Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/jv1lofpuu8g0k8Zdo07naVe9lQg.roa
File: jv1lofpuu8g0k8Zdo07naVe9lQg.roa (raw, json)
Hash identifier: TqXpaPwk2DUcwJ3FjndhOrSuni+unggpMB83Na2oX5Q=
Subject key identifier: 8E:FD:65:A1:FA:6E:BB:C8:34:93:C6:5D:A3:4E:E7:69:57:BD:95:08
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01856FF93C4857EEADFD26128F7E3DD8CE5D
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/jv1lofpuu8g0k8Zdo07naVe9lQg.roa
Signing time: Mon 02 Jan 2023 00:54:42 +0000
ROA not before: Mon 02 Jan 2023 00:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34936
IP address blocks: 2001:4ba7::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:3c:48:57:ee:ad:fd:26:12:8f:7e:3d:d8:ce:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 00:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8efd65a1fa6ebbc83493c65da34ee76957bd9508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:cb:ca:b2:46:a9:db:eb:fe:e5:64:3d:96:
bb:84:04:76:0e:60:19:e4:b2:e1:1d:0a:0d:2c:82:
f6:af:a4:3a:64:39:2e:1d:fc:e6:3f:5b:43:9b:d8:
2e:a2:85:67:a1:4d:4e:71:68:42:8e:71:42:f7:3c:
2d:c8:04:5d:f2:fc:a2:45:e3:9f:a5:84:f5:1c:7c:
ec:7d:70:7c:c8:d9:32:be:e4:ae:29:ca:d7:ea:88:
d7:5b:aa:10:c0:0d:3f:a2:4b:51:8e:4e:90:cf:4c:
d7:d2:3f:49:2f:58:19:02:f4:77:7e:10:ef:02:9e:
b3:52:b6:38:bc:01:78:5f:ad:cb:89:b0:a4:14:eb:
32:95:65:74:76:ae:e2:b9:18:0c:be:f5:4b:cd:b1:
5e:89:a1:e4:13:c0:37:f6:a4:f0:3b:ef:80:19:26:
30:c2:d9:3c:f1:c7:a9:8f:3d:b6:cf:23:20:7a:16:
85:2c:88:f3:03:c0:e6:53:33:f4:b9:74:63:2b:b4:
31:f7:7f:9e:76:56:2b:c4:92:17:7e:5e:2d:ae:b5:
3a:d1:4e:45:c8:b3:81:57:82:bb:0b:44:d1:97:c6:
be:78:69:ff:21:9d:57:bf:25:46:79:85:bd:02:ff:
b2:f4:ab:05:37:04:80:01:e6:89:a5:5c:35:f6:23:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FD:65:A1:FA:6E:BB:C8:34:93:C6:5D:A3:4E:E7:69:57:BD:95:08
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/jv1lofpuu8g0k8Zdo07naVe9lQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4ba7::/48
Signature Algorithm: sha256WithRSAEncryption
81:a6:f5:91:7e:ab:fe:24:82:66:ef:47:ca:06:28:c9:f4:78:
e3:b2:f9:c6:7c:b8:7a:4c:da:8b:72:9c:08:b4:6d:f2:6a:5c:
d1:ec:46:9f:7c:bb:5e:5e:09:89:4a:59:96:f2:1f:8e:6a:4b:
5f:e3:93:52:70:aa:8e:2f:83:3f:0a:d6:91:2e:5c:3c:a7:9a:
34:b9:1d:b0:90:c5:2f:8d:cd:30:c3:90:21:be:07:c9:12:52:
2d:b6:bc:4f:e3:8d:84:e6:d1:72:53:4d:09:d2:dc:d2:29:e5:
4a:a3:9a:e9:3d:ec:2c:f8:1c:4b:31:0f:69:87:98:19:e4:42:
9d:cc:00:03:59:a9:8f:11:ba:fe:08:2a:5a:82:c7:05:14:f4:
7c:7e:e3:2a:e2:c9:d4:80:25:7b:20:d2:43:9f:74:7b:7a:80:
4d:91:b8:35:af:81:96:cd:7a:70:23:e3:b6:ee:25:6d:43:67:
da:cd:6e:3c:36:34:8d:55:88:8b:79:45:07:89:c7:15:19:3d:
7a:2c:36:d5:31:97:ff:d4:78:4c:57:81:ed:5b:2d:3f:75:bd:
36:82:41:78:b4:3e:95:e0:d8:72:8c:4a:d4:64:20:af:4b:a5:
8d:a6:21:c2:02:a6:cf:b4:ad:93:e6:40:4c:12:31:6d:bd:0a:
37:9d:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org