Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/CoIYG6zfNTOGd3FTbofO_O8rXIk.roa
File: CoIYG6zfNTOGd3FTbofO_O8rXIk.roa (raw, json)
Hash identifier: tdaT8G4ErbZRYgyfodh3urDK3ivMfTM7saZAeNQtKLQ=
Subject key identifier: 0A:82:18:1B:AC:DF:35:33:86:77:71:53:6E:87:CE:FC:EF:2B:5C:89
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01869E494CA4ADF3BD8C2862C782E1FCF7CA
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/CoIYG6zfNTOGd3FTbofO_O8rXIk.roa
Signing time: Wed 01 Mar 2023 17:47:29 +0000
ROA not before: Wed 01 Mar 2023 17:47:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203236
IP address blocks: 2a0a:280:1500::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:49:4c:a4:ad:f3:bd:8c:28:62:c7:82:e1:fc:f7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Mar 1 17:47:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a82181bacdf3533867771536e87cefcef2b5c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:27:f0:72:1e:90:fe:e2:d4:03:40:5a:62:
c6:ad:a7:44:91:72:4c:81:53:fb:2b:64:35:87:9d:
cd:48:5a:60:2b:8a:2c:d9:b1:3a:04:e5:8d:8f:81:
45:19:de:2b:33:25:e5:e6:33:62:00:93:b7:cd:f9:
8a:cd:39:37:95:36:44:e3:f3:0d:a9:fa:e2:a2:87:
63:01:7e:b2:ce:e4:7a:7f:46:aa:21:ab:80:5e:17:
4b:c7:5b:d4:34:82:4b:20:96:6e:d3:cd:d4:a7:e6:
9f:26:2e:4a:58:9f:d6:4b:55:db:0c:ab:20:2d:5e:
3d:3c:9d:99:24:be:74:aa:b3:fb:ef:fc:11:95:e1:
93:42:2e:dd:bc:0c:8a:9e:57:47:66:c0:58:ba:72:
35:ca:08:95:8c:5b:9c:56:08:8b:67:10:3b:c1:c9:
f0:22:44:69:f4:d1:e0:d9:c8:cc:1c:d9:f4:5e:71:
34:7c:c7:44:8e:a2:ba:03:40:bf:e6:32:e9:22:7c:
a4:fc:94:56:a1:69:c4:98:3a:75:62:4a:c8:41:65:
1d:0e:98:cd:3c:bb:23:d1:83:9e:79:ec:af:8b:4b:
6e:82:e4:56:79:b8:04:60:99:5f:67:25:0d:e5:da:
fa:62:0e:fb:ea:63:8b:67:d7:cd:79:1c:10:4d:9b:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:82:18:1B:AC:DF:35:33:86:77:71:53:6E:87:CE:FC:EF:2B:5C:89
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/CoIYG6zfNTOGd3FTbofO_O8rXIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1500::/40
Signature Algorithm: sha256WithRSAEncryption
32:a0:76:ad:58:22:76:99:69:b7:bb:16:5a:9e:e5:80:75:42:
59:8e:c3:df:f1:9f:5b:71:f8:98:9b:f9:a7:20:ce:92:80:80:
cc:a7:0f:80:95:05:df:0f:80:1e:28:90:c7:d2:6e:2c:ea:2f:
1f:ea:f9:63:fe:10:2a:81:e7:8b:43:4d:a3:0c:b7:e8:b4:3c:
99:ea:c5:47:36:6d:b1:5a:9e:5b:d7:ad:07:c9:08:b1:93:74:
c7:a8:b5:fb:d5:bf:c1:c3:35:ea:1f:ec:3f:f9:c8:9e:47:82:
50:ca:11:55:50:5e:ae:e9:c3:ee:24:08:68:99:35:16:10:6d:
62:89:45:bb:39:c5:88:37:16:6d:08:2a:57:d1:c0:ac:5e:4f:
6a:c7:3c:b0:c6:04:47:a9:ba:6a:89:3a:20:56:3c:39:8a:f7:
05:1f:54:83:bc:a5:79:3a:f4:93:80:a4:b5:81:0b:48:e1:2d:
8f:ca:f2:74:aa:61:41:35:24:af:5d:09:0a:62:bc:43:48:2d:
99:eb:9a:99:55:d5:3e:48:25:cb:17:75:d3:6e:ef:a5:55:fb:
41:45:ce:3b:5c:d7:ef:14:44:c6:a8:2c:20:be:f5:af:12:18:
af:91:58:a9:46:20:8e:b6:db:bc:e9:b0:66:8d:86:05:94:59:
ec:80:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:22 2024 by rpki-client on console-fra.rpki-client.org