Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PTk-KSwzqFfgNs11Mgsa3UOQrA4.roa
File: PTk-KSwzqFfgNs11Mgsa3UOQrA4.roa (raw, json)
Hash identifier: C4khIPqIfJIdOQveRdDPn9ZiVhCqYgRu1+XPsOCm7dM=
Subject key identifier: 3D:39:3E:29:2C:33:A8:57:E0:36:CD:75:32:0B:1A:DD:43:90:AC:0E
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 01857227FA9B2070051EB3B1B3AF501C224B
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PTk-KSwzqFfgNs11Mgsa3UOQrA4.roa
Signing time: Mon 02 Jan 2023 11:05:00 +0000
ROA not before: Mon 02 Jan 2023 11:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210381
IP address blocks: 2a10:4646:50::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 24 Aug 2023 16:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:fa:9b:20:70:05:1e:b3:b1:b3:af:50:1c:22:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 11:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d393e292c33a857e036cd75320b1add4390ac0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:e3:c8:e6:65:a8:2c:a0:58:05:89:ea:dd:
c5:27:eb:e4:7f:35:11:a0:71:c1:ef:74:e2:4a:ae:
97:86:70:27:2a:47:0e:a3:25:3f:9e:2b:63:00:3a:
c0:29:d2:c0:30:59:39:37:d3:c5:dc:21:43:21:93:
c6:e4:8d:b0:ba:26:44:a9:7b:22:93:bc:1e:84:fc:
1b:a8:a7:e9:02:f4:8f:b2:5b:20:32:83:6a:85:ab:
46:62:76:4b:6f:e1:40:e8:87:29:89:4e:1d:83:34:
19:2d:86:9d:ee:67:53:1a:06:89:38:11:3e:38:65:
89:15:bf:13:9f:0d:db:48:48:3a:e1:b1:89:18:0f:
90:60:6d:35:e4:59:45:59:df:0a:ef:87:bd:27:0a:
60:8c:73:84:92:6f:02:d2:3b:7f:1c:b4:9a:e2:b8:
24:9b:83:27:2c:1c:65:b2:36:58:fd:9c:1e:d5:41:
56:e5:e5:88:13:7b:7d:a1:c5:6b:02:8d:ce:c3:72:
a8:94:c3:5f:07:4c:22:42:87:5e:b5:9a:91:f5:64:
0f:36:fb:bb:fb:65:d3:c5:6d:4b:68:10:a7:fa:0f:
f2:aa:ec:25:ed:d4:c4:74:d3:3b:6f:2a:0b:37:09:
dc:21:77:1b:ac:28:50:c2:24:82:d0:44:9e:1e:4f:
2a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:39:3E:29:2C:33:A8:57:E0:36:CD:75:32:0B:1A:DD:43:90:AC:0E
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PTk-KSwzqFfgNs11Mgsa3UOQrA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:50::/44
Signature Algorithm: sha256WithRSAEncryption
6d:56:f5:4f:ab:e3:27:01:d0:b6:86:93:38:78:f8:e0:05:71:
09:cf:89:54:93:9b:6e:eb:38:0f:81:86:43:c5:19:dc:21:21:
54:f0:8c:65:9a:9a:c5:aa:8d:e6:b9:95:82:24:f0:ff:b4:9d:
57:53:c2:cd:c3:d7:f0:66:0f:e3:bb:21:7a:12:84:e7:8d:69:
de:0e:a2:91:e7:31:2d:29:10:72:e9:82:6f:b3:f1:8e:04:2e:
d0:ea:bb:48:5f:7c:e9:14:80:4b:70:ec:2a:6a:49:31:39:39:
c7:14:21:c1:0f:79:96:5d:37:4f:7c:36:a4:02:4c:6c:3b:30:
8b:f8:7d:df:2d:e1:0f:aa:62:75:12:60:67:9f:f7:c4:8b:35:
6a:13:0f:9c:61:4b:ea:bd:e1:60:1a:0c:4c:9b:46:cf:fd:ef:
f5:29:c0:f9:58:bb:5c:c9:19:63:d1:6c:82:15:10:08:f8:d2:
a4:5a:64:d3:6e:4f:17:a6:26:3e:c6:4d:ed:9f:86:8f:5e:44:
65:90:3e:71:d8:08:f3:ea:a9:32:ba:b4:a0:c2:0d:a4:1b:4a:
0b:bd:e3:3f:17:15:79:e8:aa:19:0b:fc:ad:11:f5:1e:ee:27:
5c:0a:ab:f5:25:98:f9:c8:1e:49:01:d9:11:2f:49:bf:a2:74:
27:c4:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:43 2024 by rpki-client on console-ams.rpki-client.org