Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/7uYKUJXo5vewSww3x93tK0bJqM0.roa
File: 7uYKUJXo5vewSww3x93tK0bJqM0.roa (raw, json)
Hash identifier: 1OQt/B6E991hMHMGk0ww3Xu3DNhIR28AiJd2e1/WRJM=
Subject key identifier: EE:E6:0A:50:95:E8:E6:F7:B0:4B:0C:37:C7:DD:ED:2B:46:C9:A8:CD
Certificate issuer: /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial: 018BA410A455F0E73129288337859D6BE2CD
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/7uYKUJXo5vewSww3x93tK0bJqM0.roa
Signing time: Mon 06 Nov 2023 09:57:15 +0000
ROA not before: Mon 06 Nov 2023 09:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39098
IP address blocks: 156.10.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:10:a4:55:f0:e7:31:29:28:83:37:85:9d:6b:e2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Validity
Not Before: Nov 6 09:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eee60a5095e8e6f7b04b0c37c7dded2b46c9a8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:a2:c2:c3:46:40:35:60:0a:63:fd:52:6e:
99:33:d5:5b:26:4e:ff:0b:8f:dd:ca:d1:73:04:26:
2d:a4:1b:56:62:e0:0f:f2:4b:ab:ec:dd:10:62:e5:
4f:24:0e:a7:5a:c0:61:cf:1f:51:ec:24:5a:a0:2f:
40:a4:93:f2:d7:23:23:f7:ae:09:30:fa:c4:9e:f3:
85:11:d5:6d:1e:54:d8:51:a8:96:67:de:99:27:2a:
d0:9f:9d:79:b2:8a:94:48:c9:5e:c0:63:00:a3:b0:
87:3d:14:d1:33:bd:20:14:6b:25:50:35:17:66:0e:
bb:0f:1d:0c:98:ff:44:6d:7a:f4:90:e5:e8:88:4d:
b8:9f:db:de:f6:97:4b:19:bd:9a:1a:b4:c2:21:e2:
a9:39:c8:66:64:3d:a3:5c:c2:6e:46:41:81:5d:47:
76:7a:e1:ae:bc:78:1b:29:62:a0:0c:9a:47:38:64:
3e:8c:98:96:f4:6f:1a:16:35:1a:d2:ec:d3:dd:00:
f3:72:5a:be:00:c2:10:9c:b3:13:11:ee:c2:8c:6f:
77:f9:0a:fb:eb:3c:7b:90:43:0e:b4:49:4a:a9:80:
7c:a2:47:fe:67:c8:c5:4b:2f:c9:21:75:19:06:be:
ee:49:dd:b4:12:54:34:38:bf:ee:fc:f4:84:57:76:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E6:0A:50:95:E8:E6:F7:B0:4B:0C:37:C7:DD:ED:2B:46:C9:A8:CD
X509v3 Authority Key Identifier:
keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/7uYKUJXo5vewSww3x93tK0bJqM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:6e:99:f2:51:05:61:24:9c:3b:37:3e:ab:67:b6:e4:66:73:
aa:12:2d:99:42:ed:c6:22:f7:9a:dd:0d:ab:fc:40:29:c4:0b:
97:fd:71:65:d0:e8:36:7e:7c:e1:ce:ef:5e:28:96:a5:e5:49:
b0:97:4e:a8:cb:c3:3f:c7:b9:01:45:85:54:a8:01:a9:86:8a:
ab:6a:fc:56:75:9a:f8:c1:21:41:19:ee:52:76:54:df:a8:fa:
a1:2a:0c:49:5d:8a:14:f7:7b:c2:5c:9c:9c:f4:9e:c4:69:54:
f6:56:92:60:fb:51:29:7c:1b:bc:1c:51:21:a0:9e:2a:fc:c0:
f6:b6:af:f6:3a:19:f7:91:9d:14:65:15:ee:d1:37:8a:9a:13:
12:b5:a7:6b:8a:8c:ed:7d:e2:28:7f:88:d7:cd:f9:b3:e5:1b:
3d:98:97:fe:70:2f:4c:3c:80:92:cb:56:f3:ac:4a:68:49:1b:
75:cb:f0:51:d4:ea:70:e6:c9:52:46:4c:27:c7:5d:23:b6:e9:
ea:de:96:86:7c:6f:0a:df:c8:c3:d5:2f:6c:d9:96:b4:3e:4c:
ed:90:b6:4e:8a:50:29:f3:59:73:62:50:8b:c4:0b:c3:b3:71:
cd:a2:14:91:53:18:a5:ff:6d:fb:74:d8:6f:64:05:b5:a6:83:
fd:f9:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:14 2024 by rpki-client on console-ams.rpki-client.org