Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/dIu0mgqwkOT6x0zkpUZmDxtqgyQ.roa
File: dIu0mgqwkOT6x0zkpUZmDxtqgyQ.roa (raw, json)
Hash identifier: wXVWnB26NIXKEQpnzAdoYoI/RnNwmJSeDuSW9GZNtlA=
Subject key identifier: 74:8B:B4:9A:0A:B0:90:E4:FA:C7:4C:E4:A5:46:66:0F:1B:6A:83:24
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0187B563127B4238FD30F8A030F58552B1A2
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/dIu0mgqwkOT6x0zkpUZmDxtqgyQ.roa
Signing time: Mon 24 Apr 2023 22:29:41 +0000
ROA not before: Mon 24 Apr 2023 22:29:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203363
IP address blocks: 2a05:4140:700::/40 maxlen: 40
2a05:4140:800::/40 maxlen: 48
2a05:4140:19::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b5:63:12:7b:42:38:fd:30:f8:a0:30:f5:85:52:b1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Apr 24 22:29:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=748bb49a0ab090e4fac74ce4a546660f1b6a8324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:a9:56:b9:71:76:f5:5f:cb:30:c8:94:0b:
cc:69:8d:d3:78:e0:63:90:6f:7f:3a:73:77:43:db:
e8:8b:18:29:92:21:ed:f0:67:a5:96:07:38:88:1d:
9c:db:fc:86:ec:a8:53:a8:67:00:16:87:ac:46:3d:
e0:8a:8b:be:18:56:94:08:90:24:a9:c6:5b:f6:6c:
97:ba:0e:da:fc:20:66:11:29:fe:59:58:87:41:ad:
75:ec:ab:b7:ee:68:70:95:c1:ca:ce:13:c9:c1:92:
b3:a3:ca:40:af:01:89:2b:a2:a0:ea:a1:5a:02:56:
8d:66:7c:6e:9b:dc:89:42:6b:2a:c9:63:18:4b:27:
cd:63:f1:cd:f0:23:c9:5c:d0:f7:26:34:cc:f7:e6:
ae:6b:ce:2f:d7:c9:a7:0d:77:fd:cc:26:b9:ff:3b:
73:c2:b2:d3:8a:bb:f2:c2:a0:9f:f8:f0:b5:61:e9:
44:4d:a7:bb:85:9a:19:59:39:19:f9:9d:ed:07:2d:
23:8f:2e:2a:af:b6:32:0f:80:6e:a5:c9:63:ac:f2:
21:9d:1a:2f:49:76:fd:28:3e:a5:d0:57:0a:fa:e0:
e8:49:12:2d:db:cd:8c:af:ca:59:55:bf:2b:f8:01:
73:54:56:c2:55:8e:f0:68:e2:08:ba:17:98:26:cc:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8B:B4:9A:0A:B0:90:E4:FA:C7:4C:E4:A5:46:66:0F:1B:6A:83:24
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/dIu0mgqwkOT6x0zkpUZmDxtqgyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:19::/48
2a05:4140:700::-2a05:4140:8ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
90:eb:ff:3f:2e:12:b2:2b:fe:99:8d:b8:ed:72:0c:62:d6:66:
de:0a:37:64:fe:e7:f8:4e:fd:5e:d4:d9:f8:d8:3b:5c:a8:d7:
4d:ab:f1:a5:c1:2e:50:7f:be:57:57:17:8a:41:0b:95:15:6d:
16:04:bd:f2:d9:bb:61:82:fe:c6:8f:c2:e2:92:37:28:a2:f4:
a8:8d:48:d2:15:3a:42:68:2e:ee:59:10:25:88:f1:e0:e5:dc:
b6:69:0c:8b:6c:cb:9e:8d:57:4c:eb:c7:71:97:61:be:cc:dd:
5e:e2:d4:22:e1:b0:48:cc:34:62:50:1f:d1:97:ee:75:bb:40:
1d:e7:8f:53:2f:f7:c1:a0:e4:6c:92:30:17:d7:d3:ca:34:84:
bd:38:bd:1b:ee:01:12:c5:fb:cf:48:fa:f6:de:36:07:01:55:
fa:05:6d:fa:fb:b4:0e:2c:15:3d:fb:74:48:0e:50:b5:38:df:
90:e4:4c:a3:d2:99:8c:a0:ab:f3:d4:d7:9f:d0:9c:c2:f2:c3:
87:36:0c:9f:0d:1d:72:0c:de:a5:0c:0f:3c:b1:ac:de:1e:36:
bb:05:dd:c0:8c:24:cd:ab:98:62:3e:e0:bb:0f:39:d1:3a:46:
a6:05:cc:22:44:32:33:37:87:83:d9:2d:8a:e2:69:e8:0b:20:
ba:10:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org