Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/h6RdYrdue8INAt5MbON8fDD48RA.roa
File: h6RdYrdue8INAt5MbON8fDD48RA.roa (raw, json)
Hash identifier: YFArPYhSO9ZbVn/C+sI61RNXJg+u2/EzqHEo6nEAlEc=
Subject key identifier: 87:A4:5D:62:B7:6E:7B:C2:0D:02:DE:4C:6C:E3:7C:7C:30:F8:F1:10
Certificate issuer: /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial: 018570304CA1B67FA8979229055360D1B981
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/h6RdYrdue8INAt5MbON8fDD48RA.roa
Signing time: Mon 02 Jan 2023 01:54:51 +0000
ROA not before: Mon 02 Jan 2023 01:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31078
IP address blocks: 2a0f:6040:7966::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:4c:a1:b6:7f:a8:97:92:29:05:53:60:d1:b9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
Validity
Not Before: Jan 2 01:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87a45d62b76e7bc20d02de4c6ce37c7c30f8f110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:f1:67:5b:2b:af:ad:27:8e:f9:7c:ea:74:
02:8f:5b:4a:03:dc:d2:aa:85:b2:b3:f4:d4:1d:22:
ca:41:b0:71:fb:51:17:4e:98:21:58:4a:4b:83:f2:
28:19:b1:4d:91:2b:59:9e:a5:b7:68:8c:e6:66:57:
e3:eb:55:60:1e:27:b1:27:bc:cd:cb:d8:0d:a0:37:
47:6f:6c:98:cd:93:fa:89:e1:7b:16:1b:4b:9c:01:
89:59:6b:67:61:48:06:5d:89:1f:1a:44:38:e0:56:
79:68:22:5a:a0:24:a2:ce:92:b5:26:17:aa:7c:9d:
33:f9:3d:81:5a:52:3a:13:28:54:96:f8:5c:a6:29:
8d:68:56:28:a8:b4:6d:1c:9b:9e:6b:a0:d2:5e:6f:
34:a7:2f:db:cd:95:74:ee:38:2a:22:ef:88:32:0d:
89:4f:43:c0:7d:75:50:10:6b:c1:ef:fe:cd:5d:6b:
f0:49:9c:ce:c5:07:65:e9:7f:8b:b5:1a:2d:96:11:
a8:29:d9:6f:41:c3:f5:d4:ec:72:f7:65:b8:8c:50:
bd:3d:c2:5f:1f:aa:94:f0:03:3d:33:39:7d:06:f2:
f7:ee:9b:18:81:28:52:62:12:48:3b:c9:91:e2:90:
91:ea:66:70:42:2b:2d:4e:11:55:05:78:0f:a8:2e:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:5D:62:B7:6E:7B:C2:0D:02:DE:4C:6C:E3:7C:7C:30:F8:F1:10
X509v3 Authority Key Identifier:
keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/h6RdYrdue8INAt5MbON8fDD48RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6040:7966::/48
Signature Algorithm: sha256WithRSAEncryption
6f:02:9e:69:a4:6f:4d:90:1d:ff:22:9f:0c:3f:e8:2c:70:b0:
f5:3d:ea:bb:f2:93:ee:d2:e5:2b:33:ca:2f:a3:93:1d:c5:55:
07:f3:06:f6:11:e0:3d:cd:04:aa:33:8e:25:fa:86:91:2a:bb:
d0:89:01:80:c6:ba:0a:32:82:af:f7:d5:fc:00:7e:83:93:68:
37:6b:24:4a:1f:1e:0a:8c:5c:0b:fe:b2:8e:04:c8:84:f3:99:
f6:39:c8:35:f9:b5:2d:f2:c1:89:e5:77:58:0d:af:8d:57:88:
18:fa:e2:88:ee:49:d8:90:80:d4:98:e5:6d:3c:73:68:a9:a9:
48:ae:3b:2a:ac:f3:d5:d6:5e:32:00:af:af:cd:7c:98:72:ee:
d5:00:b3:66:f3:57:6f:c8:f5:84:71:03:03:b5:db:9a:2a:f0:
95:f6:41:3d:2d:d9:fa:26:fa:1f:da:02:8b:88:76:86:d4:cf:
8d:e2:b9:3d:91:4e:d1:b4:db:da:1c:55:9b:23:12:98:de:51:
61:90:04:ac:3c:1f:86:18:38:d0:34:84:66:a0:2b:a1:cc:60:
ab:73:31:00:e9:58:cc:9d:5e:aa:b0:1c:7f:e0:96:b8:2b:5f:
f9:17:10:2f:14:59:b7:e1:6f:c2:ca:06:13:5f:9e:ee:fd:9b:
7d:91:eb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:25 2024 by rpki-client on console-ams.rpki-client.org