Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1-B6RWDg0A-vwIUAUmVfInmGeQE0.roa
File: 1-B6RWDg0A-vwIUAUmVfInmGeQE0.roa (raw, json)
Hash identifier: 7Y8lcyv7LO2jZlUCzNp2AcuIwLkyOc5IVa5Wns5iw/Y=
Subject key identifier: F8:1E:91:58:38:34:03:EB:F0:21:40:14:99:57:C8:9E:61:9E:40:4D
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018A615AF1636E489660E004FDD73600951F
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1-B6RWDg0A-vwIUAUmVfInmGeQE0.roa
Signing time: Mon 04 Sep 2023 18:01:04 +0000
ROA not before: Mon 04 Sep 2023 18:01:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47728
IP address blocks: 2a0d:c107:7::/48 maxlen: 48
2a0d:c107:4::/48 maxlen: 48
2a0d:c107:1::/48 maxlen: 48
2a0d:c107:9::/48 maxlen: 48
2a0d:c107:6::/48 maxlen: 48
2a0d:c107:3::/48 maxlen: 48
2a0d:c107::/32 maxlen: 32
2a0d:c107::/48 maxlen: 48
2a0d:c107:8::/48 maxlen: 48
2a0d:c107:5::/48 maxlen: 48
2a0d:c107:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:61:5a:f1:63:6e:48:96:60:e0:04:fd:d7:36:00:95:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Sep 4 18:01:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f81e9158383403ebf02140149957c89e619e404d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e6:3e:16:66:6e:fd:d9:42:c6:2f:2c:31:4c:
b7:af:14:07:00:1b:cd:8c:43:10:72:ad:35:c5:30:
a6:cf:9e:d9:0b:c6:43:48:65:a6:4c:ec:61:58:92:
32:ca:4b:f9:e7:71:76:fb:fb:03:2e:cd:91:f5:56:
0d:50:bc:dc:d3:23:7d:3f:57:ca:cb:b8:a7:60:40:
0a:a5:86:cb:2c:c8:9a:1c:a3:70:d8:c1:23:88:dd:
c6:57:64:1a:41:e1:64:36:80:c6:96:f1:e0:bb:4f:
67:4b:1b:45:56:7d:87:07:e0:97:04:03:1b:43:d5:
9d:f4:af:17:2f:21:ed:76:b7:44:4c:e5:90:f2:a1:
f1:a4:b9:f9:e1:48:e6:9f:3a:a7:f7:61:90:32:63:
4b:72:30:65:10:29:f4:9f:b1:83:d1:17:89:bd:36:
8f:a5:40:e7:f1:12:45:bc:52:68:21:ba:3e:a2:ec:
55:04:1f:e7:c3:3b:cd:ee:7b:0c:fb:23:b9:11:18:
3c:94:c5:86:fa:0b:8a:b5:da:b3:07:f0:1f:f2:ab:
67:58:5d:0d:ac:33:76:a4:d3:7e:9f:42:83:de:d2:
06:0b:53:78:39:72:ba:d6:06:53:b7:8d:0b:9b:17:
b0:32:5c:e0:d7:25:4f:f3:ba:dd:fd:a8:3a:d6:5c:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:91:58:38:34:03:EB:F0:21:40:14:99:57:C8:9E:61:9E:40:4D
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1-B6RWDg0A-vwIUAUmVfInmGeQE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:c107::/32
Signature Algorithm: sha256WithRSAEncryption
b6:5d:51:e9:26:ee:11:d0:c2:09:fb:1c:ab:f0:fb:7d:d4:71:
67:8b:6e:d2:b8:a0:1c:36:b8:64:73:c1:3c:ee:8d:d3:f3:21:
12:ce:0d:fb:f4:a8:fa:01:14:09:a1:69:21:20:e9:e6:a5:b9:
9b:8a:e0:3e:53:17:f8:fc:b4:e4:bf:b5:d3:81:b9:e4:86:6a:
ee:a1:31:f6:70:21:91:61:ee:94:0d:f9:59:81:f6:4c:dc:c5:
da:98:77:55:8f:42:5d:36:5f:fa:5c:77:8d:26:f7:64:22:5a:
4c:28:be:d1:9b:8b:67:c3:39:4e:83:69:71:d7:a3:e4:ed:7b:
bf:11:5b:30:3a:06:99:76:86:ff:91:93:a5:4c:9b:38:f0:4d:
6a:16:23:35:60:fd:e9:82:25:b7:ec:bb:f4:61:b1:a8:be:c4:
37:74:8a:e6:28:e6:ff:32:bc:f3:d0:0a:5d:72:08:7a:0c:a6:
5c:9e:00:cd:78:0f:a6:5b:14:22:f5:19:46:42:46:c0:ac:44:
bf:96:13:7a:79:23:c8:15:0a:4d:4b:25:96:36:56:37:5c:ff:
4f:7f:1c:b5:7b:22:9a:05:2a:e3:4b:c4:25:5c:a8:f8:6a:a0:
d2:41:40:94:46:98:03:f1:76:bc:1e:86:b3:bf:d3:be:ec:01:
8d:89:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org