Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/7CKs8YqXgvtNvIs0UD5uzqb9Tw4.roa
File: 7CKs8YqXgvtNvIs0UD5uzqb9Tw4.roa (raw, json)
Hash identifier: 1bCqMKuexcHb9UKnhtkns5EGV04dcP/J3z7KuVPzyTg=
Subject key identifier: EC:22:AC:F1:8A:97:82:FB:4D:BC:8B:34:50:3E:6E:CE:A6:FD:4F:0E
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 018CC9BBA3875C9275BEE343DE543D4BF907
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/7CKs8YqXgvtNvIs0UD5uzqb9Tw4.roa
Signing time: Tue 02 Jan 2024 10:32:46 +0000
ROA not before: Tue 02 Jan 2024 10:32:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207518
IP address blocks: 2a09:d2c1:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 21:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:a3:87:5c:92:75:be:e3:43:de:54:3d:4b:f9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 2 10:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec22acf18a9782fb4dbc8b34503e6ecea6fd4f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:b3:d2:1b:b2:17:22:44:27:39:7b:10:36:
26:3a:15:1a:bb:34:22:2e:4e:10:8e:0d:a7:51:d1:
86:92:5d:4b:cb:db:4b:4c:9b:92:50:97:0a:3d:ea:
e5:c5:8a:bb:a0:4a:d5:f0:63:4d:7c:39:ce:21:43:
4c:9e:4a:f0:d5:e7:94:41:69:25:2f:ee:cc:65:2b:
eb:eb:28:3a:51:23:da:6e:23:dc:8d:8a:1a:a5:c2:
14:0a:03:d2:ab:79:4b:c7:1b:2a:0a:5b:62:0f:a8:
10:43:eb:d9:09:27:ad:34:a5:15:4a:ba:17:2d:5a:
51:e7:58:0f:c8:38:d1:9c:81:49:48:2c:50:c4:61:
7c:73:57:06:99:5b:2c:7e:6c:47:1d:28:c1:70:54:
de:d8:3c:42:d4:54:8a:67:63:e4:ed:62:53:18:65:
3b:ac:78:86:a9:78:5d:8d:63:0f:3a:5f:f7:04:75:
dc:90:d6:61:6b:92:28:5c:1e:01:75:45:39:81:39:
7d:f5:c0:47:8a:d2:dd:3b:b5:f1:94:45:74:6c:f3:
3a:86:90:d6:b8:0e:bb:d4:71:04:36:7c:93:f0:6b:
56:ed:2b:69:66:27:71:29:76:0b:79:3f:c6:fd:83:
74:3a:7d:d2:24:24:4e:ef:31:5e:02:8f:69:cc:f4:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:AC:F1:8A:97:82:FB:4D:BC:8B:34:50:3E:6E:CE:A6:FD:4F:0E
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/7CKs8YqXgvtNvIs0UD5uzqb9Tw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:d2c1:4::/48
Signature Algorithm: sha256WithRSAEncryption
16:1f:6d:ef:f0:a4:84:a4:c7:c1:57:98:b0:42:f6:9a:fe:c1:
51:88:ae:eb:73:15:91:1d:1b:2e:8f:6e:d4:78:30:66:57:71:
b0:b4:30:0a:ef:98:6d:47:56:e4:7f:89:94:8a:1a:35:98:5c:
79:79:19:99:23:15:83:60:45:f2:dd:28:25:38:8e:ec:ee:59:
6c:74:20:51:0b:59:b8:2c:83:df:4f:88:b5:9b:0f:74:af:fd:
0b:08:1a:5a:25:dd:d7:01:db:94:5d:95:ae:b3:b7:95:f3:bc:
83:32:1a:f5:2b:d7:53:5e:ab:60:0e:1f:0f:5c:a3:14:b2:30:
09:5f:25:55:91:37:e5:e2:9d:a4:c4:9c:23:df:34:bb:fb:a8:
04:50:91:98:42:c9:5e:02:86:d7:62:a6:d9:8a:ad:54:92:aa:
0b:57:67:a0:af:30:f8:b1:2b:29:fb:b6:4c:22:5e:e7:8c:cf:
da:56:3e:ac:16:64:59:69:29:2c:25:20:94:07:74:65:89:49:
36:1a:ac:83:8c:67:6a:03:89:84:40:ca:07:ba:31:b9:e1:13:
08:04:ba:bb:f6:a8:d7:fc:f8:f3:ec:ba:27:b3:0f:cc:5d:10:
3b:20:d0:3e:c8:e3:d9:d5:ff:4f:b4:18:84:c9:47:3d:2f:14:
60:71:22:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:34 2024 by rpki-client on console-ams.rpki-client.org