Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/6DawZN36RqgBD_7xqbUVxn6OdZc.roa
File: 6DawZN36RqgBD_7xqbUVxn6OdZc.roa (raw, json)
Hash identifier: L9x0/+hm0+zrka01yJZ8AzNL8s5X/WOvKwd+06WhUv0=
Subject key identifier: E8:36:B0:64:DD:FA:46:A8:01:0F:FE:F1:A9:B5:15:C6:7E:8E:75:97
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018570B065A2B4B847B6CDB7AD0CCFFCE707
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/6DawZN36RqgBD_7xqbUVxn6OdZc.roa
Signing time: Mon 02 Jan 2023 04:14:46 +0000
ROA not before: Mon 02 Jan 2023 04:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205432
IP address blocks: 2a05:b0c6:400::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 02 Nov 2023 19:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:65:a2:b4:b8:47:b6:cd:b7:ad:0c:cf:fc:e7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 04:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e836b064ddfa46a8010ffef1a9b515c67e8e7597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4b:1b:39:99:a2:e0:c6:ae:ed:43:a5:37:89:
b5:65:4a:d6:bc:0e:26:e1:90:8e:e8:bb:09:db:11:
ef:fd:34:64:ea:be:60:56:1a:69:9b:33:bf:cb:a9:
67:29:97:e5:b5:38:3b:99:2a:f0:b1:c2:1a:0e:c2:
cd:31:09:73:5d:40:81:ea:6c:85:c7:ab:f4:2e:df:
8f:f6:1e:ef:16:d2:58:15:77:bc:c1:0d:0c:69:6c:
b2:41:5a:55:00:12:5a:7a:7b:53:4b:82:41:81:bb:
ea:1d:c6:db:ba:cf:5b:25:39:93:92:3a:f6:9d:a7:
18:8e:96:0c:79:b4:09:c7:e9:ad:81:0b:c9:5f:83:
d1:cb:33:5e:20:11:e2:10:33:e9:86:6a:81:e2:0d:
72:ff:67:13:72:41:2d:1e:d4:e5:0a:11:6f:7f:31:
23:54:51:9f:be:14:d5:02:3a:90:47:dc:14:de:50:
5a:9b:89:45:b4:8e:79:50:b9:40:21:e4:23:0d:93:
db:a4:4c:22:57:bf:1f:fc:8d:67:9b:51:34:5a:4c:
53:05:61:67:69:09:ff:dc:38:30:47:f0:0c:80:04:
aa:8b:7a:cc:b7:b5:bb:e7:8f:28:47:fe:b2:6d:89:
ed:17:04:55:f0:42:c5:7d:65:e0:cc:48:8e:bb:ab:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:36:B0:64:DD:FA:46:A8:01:0F:FE:F1:A9:B5:15:C6:7E:8E:75:97
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/6DawZN36RqgBD_7xqbUVxn6OdZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:400::/40
Signature Algorithm: sha256WithRSAEncryption
04:87:6a:4a:ae:61:0f:c6:d6:31:01:16:79:b8:70:56:2e:db:
7f:ca:1e:54:19:c5:84:92:9d:98:b5:5d:7b:4e:c6:3a:f3:b7:
d8:68:07:8b:e4:ad:e9:25:ad:7f:ef:b2:7e:d3:53:b3:2e:07:
4c:8f:1b:bf:78:4b:78:73:b1:f9:aa:1d:bb:77:81:08:12:be:
ec:81:65:7a:23:55:d3:c1:73:e0:cb:f1:b5:95:70:a3:e9:a9:
df:f6:be:1e:d2:60:ae:ec:60:7a:cb:3a:7b:5b:cd:bf:9a:67:
04:88:4e:ca:42:64:bf:6b:98:75:02:26:52:5b:44:99:5d:64:
0b:c8:d2:b8:30:8c:b2:11:5f:ec:54:55:b9:ef:06:11:68:07:
74:9d:62:5a:37:35:6b:b5:b6:75:84:a5:a7:e1:3a:3b:43:3d:
ab:60:62:19:38:4a:97:59:28:b6:45:a6:d8:71:63:32:41:de:
c2:61:75:92:25:9e:30:97:5c:45:22:6f:55:ec:ea:44:20:01:
10:7d:8d:1c:cf:75:fa:0c:c3:e4:8b:d1:67:ab:7a:dd:43:dd:
9d:35:6b:d6:69:6b:8e:4d:dd:fa:79:4c:05:db:5b:39:b4:20:
27:24:8c:24:06:45:d2:a8:e7:92:6a:0f:0e:45:55:fc:ba:b4:
20:57:c2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:21 2024 by rpki-client on console-fra.rpki-client.org