Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/VwObXDui6A3tdO8ybAc6JpLZgwI.roa
File: VwObXDui6A3tdO8ybAc6JpLZgwI.roa (raw, json)
Hash identifier: iY/2qX+4jXSlEjrJJPkXJoyXGYOxdQCSpyWYrfm+sXA=
Subject key identifier: 57:03:9B:5C:3B:A2:E8:0D:ED:74:EF:32:6C:07:3A:26:92:D9:83:02
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018B68CB9D5DE7A81E6E901D52CF4F8F136A
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/VwObXDui6A3tdO8ybAc6JpLZgwI.roa
Signing time: Wed 25 Oct 2023 21:44:16 +0000
ROA not before: Wed 25 Oct 2023 21:44:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216157
IP address blocks: 2a11:e101::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:cb:9d:5d:e7:a8:1e:6e:90:1d:52:cf:4f:8f:13:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Oct 25 21:44:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57039b5c3ba2e80ded74ef326c073a2692d98302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a6:3d:6f:a3:1b:a4:45:d2:6d:0a:76:7f:0e:
57:c1:ff:32:1d:cb:be:ab:b8:c9:74:f7:ae:33:83:
ca:e0:9b:c8:45:ba:f4:34:62:ed:8c:9d:d5:64:0c:
7b:94:ef:3d:98:ba:f1:89:4a:28:d4:7c:c1:16:c9:
b0:ce:0d:9d:b3:cc:bf:ef:ff:72:5e:28:3a:d9:8a:
ce:7b:55:be:95:c3:ef:53:41:d0:02:14:d8:e5:f8:
8d:b7:29:3e:74:39:8c:cf:80:3d:54:5e:b1:3a:f1:
f1:6d:b0:b2:0c:da:3d:1f:bf:f1:26:8a:37:f0:fc:
a3:56:61:31:1e:d8:6d:f3:37:61:fb:36:7c:a0:bd:
79:e2:73:51:af:fe:e2:ff:18:37:4c:4a:9a:ec:f8:
38:a0:e1:06:42:32:32:5d:17:9e:c1:21:94:34:3b:
42:06:8b:01:3f:f7:a0:67:05:60:9c:de:f4:ec:ac:
59:fb:ff:fa:23:fe:29:8b:6c:4c:33:64:d8:82:c0:
72:4a:a7:f4:46:19:ab:e4:c9:3d:2e:de:7a:c0:58:
98:12:e9:db:43:08:1c:b6:0d:5b:94:24:a1:04:32:
c7:5c:d1:ae:c3:d4:64:8e:9a:be:97:00:c6:aa:db:
5d:5b:8f:1f:c0:8a:6d:8d:93:68:41:d7:ca:f0:24:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:03:9B:5C:3B:A2:E8:0D:ED:74:EF:32:6C:07:3A:26:92:D9:83:02
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/VwObXDui6A3tdO8ybAc6JpLZgwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e101::/32
Signature Algorithm: sha256WithRSAEncryption
84:b9:8a:a1:cd:35:c8:60:43:4b:39:5f:c3:3b:d3:3a:62:b2:
c8:26:13:9e:96:ff:57:14:66:0c:6d:87:9d:f2:58:5a:95:b8:
d6:4f:e6:04:4e:4f:f1:05:12:0e:b2:64:47:2d:ac:87:ee:c3:
b0:bb:8d:a8:fe:de:68:98:48:68:08:79:46:43:f2:e3:04:48:
5a:cb:55:18:34:31:ee:e0:b2:57:70:72:cc:46:c9:93:04:7c:
3d:38:cd:cd:55:dd:9a:12:cb:98:0c:38:db:bd:a4:78:a5:4c:
29:7a:c4:c9:45:92:e6:2d:6f:8d:98:19:08:21:59:d8:89:17:
ee:f2:1b:56:03:f8:13:a0:4b:2a:d2:ad:1f:cf:d3:58:a3:06:
78:3f:97:a7:60:50:5c:06:09:80:de:ed:d4:0c:cf:6a:a4:e3:
08:07:d9:be:c0:c1:9f:85:28:db:18:a3:bf:ea:c7:76:9e:ba:
d8:92:3c:da:a9:79:2b:dd:71:a3:87:9d:f6:ab:6d:0d:1f:72:
b6:49:63:a8:28:d2:c7:f0:ea:07:87:af:29:79:2b:69:6f:90:
ca:2f:f8:76:b4:c2:32:ac:af:12:21:2d:be:9e:03:27:e0:ba:
22:cb:91:6a:7a:0a:64:dd:9c:79:7b:34:cd:78:3f:c7:c5:50:
41:11:f9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org