Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/4vaDoAIfXkd36PYCBO6ePzdezIE.roa
File: 4vaDoAIfXkd36PYCBO6ePzdezIE.roa (raw, json)
Hash identifier: DiHWybb66escNawmoJZfLtvd/tDmA2fStbr8rsqZfcc=
Subject key identifier: E2:F6:83:A0:02:1F:5E:47:77:E8:F6:02:04:EE:9E:3F:37:5E:CC:81
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01856CCB035DB462AB7946B77A3D4B5DEE64
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/4vaDoAIfXkd36PYCBO6ePzdezIE.roa
Signing time: Sun 01 Jan 2023 10:05:21 +0000
ROA not before: Sun 01 Jan 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202418
IP address blocks: 2a0d:2406:d00::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:03:5d:b4:62:ab:79:46:b7:7a:3d:4b:5d:ee:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 1 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2f683a0021f5e4777e8f60204ee9e3f375ecc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:1a:79:a4:09:2f:92:77:57:c1:ac:34:55:
2e:ed:b5:f8:d2:dc:49:c1:43:ce:2c:f4:8e:43:ba:
59:32:8e:e7:80:1f:53:99:50:3c:eb:d2:51:76:d4:
d6:43:c2:c4:01:27:9b:0c:67:cc:7a:a1:9f:95:83:
95:de:84:12:24:18:da:9d:0e:cd:f6:77:b3:36:46:
1e:bb:84:41:74:22:5e:fc:67:68:eb:ce:c6:22:b3:
d0:a5:a6:eb:12:9a:f3:b4:68:34:53:51:5b:4c:6f:
26:49:02:be:0c:25:c1:23:9e:00:f2:74:fb:45:ab:
51:7d:2a:9e:cc:0f:d8:3e:a2:cb:93:54:f5:a4:95:
07:ce:df:44:90:f9:05:ee:79:65:ca:95:af:e1:5e:
b5:c5:1c:c1:1c:7e:d6:07:ee:13:50:c6:c3:b5:ed:
e6:c7:75:8c:b7:b9:3d:89:e3:72:57:8a:f6:0b:e1:
87:1c:75:d7:9c:f3:a4:54:8a:3d:64:15:be:1e:df:
e1:91:49:a2:5c:6f:68:09:9b:5c:06:b2:58:34:85:
18:3a:df:3f:1d:8e:32:eb:7e:88:7c:85:b0:b2:ea:
ab:0b:21:21:ee:f3:ad:0b:96:bd:c7:6a:c3:e5:f1:
68:58:b6:f1:18:16:16:eb:3d:95:7c:42:27:01:c8:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F6:83:A0:02:1F:5E:47:77:E8:F6:02:04:EE:9E:3F:37:5E:CC:81
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/4vaDoAIfXkd36PYCBO6ePzdezIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:d00::/44
Signature Algorithm: sha256WithRSAEncryption
78:c6:bc:eb:bf:0f:06:13:b3:0f:0a:e8:af:2a:dd:33:44:40:
eb:7e:b5:8f:a1:49:3a:95:23:80:b7:4a:dd:17:04:05:91:fa:
41:21:3a:fb:ab:1a:ed:ff:14:dc:86:85:b2:cc:bc:64:b1:8f:
86:3f:42:c3:26:9b:ae:c3:e5:22:c8:17:b9:3d:9b:1c:9f:63:
32:5c:10:24:fd:b2:77:85:3f:dc:5f:2b:4e:2b:45:3f:47:a0:
d6:17:4a:73:b5:c7:21:98:59:19:31:30:cf:62:93:1d:51:3b:
ec:23:e1:72:53:8f:b8:25:72:03:7a:34:9d:c0:5f:41:34:41:
a5:b9:fa:0a:23:cc:99:5f:f3:54:f5:b2:d5:5c:52:f8:64:d1:
d2:a0:8f:16:83:e5:7a:67:3e:13:ad:6a:35:f6:99:92:41:6a:
6d:3c:20:79:01:30:1d:ef:37:9c:06:f5:37:80:b6:d8:80:be:
2b:c8:7b:5f:59:95:e3:f9:a4:6b:6e:df:78:6d:b2:0d:e1:1e:
93:75:6e:d3:b2:a0:91:f3:f8:50:90:bb:d9:59:59:bd:5f:f7:
b4:d9:16:0f:d0:51:c7:9a:e0:db:94:2c:44:ac:9c:58:36:5b:
ae:b7:99:4e:ea:80:da:a3:df:e8:1d:d8:d9:da:49:23:9a:f5:
3b:95:71:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:18 2024 by rpki-client on console-fra.rpki-client.org