Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1pdNp6mIp6MsqxPCOHjAwjDWmQQ.roa
File: 1pdNp6mIp6MsqxPCOHjAwjDWmQQ.roa (raw, json)
Hash identifier: yJKllkwHWBTKqz7gCetf85Jgbe0j4a9AQULY9Bq1708=
Subject key identifier: D6:97:4D:A7:A9:88:A7:A3:2C:AB:13:C2:38:78:C0:C2:30:D6:99:04
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA295EB2485E04CAE8E8E5699B0C78B1
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1pdNp6mIp6MsqxPCOHjAwjDWmQQ.roa
Signing time: Tue 02 Jan 2024 12:32:37 +0000
ROA not before: Tue 02 Jan 2024 12:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207071
IP address blocks: 2a0e:8f02:f029::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 25 Jan 2024 15:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:5e:b2:48:5e:04:ca:e8:e8:e5:69:9b:0c:78:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6974da7a988a7a32cab13c23878c0c230d69904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:96:fc:e5:32:be:ed:e1:38:34:9c:1f:1a:
f3:c7:b1:b3:64:7a:45:e3:e5:b8:77:5c:14:e7:d2:
ca:e9:30:3c:1e:27:81:48:0b:42:9a:ac:eb:aa:4a:
96:09:41:cd:a0:cf:9a:70:6d:6c:8c:d7:ef:a4:0d:
54:e4:d1:5c:3f:72:a5:9f:71:af:e6:be:f1:81:9f:
b7:b6:a3:c0:06:bf:d1:20:36:76:f6:ef:27:21:8a:
cc:7a:5a:68:80:44:a5:53:7c:16:8f:5e:be:d9:38:
c5:2e:69:cb:a9:1b:08:1a:ab:22:df:a2:ab:03:7c:
56:f8:3d:26:ca:84:4d:e5:ba:8d:62:c1:34:bc:f5:
2f:dc:d4:90:f4:4c:8d:74:d7:10:ca:0a:cf:55:22:
a2:26:27:54:ec:ab:dc:b6:f0:4e:d6:a4:d6:01:f2:
4f:28:fb:e9:70:d0:34:5d:25:38:cb:5e:bb:31:bb:
94:c7:da:b9:90:98:64:87:78:e4:c9:f7:1b:ca:35:
48:16:03:09:32:40:a5:d6:3e:71:6d:54:37:d0:cf:
9e:c5:3c:70:bb:d2:e3:91:96:e5:71:e6:1d:39:2c:
7d:9d:f1:3b:a1:bc:e5:0b:4f:9f:b7:4f:71:ba:c8:
29:32:51:58:9f:49:3b:1b:e1:7e:c0:2b:f2:5e:53:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:97:4D:A7:A9:88:A7:A3:2C:AB:13:C2:38:78:C0:C2:30:D6:99:04
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1pdNp6mIp6MsqxPCOHjAwjDWmQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f029::/48
Signature Algorithm: sha256WithRSAEncryption
8d:a5:ec:10:95:dd:03:1b:af:f3:91:9c:6e:2e:eb:9c:b3:10:
25:cc:7f:25:47:22:2c:f9:b1:1a:ef:10:29:0b:e8:cd:87:5d:
d2:8e:94:1c:cc:1c:70:3a:19:c2:c7:78:a1:e9:02:14:c9:34:
52:bb:2a:60:5b:26:e7:a2:d1:04:03:ec:c1:17:a1:10:fb:fc:
f1:7b:88:1e:91:ad:ef:b7:0b:15:b1:1b:48:73:18:f6:2a:5d:
61:ab:cf:9b:e5:70:1e:45:7c:e2:ff:67:40:92:1b:ac:9e:54:
bd:a8:88:85:6c:12:de:8d:3d:e7:27:be:6a:83:a0:38:39:b1:
2a:20:2e:fd:99:67:99:13:c9:44:21:46:22:a4:71:5d:1f:af:
10:34:17:b4:7c:3f:d8:f8:8a:6f:7f:91:48:5d:c2:d6:cd:05:
92:2d:d1:d7:96:9e:de:0c:1a:ac:7e:f7:86:65:5e:0c:ba:d7:
b1:5c:ab:3f:6e:67:38:11:59:2f:61:92:f3:e8:d3:8b:13:88:
82:b2:9c:d7:c4:c0:a9:9d:76:5a:4d:d4:e1:a2:1c:88:13:b8:
94:7e:46:56:39:f3:3c:c4:68:96:a7:75:a2:5f:f1:4d:d8:06:
86:d6:76:f6:9e:43:e1:f7:ed:5d:7d:e3:b2:46:cf:c7:87:4e:
4e:a7:c1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 18:43:16 2024 by rpki-client on console-ams.rpki-client.org