Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/DH6xDmdvx-eCQYfNSKFCE1pVc1Q.roa
File: DH6xDmdvx-eCQYfNSKFCE1pVc1Q.roa (raw, json)
Hash identifier: uHOA0BP25CKfRXH2p+lVd4CFSYktqQX3YN3TWY3vw9U=
Subject key identifier: 0C:7E:B1:0E:67:6F:C7:E7:82:41:87:CD:48:A1:42:13:5A:55:73:54
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018570B064D11A14CA3C5B6EE741DF374B1F
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/DH6xDmdvx-eCQYfNSKFCE1pVc1Q.roa
Signing time: Mon 02 Jan 2023 04:14:46 +0000
ROA not before: Mon 02 Jan 2023 04:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203535
IP address blocks: 2a05:b0c6:80e::/48 maxlen: 48
2a05:b0c6:80b::/48 maxlen: 48
2a05:b0c6:80d::/48 maxlen: 48
2a05:b0c6:80c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:64:d1:1a:14:ca:3c:5b:6e:e7:41:df:37:4b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 04:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c7eb10e676fc7e7824187cd48a142135a557354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:1e:c2:c6:61:2e:ee:95:05:a2:d0:51:be:
12:2b:96:05:4d:53:af:1c:7d:fb:22:c4:de:a8:6f:
93:ea:bb:c8:8f:a1:f8:2d:45:1d:53:d3:f7:88:ea:
13:fb:7c:92:c5:16:ad:e7:c8:ba:ad:d3:ed:bf:70:
28:d4:77:15:c8:b4:3a:0a:e8:47:f8:6e:5c:e1:93:
62:16:6a:9d:3e:98:3c:93:de:67:36:65:c0:81:f6:
e9:2e:99:8d:b4:9a:31:a6:3d:74:00:c9:50:93:4a:
cd:ea:06:18:22:cf:7a:0c:29:8b:d4:57:0c:70:e6:
25:c7:0a:5a:a6:ea:b5:2c:8a:3a:6c:f2:41:cf:9b:
62:88:d0:89:4d:88:ef:2e:13:a5:30:57:de:be:df:
1e:91:86:0f:e4:fb:e3:dd:b2:f1:16:80:c5:2a:52:
89:f2:c6:f7:61:89:bd:1e:a1:7c:8a:59:b5:65:b9:
25:82:d6:58:5c:5e:44:26:cf:e3:9b:40:8f:6e:3e:
dd:1a:ff:e1:91:a8:4b:30:9b:da:92:06:83:b1:f3:
4c:81:a5:e7:4e:5a:c2:33:15:3d:8e:f4:f2:8b:1d:
0c:77:55:4f:f7:54:4a:e7:61:08:e6:1e:8b:d7:53:
14:06:56:80:4a:94:5f:31:2b:5a:7d:30:f4:cc:c9:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7E:B1:0E:67:6F:C7:E7:82:41:87:CD:48:A1:42:13:5A:55:73:54
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/DH6xDmdvx-eCQYfNSKFCE1pVc1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:80b::-2a05:b0c6:80e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
91:88:26:ad:b5:16:20:00:4e:d2:d3:45:24:e5:68:24:6c:70:
84:b0:fe:4a:9b:6d:ed:17:3d:78:09:ca:23:68:5b:6b:bd:a9:
17:ef:44:d3:ee:d5:97:14:38:7c:c6:2a:89:69:3c:7b:90:fb:
a6:a5:7d:d4:82:0b:2d:e8:e6:b8:c2:95:58:ad:b5:14:fd:c1:
e7:35:c3:63:66:f5:5b:df:d6:d5:4f:b1:24:ff:0a:d7:2c:9b:
9a:cb:bf:e9:82:7e:0a:09:1b:c8:ce:7d:59:14:b4:b1:b1:c5:
99:92:62:2d:23:23:b4:00:8a:76:e0:e0:9b:a3:0a:70:a6:32:
38:d6:be:47:8b:be:29:4e:63:cb:e3:fa:ec:7f:25:d1:e3:a1:
48:0f:82:eb:14:f2:b5:10:90:8a:7f:14:5d:e4:fe:19:81:0d:
7b:7f:c8:7a:86:67:9e:b8:4c:b6:0c:bf:e7:0a:c7:6c:85:54:
fa:23:95:45:a5:57:7e:ca:5d:9c:8b:c3:9f:0f:84:98:3a:cd:
ac:a5:03:ca:e5:a2:5e:bf:92:36:01:f3:ba:22:fb:b2:8c:f4:
19:32:80:57:e5:84:14:48:e7:d8:d0:67:1c:d9:27:6f:81:e9:
96:61:82:0d:1f:a9:14:ef:fb:cc:81:32:cb:38:2c:13:b8:d6:
29:d8:8a:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:17 2024 by rpki-client on console-ams.rpki-client.org