Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/X0amQeZzwg_K68weqU8z6aaUNmw.roa
File: X0amQeZzwg_K68weqU8z6aaUNmw.roa (raw, json)
Hash identifier: /8W+ahNJW/lxiH9cS2l9sBTkGd5MQBHOHWdKvgb5MhU=
Subject key identifier: 5F:46:A6:41:E6:73:C2:0F:CA:EB:CC:1E:A9:4F:33:E9:A6:94:36:6C
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 018E61B43AB7696229612F35BC1267658BF0
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/X0amQeZzwg_K68weqU8z6aaUNmw.roa
Signing time: Thu 21 Mar 2024 15:49:45 +0000
ROA not before: Thu 21 Mar 2024 15:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215633
IP address blocks: 2a09:2b80:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 26 Mar 2024 13:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:b4:3a:b7:69:62:29:61:2f:35:bc:12:67:65:8b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Mar 21 15:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f46a641e673c20fcaebcc1ea94f33e9a694366c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:f4:b6:cf:3e:5c:9a:5e:57:a6:6f:3f:d4:
4d:13:cd:99:42:23:63:d2:93:2b:fa:b3:b6:3e:58:
c4:e4:d5:54:13:4f:71:bc:c5:5c:13:4a:48:27:a8:
f0:de:59:5f:2a:db:6d:90:d6:9f:b4:72:df:a0:b5:
e0:0d:a4:75:be:d7:a1:b4:a8:e6:f3:52:4c:af:ee:
e5:94:76:8f:74:55:0e:84:fe:37:e6:ff:ca:6f:ee:
f6:16:df:60:28:57:8d:0b:40:22:1c:af:bc:49:25:
03:cd:27:70:93:8a:b3:0d:b9:e6:3f:1d:a2:dd:9c:
28:08:20:bc:33:e5:39:65:8b:46:50:36:7d:ec:f1:
cb:a5:50:4c:a1:f7:d8:bb:e5:e9:1d:e0:66:06:bb:
4d:a3:87:63:69:f9:44:b3:d5:53:4d:c2:36:3f:cd:
7a:cb:e6:cf:f4:30:90:ce:d4:d7:ef:73:46:ee:75:
c1:6d:05:01:7e:b6:25:63:ff:af:a8:35:36:8a:36:
e3:0e:c8:48:03:ce:a1:d5:7f:9b:8a:11:ed:f1:70:
a5:30:7c:75:41:96:21:d0:50:7c:f1:80:c2:f2:8a:
50:da:90:02:83:db:51:ea:f6:27:62:16:0f:2d:82:
61:c8:dc:24:6a:3e:e2:42:83:73:ca:b1:e4:20:34:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:46:A6:41:E6:73:C2:0F:CA:EB:CC:1E:A9:4F:33:E9:A6:94:36:6C
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/X0amQeZzwg_K68weqU8z6aaUNmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
08:7c:db:71:88:3a:dd:b6:1a:37:6e:3c:d1:3d:8a:24:d9:ce:
9c:70:56:a5:40:85:7f:0b:ec:8d:6d:7b:b2:54:50:2c:91:26:
42:02:53:05:78:86:ab:85:d7:2c:1b:10:91:82:9e:78:d4:e5:
79:2e:0a:e4:f0:c2:36:12:fd:db:90:06:5e:bd:09:ed:77:85:
cc:6a:bc:39:46:28:5d:2b:c6:6c:af:f9:83:f9:fd:2e:d7:e1:
84:0a:5c:51:2f:fe:51:e4:9d:5b:a1:32:8e:4f:75:01:41:8b:
b9:ea:fb:0b:d3:a6:33:1b:a1:57:0c:9e:e7:ca:fc:59:b6:e1:
12:d3:44:55:69:44:8e:ef:87:fe:ce:3f:62:59:fa:5b:1d:a1:
2b:35:0e:ff:19:b9:b0:0d:ba:77:13:20:b4:42:bf:94:91:ca:
ae:21:db:69:0f:40:ad:59:7f:d9:1f:5f:51:d3:21:3f:95:68:
92:af:de:0a:db:7a:27:81:98:f1:a0:ce:7c:c4:72:6a:9b:79:
d8:0a:bd:fb:27:d0:4e:e9:3d:db:87:a0:16:75:93:ca:d3:12:
b3:c3:05:ff:49:a0:22:65:a4:0b:e7:a3:16:7c:6c:dd:54:f3:
c9:4c:9c:3b:33:bf:45:cd:88:0c:07:b0:e3:58:f4:b1:27:bd:
59:f6:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:09 2024 by rpki-client on console-ams.rpki-client.org