Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/6Ev0VnPV5ST1eSqNa1Kbmgg8u-Q.roa
File: 6Ev0VnPV5ST1eSqNa1Kbmgg8u-Q.roa (raw, json)
Hash identifier: Ps8WCXi5NTMM2eTRrKVJUQ5kcXWUXGuepx5xA9/SDaI=
Subject key identifier: E8:4B:F4:56:73:D5:E5:24:F5:79:2A:8D:6B:52:9B:9A:08:3C:BB:E4
Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial: 0186512434BE303AF3BAEBD4FB707D339BF0
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/6Ev0VnPV5ST1eSqNa1Kbmgg8u-Q.roa
Signing time: Tue 14 Feb 2023 18:16:12 +0000
ROA not before: Tue 14 Feb 2023 18:16:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208882
IP address blocks: 2a0e:4d80::/29 maxlen: 29
2a0d:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 21 Feb 2023 21:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:24:34:be:30:3a:f3:ba:eb:d4:fb:70:7d:33:9b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Validity
Not Before: Feb 14 18:16:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e84bf45673d5e524f5792a8d6b529b9a083cbbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bf:fa:b6:f7:f9:1b:eb:cc:e4:91:bb:4d:70:
f1:ff:cd:01:19:ab:62:1c:ca:9b:b5:a5:be:12:36:
73:33:f7:12:5a:8b:4b:97:d8:d2:15:83:8d:7a:6d:
5a:7d:ab:62:a8:47:6f:01:1d:09:4a:72:9a:ef:bf:
5b:6f:70:3b:e2:96:2b:82:6f:74:a4:98:7d:63:29:
4f:d2:8a:89:d0:79:61:f7:eb:2d:63:ae:01:f9:4d:
d6:4b:da:5b:53:87:7e:5a:72:6e:05:74:ae:e3:fa:
0a:28:24:7d:55:8d:5f:41:e8:c0:c4:4d:32:2f:69:
fc:94:fa:26:d2:66:27:44:13:76:f7:df:b3:21:48:
a2:d3:fc:f5:3d:96:ef:06:95:ac:65:b5:4d:e2:08:
31:5b:28:15:95:90:91:f8:9e:e8:7d:05:23:5a:0c:
eb:61:85:de:33:87:15:02:58:bc:59:18:24:aa:da:
44:33:f4:d9:a9:ce:e3:31:96:dc:0a:b2:74:63:60:
1d:93:58:66:e1:40:fc:2e:45:ef:a1:60:3e:7b:bd:
88:9e:4a:85:17:94:39:55:ee:38:57:09:c0:a2:d8:
a0:8a:4c:e9:e7:fd:43:15:8f:50:76:6f:3a:c1:ef:
ad:43:14:26:05:ae:07:0c:97:b1:50:e9:ad:89:0b:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4B:F4:56:73:D5:E5:24:F5:79:2A:8D:6B:52:9B:9A:08:3C:BB:E4
X509v3 Authority Key Identifier:
keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/6Ev0VnPV5ST1eSqNa1Kbmgg8u-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ff40::/29
2a0e:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
29:c4:95:5b:7a:87:3e:07:77:fc:7f:7a:9d:57:82:5b:3a:d2:
ba:88:6d:05:33:fe:31:19:7f:36:be:7c:47:22:e5:da:c0:f2:
6c:26:5f:ed:dd:23:80:eb:d9:3f:26:84:3d:96:68:b1:2a:c3:
96:fc:79:74:3e:96:43:25:e7:49:44:40:ad:de:6e:28:d5:91:
ce:0a:d4:9e:8c:de:67:d0:26:bf:06:a0:33:7d:29:0d:11:11:
8e:63:8d:53:b8:b5:69:96:20:0e:1e:3a:20:9d:c7:14:63:da:
4c:97:28:1d:81:3a:99:07:1d:a9:55:4b:3b:fd:24:de:61:70:
45:fe:bd:e4:69:69:83:39:4e:42:1c:8e:0c:9a:bd:0e:45:3d:
23:7a:a3:4c:df:b5:bf:be:c3:83:56:8b:ec:2a:d4:1c:b2:69:
a3:e8:31:55:99:53:04:54:a8:61:73:ba:bb:03:d1:cd:35:0b:
a9:37:21:c6:c5:10:39:65:06:57:5d:86:f4:57:6a:92:d1:cd:
dd:a4:13:44:27:6b:d2:86:df:05:11:d6:e1:96:26:b9:e0:73:
aa:17:96:6b:5f:b2:42:cc:8b:6b:ea:e0:58:12:0f:f0:6f:97:
f9:97:f7:79:f4:37:2c:1a:e7:83:73:52:d4:cc:30:cf:ab:1b:
10:1a:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:06 2024 by rpki-client on console-ams.rpki-client.org