Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/m6y1GH4HimGPG0ud8VBn8De2gXg.roa
File: m6y1GH4HimGPG0ud8VBn8De2gXg.roa (raw, json)
Hash identifier: R0YT7gz2rOK/TDVw88CmQhbDAGPNTtY4yksUYOVL/kU=
Subject key identifier: 9B:AC:B5:18:7E:07:8A:61:8F:1B:4B:9D:F1:50:67:F0:37:B6:81:78
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018CF054D589257D566517155616520FF3EC
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/m6y1GH4HimGPG0ud8VBn8De2gXg.roa
Signing time: Tue 09 Jan 2024 22:25:40 +0000
ROA not before: Tue 09 Jan 2024 22:25:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 2a0d:c103::/32 maxlen: 32
2a0d:afc2::/32 maxlen: 32
2a01:48a0:4001::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 20:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f0:54:d5:89:25:7d:56:65:17:15:56:16:52:0f:f3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 9 22:25:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bacb5187e078a618f1b4b9df15067f037b68178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:72:4b:17:88:01:24:23:b8:74:a2:ed:38:
70:29:7f:52:f1:6b:17:6c:09:9d:8a:d6:2f:e1:f7:
f6:4c:61:99:22:22:65:29:a7:66:61:a3:6a:b8:c6:
b9:ed:ac:9b:96:c3:68:6c:13:59:ce:a9:3d:0e:60:
93:ec:78:6a:f6:bd:4d:d4:65:ba:a0:8f:8c:1e:16:
4f:14:54:c4:0c:bb:22:a1:29:c9:40:64:f3:57:8c:
1a:09:d9:74:f6:19:97:cd:8e:99:d9:d3:4c:73:59:
94:05:b7:0d:ed:f8:b4:9c:52:1c:4c:cb:fb:09:c5:
94:6a:2d:04:1e:76:b6:ce:93:71:ac:1d:7e:6a:b0:
50:cc:d0:7c:b7:c2:bd:30:c4:63:84:8a:46:7f:91:
c4:56:37:79:95:cd:4f:0a:21:46:71:7c:ee:97:26:
f7:93:15:d8:96:3d:36:c1:c5:c4:66:13:87:ad:6b:
d9:af:42:67:fc:42:25:ee:4c:f8:cb:dd:27:51:e5:
f8:5f:e9:13:2b:65:c1:7f:49:df:f7:7b:45:d9:48:
6a:89:08:79:ea:13:44:bd:0d:dc:5d:3d:b3:a3:4b:
88:93:fd:8d:d1:f8:be:6e:53:42:57:e1:ba:46:e7:
90:98:b6:ec:5b:39:ee:ea:8f:3f:29:4d:25:85:d5:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:B5:18:7E:07:8A:61:8F:1B:4B:9D:F1:50:67:F0:37:B6:81:78
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/m6y1GH4HimGPG0ud8VBn8De2gXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:48a0:4001::/48
2a0d:afc2::/32
2a0d:c103::/32
Signature Algorithm: sha256WithRSAEncryption
78:10:ce:9e:93:7c:57:dd:75:5e:98:3f:95:e1:2f:c4:a7:c6:
4e:a2:e0:e7:82:66:7c:f6:b6:c7:db:24:dc:dd:b1:d5:5c:93:
f9:7d:45:0a:8f:ee:f8:06:e1:01:db:68:32:19:98:70:63:d1:
a6:52:4c:b9:4d:a5:a4:80:0c:85:ef:2e:0b:ec:4f:4c:8f:6d:
88:56:34:22:17:64:66:6e:cc:0b:cc:9b:fc:8a:6b:ec:74:c7:
1a:b4:da:5e:c7:66:ec:8a:e7:20:9e:e7:94:99:37:17:49:b3:
be:ab:a5:88:06:d5:09:03:2c:2a:34:6b:60:5b:65:7f:41:6a:
e7:c4:90:cc:af:79:bb:c5:63:13:c8:9c:c3:2e:43:ab:f9:44:
ca:d3:f3:3a:73:b8:1d:3f:6c:c7:f8:9f:e2:4e:8b:92:2f:a0:
58:d4:35:aa:72:9f:ad:05:c9:4e:61:fd:79:cf:2b:7a:c4:3a:
bf:3b:05:72:4b:62:2c:71:07:dd:3d:2a:b9:64:5a:9a:b6:14:
b1:96:30:9f:00:f9:7d:4c:31:a9:ba:70:c1:ea:9d:93:36:a9:
cf:d0:01:84:6f:76:1b:84:74:2e:73:0e:30:28:a7:19:23:ba:
7d:e2:52:df:45:7e:1e:ad:4d:42:dc:b1:7b:2a:d5:e7:06:7c:
87:9f:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 01:12:37 2024 by rpki-client on console-ams.rpki-client.org