Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/cWcxAelfzSwjJU0b6nSote5q8ck.roa
File: cWcxAelfzSwjJU0b6nSote5q8ck.roa (raw, json)
Hash identifier: 3AkIhMPCSbJ5e7Jl0rZlLqqdlldRsG5wsYt8zh7uAb0=
Subject key identifier: 71:67:31:01:E9:5F:CD:2C:23:25:4D:1B:EA:74:A8:B5:EE:6A:F1:C9
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 0186CAECAB100F75FBC9F2914809AEF24CC6
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/cWcxAelfzSwjJU0b6nSote5q8ck.roa
Signing time: Fri 10 Mar 2023 09:49:13 +0000
ROA not before: Fri 10 Mar 2023 09:49:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199514
IP address blocks: 2a0a:280:b000::/36 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:ec:ab:10:0f:75:fb:c9:f2:91:48:09:ae:f2:4c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Mar 10 09:49:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71673101e95fcd2c23254d1bea74a8b5ee6af1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:37:9f:0c:6f:bb:67:1d:dc:ed:ae:60:12:f4:
7e:bc:f2:ee:9a:ab:9f:3e:02:07:00:d4:27:ba:0c:
06:25:18:b3:5f:ff:03:59:c9:a4:b5:c1:02:9e:37:
35:0b:ad:3a:bf:e5:1a:3d:3c:fd:4b:cf:06:e1:0b:
3f:32:3c:4f:24:47:43:61:95:25:99:ce:8f:10:4e:
ad:43:b0:a0:76:4c:8e:9a:4e:0e:16:3f:30:fe:ef:
43:08:3c:a7:b1:46:df:e4:d7:a3:c9:e9:a4:b1:fd:
da:0f:bf:58:41:2b:97:aa:f3:f6:92:72:a9:3c:35:
55:9a:f4:64:c1:c3:d9:04:0d:ed:af:f9:52:b8:1c:
21:2a:3d:0f:d1:ef:5f:08:81:90:66:02:ba:d6:ea:
cc:18:91:4b:9b:8d:fa:5e:e9:44:a3:b4:e5:7e:c8:
5f:51:42:4e:20:c3:23:bd:c5:9f:2b:aa:2d:1a:98:
be:01:01:c9:47:be:09:f3:41:62:43:47:d5:52:aa:
e4:a7:7e:c7:9e:d8:5a:d9:26:ac:fc:0e:8f:41:c1:
d8:23:3d:1a:e5:00:ac:0a:95:57:19:2c:2a:e4:a3:
cf:95:fc:75:46:0a:9c:b0:58:21:8f:1a:a7:20:a6:
a7:34:6a:6b:7e:2e:46:ea:ba:b3:39:81:10:f1:9b:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:67:31:01:E9:5F:CD:2C:23:25:4D:1B:EA:74:A8:B5:EE:6A:F1:C9
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/cWcxAelfzSwjJU0b6nSote5q8ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:b000::/36
Signature Algorithm: sha256WithRSAEncryption
85:e6:90:4b:4d:7f:92:4f:05:46:c4:32:c6:ee:4f:b6:8b:dc:
54:f3:1f:47:10:6f:57:0c:d1:7d:47:50:cf:a9:5d:17:bd:33:
21:c8:e9:56:89:c5:9d:5d:3f:e7:17:21:ab:18:4b:10:a1:70:
fd:42:86:bb:33:c4:7b:09:e3:e5:27:7d:b7:51:4a:c1:9d:ce:
58:12:82:e4:99:9b:33:1f:ef:94:cd:2a:f2:4e:be:53:c5:77:
a6:82:80:03:78:6e:cc:0e:b6:16:9c:82:47:a4:24:21:b8:1b:
ce:fa:69:4a:03:f5:a8:61:0c:04:d0:bd:db:4e:a5:03:a7:33:
07:20:4b:55:0c:85:7a:83:89:9d:1f:3d:c1:76:72:9e:32:45:
f3:60:ab:c9:8a:cb:57:6c:2c:1d:b9:0e:34:70:3f:60:22:4f:
22:05:58:6d:50:55:b8:67:50:8b:2f:1d:3b:bd:b9:ed:db:14:
f8:3d:38:4d:c1:2b:51:f7:22:e6:c0:6b:86:ce:a0:60:85:4e:
fe:f1:9a:56:fb:31:ad:8b:08:ea:58:f5:78:d4:4d:3f:14:b0:
32:5e:f2:92:d3:f2:47:1d:77:d8:07:43:4f:1a:9d:a1:27:42:
18:66:ac:f8:e6:45:7f:42:33:25:13:f2:72:d8:37:b4:d1:52:
a2:39:8e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:06 2024 by rpki-client on console-ams.rpki-client.org