Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/krHYgl6Mq1zX-ilS_tWLk-axktg.roa
File: krHYgl6Mq1zX-ilS_tWLk-axktg.roa (raw, json)
Hash identifier: XHtyB6QLARD/ySJYSwUf1I0i50o713fBq9L4DcPEySM=
Subject key identifier: 92:B1:D8:82:5E:8C:AB:5C:D7:FA:29:52:FE:D5:8B:93:E6:B1:92:D8
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01856CCB0449F724554CEE2A42CAFD00510C
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/krHYgl6Mq1zX-ilS_tWLk-axktg.roa
Signing time: Sun 01 Jan 2023 10:05:22 +0000
ROA not before: Sun 01 Jan 2023 10:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212025
IP address blocks: 2a0d:2406:11ea::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:04:49:f7:24:55:4c:ee:2a:42:ca:fd:00:51:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 1 10:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92b1d8825e8cab5cd7fa2952fed58b93e6b192d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:2f:76:e0:ec:71:7d:cb:94:eb:88:7f:b3:
78:1c:a0:65:9e:d7:39:16:32:31:1b:f5:1e:41:34:
8e:7a:8b:c4:49:2d:2e:fe:48:a7:6f:02:43:3a:7c:
1c:74:06:b4:02:51:4e:c2:fb:71:f5:71:2d:3b:5b:
37:55:53:62:19:e3:07:b2:9c:79:c0:c2:29:93:4c:
37:8e:ff:de:1d:a1:ec:4d:df:1f:35:81:e5:ac:64:
dd:b7:64:f8:8a:dd:d4:b5:52:cd:dc:17:2a:ff:99:
1d:84:64:c2:20:b2:91:04:a0:f4:63:28:1a:e4:5c:
e4:f7:49:a9:a1:42:db:52:7e:29:d0:0e:9f:7e:86:
7b:ce:36:4d:85:a8:70:37:e7:b9:71:3d:e6:d5:63:
2e:6e:eb:92:ff:be:ba:7e:b8:5a:2a:8e:27:10:2e:
e1:6b:1f:3b:25:75:d4:63:26:d9:57:99:47:50:72:
9f:ba:90:f7:24:4b:97:b2:60:ca:38:cf:d5:ad:e0:
0c:a3:5c:36:47:f7:f8:29:ce:7d:95:f5:5a:6a:df:
5b:8d:e6:dc:4c:8b:12:38:c4:64:4c:40:33:95:cd:
0b:74:22:a4:9e:9a:ce:17:b8:42:be:ad:ff:61:d0:
e5:3a:c9:3e:2a:f9:43:9d:6c:c0:e8:c5:33:d0:aa:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B1:D8:82:5E:8C:AB:5C:D7:FA:29:52:FE:D5:8B:93:E6:B1:92:D8
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/krHYgl6Mq1zX-ilS_tWLk-axktg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:11ea::/48
Signature Algorithm: sha256WithRSAEncryption
3d:fc:c7:4c:2c:f1:e5:0d:10:35:dd:50:87:6c:79:4f:b5:1a:
cf:70:87:42:b5:cf:f0:90:d0:40:85:4e:aa:4c:8d:bd:cd:8f:
3f:2a:fc:40:1b:14:9c:04:0c:35:74:e6:85:58:8d:56:d3:89:
9c:d2:e2:f5:4e:06:f3:56:d7:e7:c0:7b:24:8d:51:9d:c9:f8:
7b:83:2e:20:66:e6:77:51:ff:a6:9c:48:9e:13:8f:fc:1e:e0:
c0:63:6e:9b:9c:27:83:74:cf:c1:5d:49:03:82:db:ad:f7:cd:
bd:7e:25:81:22:de:cd:7d:56:3d:dc:95:4c:c8:1f:8b:5e:0e:
16:c7:37:32:e3:b2:37:1e:cf:b2:39:d2:dc:6c:3c:e6:61:d5:
1c:9c:96:78:0c:d2:ac:f7:29:40:c1:26:63:d3:2d:05:59:66:
74:1e:83:04:81:da:17:f1:a1:64:26:32:2b:75:9c:a2:2f:d7:
35:9e:b8:67:ce:74:48:42:b8:2c:39:47:c6:0a:2a:5a:c2:3c:
a2:fe:d9:e0:35:57:a1:45:98:09:ce:57:ce:dc:ff:e9:e1:48:
61:b6:c7:3f:ff:e5:ec:f9:2e:f7:72:3c:e5:3f:d9:e2:cf:4a:
41:9a:a8:a3:b8:59:32:c3:ba:90:10:2f:16:aa:41:9c:30:ff:
d7:c5:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:00 2024 by rpki-client on console-ams.rpki-client.org