Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/AbCbjtU7DvajCheaE39bN4A9E1w.roa
File: AbCbjtU7DvajCheaE39bN4A9E1w.roa (raw, json)
Hash identifier: z8GntQpRngsS676yQYSoHRcPuApS2cnCQ5Dl6FLCM/Q=
Subject key identifier: 01:B0:9B:8E:D5:3B:0E:F6:A3:0A:17:9A:13:7F:5B:37:80:3D:13:5C
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42F629719BF155C6740F7EFAA48A12
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/AbCbjtU7DvajCheaE39bN4A9E1w.roa
Signing time: Sun 01 Jan 2023 21:35:37 +0000
ROA not before: Sun 01 Jan 2023 21:35:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213248
IP address blocks: 2a0e:8f02:2160::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:f6:29:71:9b:f1:55:c6:74:0f:7e:fa:a4:8a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01b09b8ed53b0ef6a30a179a137f5b37803d135c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:a1:23:29:a6:46:3a:17:ea:86:5a:5d:cc:
f8:53:38:17:5d:bf:f0:e8:43:10:82:36:db:c1:4e:
61:95:94:c6:15:c8:ee:50:6d:1e:cb:80:90:d1:21:
3a:21:1c:29:4a:92:d2:ca:b6:83:7c:75:71:f4:8a:
05:64:65:ff:fe:50:1c:80:55:97:61:74:34:3b:85:
6a:66:f0:cf:ea:d1:5b:22:02:64:9d:ba:61:86:bc:
56:e2:13:8b:39:e5:b5:90:0f:c7:58:3b:92:32:4b:
7d:a7:c4:8e:1b:59:c6:93:ca:dc:e5:07:ac:a1:04:
80:44:fd:82:6e:ce:64:92:05:54:43:94:e5:01:41:
90:6d:08:1b:26:38:07:d5:b2:88:6e:a4:d9:19:e3:
8f:65:9e:80:53:d1:e0:41:78:2d:5e:06:94:37:0f:
4d:81:99:82:9a:56:73:dc:4a:81:14:47:db:e6:01:
46:83:90:0b:6e:d8:09:46:5b:a5:52:19:1a:24:a7:
44:b7:75:ff:a8:e2:e0:b3:29:ee:eb:91:b0:7f:cd:
67:32:24:39:5e:6c:92:43:81:4f:b5:f6:76:f2:f1:
9f:e5:62:c9:eb:4e:c7:d6:57:80:7e:71:17:77:73:
c1:43:a0:ce:5b:04:80:91:75:98:57:37:c4:d1:30:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:9B:8E:D5:3B:0E:F6:A3:0A:17:9A:13:7F:5B:37:80:3D:13:5C
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/AbCbjtU7DvajCheaE39bN4A9E1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2160::/44
Signature Algorithm: sha256WithRSAEncryption
82:a8:bc:fa:74:be:32:a4:7b:ee:9d:3e:01:06:b2:33:dd:4d:
31:43:86:5e:d2:10:cf:ed:46:b4:c5:87:b3:d7:10:48:0a:f8:
bb:83:de:82:6b:31:ee:ba:c8:0b:be:ce:32:b0:c1:5b:4f:32:
07:6b:a5:bd:b6:df:df:90:8e:93:58:fb:b7:89:03:d9:5b:1b:
a1:af:02:84:62:5a:91:e1:b8:1a:bd:7d:9d:60:f5:fd:d0:94:
3a:c3:ec:9a:41:49:91:9b:c3:86:a8:67:50:dc:da:72:45:bf:
da:67:aa:2c:96:32:83:30:ef:bd:aa:8a:1e:5f:88:f1:09:7f:
49:c6:ee:01:57:45:ee:f9:79:03:34:01:b0:8c:d8:3b:6c:91:
78:b2:e5:35:ec:4e:35:7f:2d:16:6c:b0:25:b2:30:65:05:f1:
44:1b:74:91:db:83:9f:42:1e:0e:3e:ca:20:37:d1:43:40:a1:
47:97:80:f2:08:04:7b:49:07:ea:e8:d1:04:12:d0:5e:aa:cc:
fb:f7:9b:a4:8d:90:c9:06:70:50:fa:a8:67:06:d9:ed:05:4c:
e5:b9:c3:31:4b:73:82:c8:23:7c:bd:e9:56:20:2d:02:de:28:
47:6a:ce:d7:5d:de:d8:c4:30:ac:8e:25:12:b0:bc:5b:9c:9d:
e3:45:87:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:35 2024 by rpki-client on console-ams.rpki-client.org