Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/A8bejuGfYI2WxHmNqJ0cU2vyBZg.roa
File: A8bejuGfYI2WxHmNqJ0cU2vyBZg.roa (raw, json)
Hash identifier: vh6QyZXsd1FHRRSWFrXtg8VhUJAOKi437u/ZQvruX10=
Subject key identifier: 03:C6:DE:8E:E1:9F:60:8D:96:C4:79:8D:A8:9D:1C:53:6B:F2:05:98
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018AFEC4B2D038699C4CCCEF44DE93D8CBE0
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/A8bejuGfYI2WxHmNqJ0cU2vyBZg.roa
Signing time: Thu 05 Oct 2023 07:36:58 +0000
ROA not before: Thu 05 Oct 2023 07:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199415
IP address blocks: 2a10:4646:121::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:c4:b2:d0:38:69:9c:4c:cc:ef:44:de:93:d8:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Oct 5 07:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03c6de8ee19f608d96c4798da89d1c536bf20598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9e:47:2e:cf:87:67:f5:55:c6:80:ab:31:bf:
92:14:a2:d6:04:48:17:d7:7f:69:60:42:fb:d6:35:
12:a0:90:28:6a:7f:3c:1c:38:f8:dc:d1:d7:cf:75:
da:86:94:66:42:da:08:be:bb:18:0e:81:2a:0f:6d:
9b:e1:3d:d8:ac:cb:70:08:5f:37:72:bf:a0:43:0a:
e4:01:45:82:60:ca:f9:af:44:57:a4:11:46:11:1e:
18:fa:9e:3b:ba:13:95:61:50:d8:f7:e4:e5:05:7b:
1b:23:a2:cf:9c:0c:2b:39:a1:22:c3:96:66:2c:6a:
e1:b2:3a:70:93:fe:b8:ae:44:ad:a3:a7:1c:20:30:
9b:70:94:56:66:c2:24:21:00:d4:92:a2:4b:a8:e6:
19:e9:33:b5:61:3a:c1:21:66:e1:80:df:38:1c:3f:
b9:d0:52:b6:3a:43:f5:f7:88:6b:b3:5e:39:b9:43:
9c:fa:62:2e:1b:95:f0:1f:34:ea:8f:27:0e:8c:80:
f7:31:a4:b2:78:0d:3c:54:cf:f6:13:f3:13:d0:5a:
b4:55:68:68:45:f6:b7:d9:c9:df:19:4f:58:6d:1a:
19:92:29:9b:55:40:71:c9:b2:1a:7b:6c:ab:36:94:
0c:0a:76:d9:fb:1c:a4:16:d4:45:af:2f:17:d4:7c:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C6:DE:8E:E1:9F:60:8D:96:C4:79:8D:A8:9D:1C:53:6B:F2:05:98
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/A8bejuGfYI2WxHmNqJ0cU2vyBZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:121::/48
Signature Algorithm: sha256WithRSAEncryption
27:26:63:4c:3b:ed:21:84:00:21:40:fc:af:4f:24:b2:e2:d4:
da:53:c7:12:40:9c:34:46:4f:b6:ed:da:6c:c0:74:2c:42:5f:
e3:78:71:6a:bc:b4:0f:8a:c0:b7:85:c1:24:94:e1:a9:96:69:
03:f9:37:de:ae:57:52:ee:2a:39:65:f0:d4:d9:62:15:e9:59:
f1:ab:3e:2d:2f:01:57:5c:da:3a:97:9d:28:99:c7:c1:94:f6:
9d:7a:5b:86:09:d9:87:48:16:74:fb:ab:a4:d5:0a:ff:66:24:
03:f6:72:78:80:10:28:e0:93:71:5f:2d:bc:d5:d4:ad:12:c5:
20:3d:cd:98:81:f1:92:08:75:aa:b7:34:3a:4b:29:26:b1:60:
04:0a:a5:ba:fc:9c:9f:fa:e7:44:e2:1b:d3:81:03:b4:5f:5c:
c6:a0:1e:4d:fb:44:a9:ed:4b:af:40:be:ef:37:66:98:bb:c3:
1a:e6:45:a1:d8:e8:8b:32:14:d9:b5:f0:f6:7d:ff:79:fd:73:
1d:8c:2c:4f:b8:19:70:ec:80:31:cc:fe:6a:f7:d9:d4:e3:5f:
ef:b5:4b:a0:a4:f9:be:e8:5c:31:fb:27:4d:5d:ea:f4:de:59:
e7:31:8e:ff:b1:91:68:fd:d3:dd:9a:28:72:8e:5e:d2:39:f4:
d8:53:d9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:05 2024 by rpki-client on console-fra.rpki-client.org