Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/i0dthPvDJXque7dHosybDF_s5b4.roa
File: i0dthPvDJXque7dHosybDF_s5b4.roa (raw, json)
Hash identifier: WnnfcqUsV1JhDNehwA62CKj7RPKIs/p1Qv9u9Mqfa0g=
Subject key identifier: 8B:47:6D:84:FB:C3:25:7A:AE:7B:B7:47:A2:CC:9B:0C:5F:EC:E5:BE
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 018570FB9924144DD4E0838A93DB680E24CB
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/i0dthPvDJXque7dHosybDF_s5b4.roa
Signing time: Mon 02 Jan 2023 05:36:54 +0000
ROA not before: Mon 02 Jan 2023 05:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211992
IP address blocks: 2001:67c:aec::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:99:24:14:4d:d4:e0:83:8a:93:db:68:0e:24:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Jan 2 05:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b476d84fbc3257aae7bb747a2cc9b0c5fece5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:ed:e4:83:0a:3f:3a:46:33:d2:1b:28:37:
a8:ed:4f:49:4a:1d:dc:53:50:33:35:77:fc:1a:64:
1b:80:db:38:d6:a9:35:29:2a:91:70:9a:56:a0:a0:
45:d9:d5:30:4c:f1:f7:a5:92:56:3d:31:64:1c:45:
2d:58:2a:39:41:3f:d7:74:09:f3:0f:1a:e0:2d:35:
f3:00:db:cb:9d:4a:75:eb:48:68:ba:06:50:0c:97:
ea:4c:99:62:2b:a0:e1:a2:39:7b:15:12:35:bc:89:
81:79:d2:8f:49:63:2d:38:85:f4:33:29:09:0a:76:
86:fd:42:56:6f:dd:a3:63:6f:b4:80:8f:af:c6:e7:
13:61:6d:71:20:b1:18:61:e5:31:a1:d7:15:af:de:
9a:d0:c5:11:b4:8e:0d:35:66:2b:cd:f2:78:23:7e:
a6:19:3d:86:33:fb:36:56:4a:5b:e0:6c:46:d0:92:
62:a1:6b:f4:59:b4:0d:60:de:44:d3:89:10:ab:6a:
cc:f1:b8:52:6a:58:fb:11:16:cc:5f:96:90:1d:c1:
22:86:51:f2:b6:76:e3:e9:45:c6:bf:c6:de:4c:b5:
7f:dc:92:dc:fc:48:9d:a0:7e:34:0c:c7:02:4c:50:
18:5c:86:f0:6e:55:02:80:a7:db:ed:48:02:5b:1e:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:6D:84:FB:C3:25:7A:AE:7B:B7:47:A2:CC:9B:0C:5F:EC:E5:BE
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/i0dthPvDJXque7dHosybDF_s5b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:aec::/48
Signature Algorithm: sha256WithRSAEncryption
a8:64:6c:4c:b8:63:ec:86:cf:c6:1d:05:ab:24:43:96:42:31:
74:3e:f4:85:d7:9e:47:0f:e3:84:75:13:3b:8e:19:5d:18:df:
cf:c5:9b:cc:16:cc:8e:da:f6:d5:ef:93:91:c9:24:a3:e9:75:
e9:30:c7:cc:40:20:31:43:e0:19:8b:ed:f4:25:bb:a4:da:5b:
03:66:ca:14:c3:c4:cf:fc:af:9a:4a:5f:3f:f3:1f:ce:00:04:
5b:8d:a9:9e:33:3e:0d:11:52:a5:7d:1e:65:84:b0:72:33:ba:
f2:48:59:81:5f:09:0d:ea:e7:05:fe:35:f5:2d:40:8e:88:2e:
52:4d:db:87:34:d5:7f:a5:d2:08:3c:8e:3a:98:ab:0e:8c:2a:
63:4d:aa:91:0e:92:3a:25:f6:d0:05:c9:f3:10:a0:db:27:9d:
df:15:20:e2:d8:67:de:e8:c3:e4:21:02:4f:ff:5e:ae:a0:c5:
fd:ef:3a:2d:ff:58:0b:2f:fc:a0:c3:f2:e2:2d:b8:e8:ce:98:
3f:74:99:ec:4c:5c:df:18:52:16:f1:1e:fc:1b:cf:96:98:6f:
23:92:87:c2:3a:d0:7a:44:7b:b3:a8:dc:da:6a:cb:b0:16:b9:
ec:55:64:0a:20:28:d6:92:4c:46:c3:c0:c3:b9:9c:7d:6c:be:
ad:bf:b4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:53 2024 by rpki-client on console-ams.rpki-client.org