Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/6J0cVaHS1oNvzmer82qKo_-cDrU.roa
File: 6J0cVaHS1oNvzmer82qKo_-cDrU.roa (raw, json)
Hash identifier: WDJiMnLrMYpEXIpnX2gUJp74uEq7F2THfNdzhxJi+uI=
Subject key identifier: E8:9D:1C:55:A1:D2:D6:83:6F:CE:67:AB:F3:6A:8A:A3:FF:9C:0E:B5
Certificate issuer: /CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Certificate serial: 018BC893E44A9C748E919F3C0C0E2AF3D738
Authority key identifier: 78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/6J0cVaHS1oNvzmer82qKo_-cDrU.roa
Signing time: Mon 13 Nov 2023 12:06:57 +0000
ROA not before: Mon 13 Nov 2023 12:06:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60566
IP address blocks: 2a06:1301:4160::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:93:e4:4a:9c:74:8e:91:9f:3c:0c:0e:2a:f3:d7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7803558ea6e5165b3876097af75bf1e92a142cf2
Validity
Not Before: Nov 13 12:06:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e89d1c55a1d2d6836fce67abf36a8aa3ff9c0eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:20:c6:fb:5c:c5:51:3c:26:e5:20:d8:30:
a3:e6:f8:69:6b:4a:f8:82:3b:74:c2:76:4b:d5:8e:
6e:4a:1b:ad:20:e3:7c:57:b4:0d:f5:0b:f8:8b:95:
d1:b6:fa:ae:04:94:c8:9b:75:8a:d4:39:31:50:60:
03:68:d4:c3:08:d7:bd:3d:82:2e:48:c1:c4:17:b7:
46:2a:0d:e6:36:b5:51:81:b9:58:e7:e6:f3:1a:ed:
e8:a5:57:83:c8:d2:a6:94:c0:62:d5:86:67:f3:a0:
78:27:20:96:5e:ef:ac:b6:b9:51:f5:51:52:b5:d4:
21:ac:92:90:22:cd:1d:9a:65:5c:4e:0b:70:27:8b:
e6:e0:25:8f:2d:ba:4f:ba:77:97:1a:07:07:0a:66:
a9:5d:aa:82:c8:d1:3a:b3:77:5a:1e:bf:99:9c:b9:
70:ea:a0:de:b0:c5:f3:b4:ce:94:21:09:fd:9c:b2:
45:3c:dd:ee:a7:47:c4:15:80:e9:b8:74:0c:e4:94:
49:74:99:c3:59:3c:d0:40:6f:75:4d:7d:64:b1:db:
ed:39:00:6c:df:c6:9b:b6:77:30:9f:88:52:45:aa:
f2:0e:bc:89:ca:a8:92:e5:30:6c:b0:86:15:e8:a0:
05:80:8d:03:14:37:5d:ac:b7:bb:38:2f:67:76:c7:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:1C:55:A1:D2:D6:83:6F:CE:67:AB:F3:6A:8A:A3:FF:9C:0E:B5
X509v3 Authority Key Identifier:
keyid:78:03:55:8E:A6:E5:16:5B:38:76:09:7A:F7:5B:F1:E9:2A:14:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eANVjqblFls4dgl691vx6SoULPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/6J0cVaHS1oNvzmer82qKo_-cDrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59a3aa-4eae-44e7-acc1-6f16834bc847/1/eANVjqblFls4dgl691vx6SoULPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1301:4160::/48
Signature Algorithm: sha256WithRSAEncryption
10:b3:27:35:6f:e3:e2:3b:3e:36:c2:e2:b7:b4:1e:96:1a:54:
6e:fd:7c:67:5d:f9:a0:a7:26:9e:03:c3:81:74:80:38:71:6a:
12:2c:35:60:6c:7b:d6:6b:90:58:e5:4c:5b:a3:cd:4e:c9:19:
03:2b:b0:73:46:90:8a:8e:15:b7:4d:dc:1d:e9:45:21:a2:b6:
0f:88:d9:f2:48:cd:a0:0c:f2:61:e0:4e:81:11:01:47:c5:9c:
cb:06:d9:8f:bd:48:9e:c6:08:04:b9:50:e2:34:34:6d:20:37:
26:71:8f:5e:24:56:8d:a6:26:70:31:45:8d:ba:40:db:3b:0c:
22:38:56:e7:a9:00:20:b6:b2:0f:c4:7e:2e:c9:d6:30:76:5f:
7a:03:98:2e:72:11:18:62:61:d1:f4:03:25:8c:bf:1b:2d:c4:
f5:3a:1d:60:b5:27:d3:f5:89:5f:8d:df:0a:a8:0a:d6:33:2e:
68:6f:ef:94:a0:8b:95:c2:96:4a:c3:45:6a:29:8d:ab:86:28:
25:9c:78:42:b5:5f:8b:35:ae:5d:b6:10:fc:ee:eb:3a:8d:f1:
d4:13:af:d2:e8:4d:a6:05:e6:61:df:d9:ea:2e:1b:7f:d6:16:
a4:1a:00:48:c5:d8:1e:01:e9:6b:69:98:56:c6:e9:14:11:d7:
44:a5:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:56 2024 by rpki-client on console-fra.rpki-client.org