:3a:8a:2d:e7:de:61:6e:cc:f0:51:ff:17:70:fc:79:cf:d8:
12:0d:dc:5a:59:21:67:81:3a:f0:89:f9:95:35:db:8c:20:0b:
b7:09:f9:4f:6a:b9:5c:99:22:d0:52:be:83:9f:61:09:0a:78:
59:ef:ab:80:97:b0:31:6a:6f:1d:8a:98:1a:ec:5e:44:d2:4d:
0c:e9:e1:12:bd:29:b9:3e:b0:36:b1:fb:9c:43:c2:ec:ea:02:
83:8d:8e:c2:06:29:97:c5:1a:98:4e:80:e7:65:e7:60:7e:85:
3b:d2:98:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org