Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/CB1G8LGTjkos7MaTw1iQJ9aRW_Y.roa
File: CB1G8LGTjkos7MaTw1iQJ9aRW_Y.roa (raw, json)
Hash identifier: FUeukpsYzRlkeFe+32QuyBl3fApyQxh9VH569O8yreU=
Subject key identifier: 08:1D:46:F0:B1:93:8E:4A:2C:EC:C6:93:C3:58:90:27:D6:91:5B:F6
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018C87FA03C18DD07E8A80B2F81925C58945
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/CB1G8LGTjkos7MaTw1iQJ9aRW_Y.roa
Signing time: Wed 20 Dec 2023 16:05:58 +0000
ROA not before: Wed 20 Dec 2023 16:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216308
IP address blocks: 2a10:4646:390::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:fa:03:c1:8d:d0:7e:8a:80:b2:f8:19:25:c5:89:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Dec 20 16:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=081d46f0b1938e4a2cecc693c3589027d6915bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:2a:3e:65:a1:3f:77:b3:87:50:86:ea:18:
9f:34:de:b8:c0:0a:36:7a:75:8d:01:ef:98:e4:24:
2d:51:14:5a:78:83:78:a2:b0:49:bf:13:b7:ff:dd:
1d:8b:ab:dd:b4:df:87:f1:4e:17:25:5b:5e:53:fb:
07:a1:41:6f:89:c9:40:3b:5b:a4:ad:cf:2f:5f:b7:
86:39:9b:9f:58:e4:08:53:e7:4e:09:21:d5:70:1c:
fb:43:d7:c2:98:ec:74:e6:ab:50:ac:39:e9:55:6f:
98:57:f7:67:dc:d8:25:5b:8a:8f:4b:eb:14:d7:01:
71:ef:da:6e:47:c0:d5:3b:9b:48:48:86:2b:3f:2b:
87:33:d3:de:8d:cf:3c:9c:c7:a6:ca:a8:ac:22:12:
b8:16:bb:88:99:4e:9a:5d:f2:69:fd:9f:08:7a:be:
a5:ad:77:0a:9c:f3:19:06:f8:c8:01:10:5b:9c:7d:
d1:77:6d:43:a5:d4:99:9a:9e:c9:fa:f7:81:96:a8:
5d:e1:32:cd:0e:d6:2c:a6:f0:51:41:7b:aa:76:51:
a6:f9:00:02:2c:c4:37:20:e1:e2:6e:87:d7:87:af:
c1:7a:3a:eb:6e:7e:66:d8:03:5d:80:a7:20:9c:e4:
58:9b:45:16:20:13:6c:a5:5c:3a:4c:8e:96:7a:c2:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1D:46:F0:B1:93:8E:4A:2C:EC:C6:93:C3:58:90:27:D6:91:5B:F6
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/CB1G8LGTjkos7MaTw1iQJ9aRW_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:390::/44
Signature Algorithm: sha256WithRSAEncryption
da:0f:c3:29:9c:f2:df:a6:e3:c0:68:cd:97:f5:b7:12:0b:cf:
2f:66:a3:9c:fd:7f:c8:1b:c1:91:1c:60:a7:80:fa:f6:ff:16:
82:87:d1:73:54:44:e3:4b:91:c5:2a:4d:86:e4:16:b9:af:be:
83:f2:39:4c:53:6d:e3:95:4a:bf:73:6c:a2:75:20:38:c2:7b:
3d:50:49:ad:0b:bb:9f:73:eb:8c:4a:d3:f9:e3:ef:d9:09:6b:
e0:ef:79:60:4d:97:71:4c:4d:0c:dc:b5:91:3e:1a:28:d2:a3:
6c:c4:34:34:c3:db:5d:53:8e:1c:9d:fa:95:ab:31:08:81:da:
27:75:e0:38:9b:35:cb:f6:5b:52:22:8f:74:85:81:d6:f7:f1:
03:7b:59:45:ff:9d:32:2c:81:59:a4:d0:a5:a9:98:12:76:31:
6f:7d:fe:43:5f:d2:0c:fe:c7:06:4f:31:f9:fd:77:30:dc:5e:
32:27:15:1b:60:ab:8c:6a:29:c4:d0:72:7b:d1:1a:55:d4:1d:
ab:6c:1f:20:75:59:0d:2f:65:a6:ed:74:9e:a2:54:7c:07:b4:
06:de:ce:9d:43:c6:8c:bc:5a:19:ea:4d:ce:04:9b:fa:b4:eb:
97:fa:0f:62:d9:c4:58:80:74:96:fa:dc:45:b8:15:82:84:bb:
a7:e9:e3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:43 2024 by rpki-client on console-ams.rpki-client.org