Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/4qERJGIlOZo5mUD7HGagW0SgPqw.roa
File: 4qERJGIlOZo5mUD7HGagW0SgPqw.roa (raw, json)
Hash identifier: 5YCw765FJRtvICGF1zT+eMo1YffLL2lQ3wsVZLFl21g=
Subject key identifier: E2:A1:11:24:62:25:39:9A:39:99:40:FB:1C:66:A0:5B:44:A0:3E:AC
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018A286591E4D3AB4473361888407578C7E1
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/4qERJGIlOZo5mUD7HGagW0SgPqw.roa
Signing time: Thu 24 Aug 2023 16:34:19 +0000
ROA not before: Thu 24 Aug 2023 16:34:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216412
IP address blocks: 2a0a:280:b000::/36 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:65:91:e4:d3:ab:44:73:36:18:88:40:75:78:c7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Aug 24 16:34:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2a111246225399a399940fb1c66a05b44a03eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:2f:34:5d:3a:3e:db:03:8d:e1:e9:60:83:
3d:27:ab:a1:8e:41:d5:7a:aa:33:e7:ce:83:9d:1f:
26:b2:82:2e:0e:83:fa:01:16:80:6f:15:20:ca:30:
11:b4:53:a4:e4:66:3a:79:4f:9d:cc:55:5a:45:e7:
a9:b0:5b:e4:85:0b:6d:7a:c1:13:dc:84:67:58:89:
aa:39:b7:a7:82:6b:f6:97:a8:e3:ba:47:3f:b3:98:
d9:94:dc:83:b4:02:19:66:e6:1b:79:ca:73:d3:fb:
31:24:b8:a3:95:a3:ec:aa:16:71:a1:f2:f0:17:8e:
35:82:c7:7c:3f:13:95:2f:3f:cf:b9:c0:3f:ab:60:
ee:0c:97:bd:33:24:c2:4e:bd:ec:05:04:48:d3:a1:
d1:fe:21:8e:25:93:ac:4d:d6:0e:71:32:74:c0:63:
86:e5:45:51:58:ae:bc:c7:f5:7a:7b:b5:15:69:8e:
36:4a:93:5f:d2:13:1f:58:47:7d:42:c8:1c:0c:82:
98:8f:75:a5:32:f0:48:10:5a:cf:b8:98:60:cf:5e:
92:60:0a:f5:04:95:1f:8c:91:46:3d:c0:7c:9e:2d:
0f:a8:a5:1e:5a:c4:48:5c:6c:15:c9:7d:1c:46:60:
a6:f6:65:6e:56:19:c2:49:c7:65:6f:1c:d7:f9:8f:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A1:11:24:62:25:39:9A:39:99:40:FB:1C:66:A0:5B:44:A0:3E:AC
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/4qERJGIlOZo5mUD7HGagW0SgPqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:b000::/36
Signature Algorithm: sha256WithRSAEncryption
15:27:87:17:41:f7:d8:96:15:2c:14:a3:08:b7:e0:31:5e:fe:
e4:54:d4:3d:1b:1c:02:25:a9:d6:da:23:69:f8:c8:fc:34:0a:
76:49:39:e5:fe:d1:29:66:3d:fc:54:74:fe:74:81:e0:d6:d5:
66:ae:12:0c:2e:d7:ae:f0:6c:2a:6e:d2:0a:75:60:32:ec:66:
69:52:19:78:2e:6e:df:ae:21:92:55:27:89:0e:1c:c3:7e:b7:
6d:36:f1:56:a9:7e:14:91:76:ea:1b:8b:13:a6:cc:6f:38:96:
84:18:9b:af:f7:ba:99:7b:32:77:c7:52:c2:dc:2a:08:d0:bc:
e8:5d:c6:77:22:56:34:8a:30:9a:16:f8:ef:df:05:d2:26:8d:
e2:e0:09:ca:f4:f2:ac:ce:85:4c:a7:bf:34:20:86:df:91:04:
24:97:83:e1:5d:cc:8f:82:9e:bd:b4:a6:e7:48:38:50:6b:e1:
2b:ae:f9:f0:73:a2:f8:03:20:e3:01:11:74:54:85:98:37:4e:
14:a4:d9:1d:9a:64:1e:cd:9a:d2:de:85:5c:bc:73:c5:35:c5:
d7:61:15:b1:3f:71:45:65:36:f8:9e:3a:2a:3e:25:3d:1a:95:
50:da:46:00:45:65:3d:52:27:26:70:cf:0d:12:e8:19:a8:02:
d7:15:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:06 2024 by rpki-client on console-ams.rpki-client.org