Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/nUpmlwlJdd4Kpq2grzlsgZ27_xE.roa
File: nUpmlwlJdd4Kpq2grzlsgZ27_xE.roa (raw, json)
Hash identifier: 9DuW6Rr7FFf4U0i1RV5pSRqZ3wWPu1rpLYj8mOn9MxI=
Subject key identifier: 9D:4A:66:97:09:49:75:DE:0A:A6:AD:A0:AF:39:6C:81:9D:BB:FF:11
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 018940A521D8E6FCC30F0FCBED94F1BB7A6E
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/nUpmlwlJdd4Kpq2grzlsgZ27_xE.roa
Signing time: Mon 10 Jul 2023 16:31:51 +0000
ROA not before: Mon 10 Jul 2023 16:31:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206740
IP address blocks: 2001:678:2c0::/48 maxlen: 48
2001:678:2b9::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:a5:21:d8:e6:fc:c3:0f:0f:cb:ed:94:f1:bb:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Jul 10 16:31:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d4a6697094975de0aa6ada0af396c819dbbff11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:40:8f:a3:8b:5f:ef:c5:76:51:11:b8:fd:
04:e9:70:91:49:ae:a6:c2:c8:ac:e5:bb:d9:b2:88:
e7:e1:78:fb:67:8c:c1:e8:ab:01:47:50:8e:17:68:
6b:be:d2:7e:27:a3:b1:09:f5:81:76:de:c5:2b:6e:
3d:0b:9d:80:a0:c7:43:68:26:3b:b5:8c:45:7f:23:
87:d3:80:ed:43:5c:65:d4:75:5e:11:d3:bb:bc:98:
c5:96:2c:ac:50:b9:29:81:25:37:7c:b2:ea:89:10:
e2:f9:d0:19:a6:92:15:af:06:71:d1:b0:aa:53:64:
26:f4:3c:f9:65:dc:c3:cd:0a:37:fd:42:25:3a:09:
32:33:93:a2:b0:d3:67:87:c1:d2:f7:a4:5d:c2:bb:
da:a8:c3:b7:12:96:cd:9d:c3:b9:23:0d:a3:68:ec:
f3:20:0d:b2:37:da:41:8c:99:f7:9f:d2:64:82:af:
ed:98:9c:c6:26:85:17:e7:5e:f4:b5:93:ca:2e:5c:
bb:4b:b5:d8:99:f0:d2:be:4d:21:66:f3:2d:aa:be:
72:6f:6e:dc:c6:74:64:7a:11:a7:6d:39:60:33:4f:
80:bf:ba:08:2a:27:b4:06:59:b9:6b:57:8d:12:0b:
3d:01:84:9b:df:54:53:de:c7:6f:a1:1c:87:8e:68:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4A:66:97:09:49:75:DE:0A:A6:AD:A0:AF:39:6C:81:9D:BB:FF:11
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/nUpmlwlJdd4Kpq2grzlsgZ27_xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:2b9::/48
2001:678:2c0::/48
Signature Algorithm: sha256WithRSAEncryption
47:4c:71:2f:17:fe:ca:e3:2a:51:88:2a:66:8e:f6:48:f1:37:
80:4a:84:e2:31:91:f1:b5:fc:55:ba:2c:d2:29:70:eb:9a:47:
1d:fd:d1:28:e7:87:4d:9d:c0:52:d6:8d:0e:4a:fd:2e:4b:77:
5f:60:10:32:3c:30:0d:5c:12:9f:f2:6f:f1:a1:a2:fa:f4:04:
82:5e:a0:c1:9d:14:ab:de:12:8b:89:1e:dd:65:57:15:ea:e5:
63:b3:1f:7a:18:d2:fb:e6:f3:bf:79:7c:55:ec:b3:07:ae:29:
4b:89:81:3b:c6:d7:c2:7b:c3:cb:b4:2b:6c:35:a3:e0:5b:f7:
d5:ef:87:53:40:d7:a3:2a:bf:10:1c:12:07:6d:37:74:a5:4c:
14:8d:44:f0:8b:fa:a8:0c:b4:bf:45:57:3c:43:af:53:2c:9e:
e6:2a:77:8e:79:30:a0:bc:38:9f:81:9c:78:c5:c1:0b:33:9f:
7d:9e:07:d0:c6:51:d0:cf:e9:8c:af:df:c8:60:94:82:5d:ee:
23:ce:0f:46:be:8d:1e:24:df:f0:dd:11:bc:ab:fc:d0:0e:3b:
3b:c1:6a:99:9a:87:21:bb:6a:be:cd:50:31:90:32:0b:d8:f5:
4c:f6:5a:91:d5:d1:d6:32:6a:1c:91:87:f5:69:ee:d8:e8:4c:
a9:92:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:54 2024 by rpki-client on console-ams.rpki-client.org