Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/8VnNT1E4zPV78K6fCQ0jbAJayw4.roa
File: 8VnNT1E4zPV78K6fCQ0jbAJayw4.roa (raw, json)
Hash identifier: uuosjExd2PNHpoQy3pmVjOsKNg7HdZNvL/BVt/JktWY=
Subject key identifier: F1:59:CD:4F:51:38:CC:F5:7B:F0:AE:9F:09:0D:23:6C:02:5A:CB:0E
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018BAE419BBCE88A1C5CFECB24C5A4B8E9CD
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/8VnNT1E4zPV78K6fCQ0jbAJayw4.roa
Signing time: Wed 08 Nov 2023 09:26:57 +0000
ROA not before: Wed 08 Nov 2023 09:26:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207314
IP address blocks: 2a0e:8f02:2230::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:41:9b:bc:e8:8a:1c:5c:fe:cb:24:c5:a4:b8:e9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Nov 8 09:26:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f159cd4f5138ccf57bf0ae9f090d236c025acb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:8d:21:93:44:00:c1:11:ab:7a:4a:10:6b:
58:e3:8b:45:94:f2:1f:7a:38:88:cb:e3:ef:e7:67:
ba:71:c8:eb:7e:2f:dc:29:6a:93:03:54:52:b5:53:
bc:eb:45:7e:50:3e:d2:6d:b6:ff:4d:da:c6:4e:08:
6e:1b:bd:0e:5c:b6:6f:15:2d:20:d9:b3:b9:29:d3:
5d:0e:b6:95:3e:44:2c:c3:29:cb:af:1c:f2:aa:1a:
9a:af:9d:b0:a0:9c:5d:92:54:f9:3a:2f:85:75:85:
5e:58:48:b5:95:cf:b4:3a:61:c5:c7:5f:3e:26:0f:
a2:0e:2f:a6:83:01:a1:15:03:27:77:ea:cf:8e:8b:
c6:71:16:d4:2d:1c:56:cd:b0:7d:c6:53:dd:f5:a1:
2d:99:8a:5f:a5:f4:30:98:75:7c:8d:f9:64:a3:da:
bf:bd:79:26:e9:3d:17:ba:2f:87:22:29:4c:d7:13:
1d:73:81:55:5a:e4:ff:09:32:40:aa:68:bf:f8:ab:
18:76:06:32:e3:71:3e:43:bc:eb:67:96:be:76:a1:
3b:36:93:69:4b:bc:5d:99:1b:32:0c:4c:63:0c:a2:
eb:c1:56:7b:86:3c:f8:80:5c:5e:75:01:4b:04:ba:
e8:a6:4f:4f:77:b1:f6:17:0c:77:2b:25:f2:1c:1d:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:59:CD:4F:51:38:CC:F5:7B:F0:AE:9F:09:0D:23:6C:02:5A:CB:0E
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/8VnNT1E4zPV78K6fCQ0jbAJayw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2230::/44
Signature Algorithm: sha256WithRSAEncryption
52:88:6d:c0:ba:ae:2a:13:44:0b:bd:76:c7:ee:e0:3e:b8:4f:
cb:49:b7:e6:a3:03:b8:ed:4f:79:9a:c2:75:39:29:0b:25:13:
4e:e3:a2:f8:f7:b6:08:ba:ba:a2:08:e4:bd:00:8c:4a:4f:a7:
b0:51:d7:ba:d1:ad:76:e2:ae:d3:3c:a2:80:03:36:fe:87:2f:
ca:86:b2:71:20:b6:a0:71:ce:36:3e:0c:58:10:7b:8d:8d:74:
3b:1b:de:c0:d5:78:c8:94:a4:bc:9c:74:93:08:88:b5:03:26:
86:6d:8b:9f:bc:59:d5:60:0d:7b:a0:52:f0:f7:37:a2:43:00:
79:5a:00:6a:2e:71:b7:e7:60:40:ca:c4:9d:aa:0c:e9:c6:2b:
da:9c:53:10:cf:27:09:9b:44:dd:08:09:ed:1a:7a:20:dd:c7:
7a:e7:e5:d5:61:4b:d6:a5:b9:1a:fd:44:ea:92:ec:6a:b0:fc:
5d:a6:4f:0f:7d:5a:6f:d9:81:3b:f6:06:62:58:c4:20:cd:f4:
69:65:01:a8:7b:b0:d9:7d:d3:e1:91:b5:a9:b8:0d:52:81:5f:
3c:d3:19:be:9b:f1:c1:cc:3a:40:d8:65:13:07:ce:80:7b:b0:
8c:9f:65:b2:46:35:d3:f1:68:b5:94:a7:c1:91:11:52:cf:34:
92:a9:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:35 2024 by rpki-client on console-ams.rpki-client.org