Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/AzbrLD5R8SulDQwx7P5vIzem6K4.roa
File: AzbrLD5R8SulDQwx7P5vIzem6K4.roa (raw, json)
Hash identifier: wYUf08lrhsM2HwSff0Y8RZjGJgvx1qVZ7YgSmhZUZAg=
Subject key identifier: 03:36:EB:2C:3E:51:F1:2B:A5:0D:0C:31:EC:FE:6F:23:37:A6:E8:AE
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01856FF942717D83AE834C03F78D9D048B93
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/AzbrLD5R8SulDQwx7P5vIzem6K4.roa
Signing time: Mon 02 Jan 2023 00:54:44 +0000
ROA not before: Mon 02 Jan 2023 00:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201566
IP address blocks: 2a0e:a6c7:1000::/38 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:42:71:7d:83:ae:83:4c:03:f7:8d:9d:04:8b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 00:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0336eb2c3e51f12ba50d0c31ecfe6f2337a6e8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:1a:31:12:94:02:47:33:eb:6e:90:ea:6a:
4f:7a:c4:66:82:b7:a3:d8:d2:87:f6:eb:85:f5:d2:
97:0f:a9:16:98:08:0c:9a:f5:30:7c:fb:16:d4:77:
fb:e8:86:ec:40:ed:44:52:34:9c:3f:78:94:e0:51:
e3:49:ad:cc:f6:86:33:5f:72:76:46:cc:ee:4b:38:
2f:50:ab:d8:50:22:47:b1:51:f8:40:95:a6:bc:77:
d5:ce:78:5d:6c:c7:c8:19:53:34:82:7f:9d:9e:a2:
37:ca:7e:5d:8b:84:9e:61:5f:03:1c:b8:9b:cf:02:
65:e8:0f:54:79:51:30:76:2d:6a:83:21:77:c6:71:
d1:50:8d:d4:d3:2d:c6:d9:04:e2:ef:6c:bf:2b:b4:
63:ae:50:91:3a:f7:7c:87:1e:23:aa:4c:44:fe:f2:
eb:1e:92:4d:5a:37:72:13:b7:45:a3:32:26:ed:2b:
49:77:5a:e4:c4:52:43:8d:c0:50:f3:57:f5:7b:b7:
ed:b5:17:ec:c6:34:c3:d1:6c:9a:87:f2:1b:87:4c:
74:c8:93:2b:02:d0:26:7e:b2:ef:d2:d2:cd:09:3d:
d7:76:e4:78:e5:7b:83:8b:32:92:c7:4d:41:b6:e4:
4f:9b:ca:a1:95:fe:57:02:70:63:7f:96:28:15:6a:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:EB:2C:3E:51:F1:2B:A5:0D:0C:31:EC:FE:6F:23:37:A6:E8:AE
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/AzbrLD5R8SulDQwx7P5vIzem6K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a6c7:1000::/38
Signature Algorithm: sha256WithRSAEncryption
b1:18:d9:ad:25:18:5c:07:a5:20:27:28:58:ff:27:51:3b:89:
c9:d0:56:fa:1e:7f:79:65:45:21:cb:78:6c:ac:b2:57:17:b4:
dc:fb:da:00:14:73:1e:4c:32:e8:a4:14:41:88:34:67:dd:67:
f5:55:de:fd:c5:f5:b6:66:3a:52:14:3f:04:5d:b8:c2:1c:6b:
12:c6:7e:37:d0:e6:c2:64:b8:41:a3:cf:b3:f0:d9:d7:32:ec:
13:e5:1d:c0:a5:a2:ea:7a:df:62:40:7e:32:92:4b:e6:48:dc:
59:f8:7d:70:2c:dc:c2:06:b5:f3:5b:ba:b6:ac:d7:23:f7:16:
37:c2:40:85:da:a0:43:73:fd:98:cc:20:40:56:92:c9:68:cd:
0a:0c:c7:52:aa:ac:e8:e6:f3:3a:1f:dc:31:05:fd:cf:ea:7f:
31:d7:04:3a:8f:26:c3:1e:05:bf:a8:58:02:da:9c:4b:be:24:
3c:a1:8c:df:68:17:8d:c2:be:28:db:c0:b0:70:29:6c:d7:65:
e0:6e:f6:3f:43:32:de:11:bf:36:1c:f4:42:c8:ac:11:4b:3a:
a1:da:d3:9d:df:e6:5a:a1:52:ea:8f:e7:32:52:33:95:28:a7:
b9:7e:85:88:cb:50:b9:7c:3b:67:2c:93:04:5a:41:49:ec:5b:
3e:58:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:26 2024 by rpki-client on console-fra.rpki-client.org