Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/1RfoQDNVUoK4F2VibkpZdW0haq0.roa
File: 1RfoQDNVUoK4F2VibkpZdW0haq0.roa (raw, json)
Hash identifier: 6wF9+Xgju7ePyxYlspURoKIOKmgo3gfs2u/8Y4xQ1PA=
Subject key identifier: D5:17:E8:40:33:55:52:82:B8:17:65:62:6E:4A:59:75:6D:21:6A:AD
Certificate issuer: /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial: 01856BDC6754880DA553310ACE6183415527
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/1RfoQDNVUoK4F2VibkpZdW0haq0.roa
Signing time: Sun 01 Jan 2023 05:44:44 +0000
ROA not before: Sun 01 Jan 2023 05:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208171
IP address blocks: 2a12:8d40:1024::/48 maxlen: 48
2a12:8d40:2022::/48 maxlen: 48
2a12:8d40:4096::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Mar 2023 22:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:67:54:88:0d:a5:53:31:0a:ce:61:83:41:55:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
Validity
Not Before: Jan 1 05:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d517e84033555282b81765626e4a59756d216aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:f6:b8:27:72:9a:30:31:88:f6:32:66:ea:
35:4a:c3:b8:2a:38:4a:3d:3b:cd:a9:07:15:47:57:
57:05:8a:98:e6:0b:24:6e:65:04:da:fa:ff:81:72:
fd:6f:5c:2b:80:13:0b:38:37:d1:fb:10:70:78:a4:
cc:48:7b:cd:a3:1b:8a:24:3d:7b:88:96:02:50:d4:
31:21:93:a8:22:f8:40:63:8d:47:f8:48:f2:0c:4e:
ac:4f:4b:e6:09:c2:c1:24:9f:ae:23:ee:28:d1:b8:
72:17:5d:70:6e:1c:29:88:96:3c:6f:ed:fe:32:37:
a3:c7:1e:f5:2b:cd:c3:61:e7:ce:df:9d:8d:5a:d4:
80:61:a7:da:40:72:54:45:de:15:8a:c4:f7:8e:f7:
f5:c9:e8:08:b7:55:6e:a1:c2:41:2b:9e:93:8f:cc:
05:ec:8a:6f:fe:5d:4f:bd:bc:f6:59:f3:d0:af:16:
f9:57:53:11:43:32:4a:e4:65:2d:63:50:c1:c8:ed:
10:a5:42:48:d4:35:75:18:eb:e3:a1:43:e8:75:15:
09:68:0f:cf:84:4d:df:ce:19:8c:1c:c9:f0:b8:2c:
51:e0:03:d7:cd:0b:56:d4:59:de:f0:ff:35:22:5c:
ac:a9:7e:8f:dd:fb:eb:ab:26:02:ca:13:85:5c:2a:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:17:E8:40:33:55:52:82:B8:17:65:62:6E:4A:59:75:6D:21:6A:AD
X509v3 Authority Key Identifier:
keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/1RfoQDNVUoK4F2VibkpZdW0haq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8d40:1024::/48
2a12:8d40:2022::/48
2a12:8d40:4096::/48
Signature Algorithm: sha256WithRSAEncryption
3e:62:20:20:89:33:9a:fa:0d:4a:76:4d:e2:e1:34:12:94:0f:
04:b1:78:05:f9:c1:01:75:67:16:b5:53:78:ab:96:39:89:61:
c9:35:9c:ea:11:bc:e4:9c:e4:e0:91:ec:f6:e5:bf:74:b0:40:
3e:cc:84:02:83:56:76:29:65:c0:e3:38:bc:6a:a4:d2:f8:d9:
e3:cc:38:d5:1f:f3:36:54:f4:bd:08:7e:e4:32:87:9c:78:f3:
37:78:05:9a:32:d6:a8:bf:bb:81:6a:4b:ff:46:42:08:2a:f7:
a0:d5:75:ad:e7:d9:91:53:2c:6c:a9:dc:df:8c:7e:bd:9d:e1:
9a:00:1e:1b:5a:7c:b7:3c:f1:07:ff:fb:ec:5c:1d:13:eb:71:
74:86:8b:1a:7a:c4:da:71:84:bf:76:2c:6f:78:d9:91:2b:b7:
59:e2:86:32:3f:90:29:ff:40:70:17:e8:c7:e7:c4:4e:82:04:
cd:3d:25:6a:4e:f2:88:53:0e:82:fb:37:09:b8:70:bc:eb:09:
90:b8:8b:eb:73:64:79:d9:99:9f:4d:2e:eb:22:d9:64:e9:dc:
4a:55:47:c6:fa:67:19:75:07:1b:4d:ae:55:3c:4a:68:86:91:
9b:50:66:d7:8a:02:91:07:36:e5:99:19:c9:53:b3:13:de:f5:
1b:ee:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:16 2024 by rpki-client on console-ams.rpki-client.org