Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/2RJY1SWSBMSKCJL2RRhxUkw6znI.roa
File: 2RJY1SWSBMSKCJL2RRhxUkw6znI.roa (raw, json)
Hash identifier: F61aHi+YIzTdomGNvqPUT30ZSUSkxLc0AK7DNEnwxNM=
Subject key identifier: D9:12:58:D5:25:92:04:C4:8A:08:92:F6:45:18:71:52:4C:3A:CE:72
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0189DFAEBE88FDF6DB236DFE82996B11525A
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/2RJY1SWSBMSKCJL2RRhxUkw6znI.roa
Signing time: Thu 10 Aug 2023 13:41:58 +0000
ROA not before: Thu 10 Aug 2023 13:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211318
IP address blocks: 2a0b:a280:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Oct 2023 09:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:ae:be:88:fd:f6:db:23:6d:fe:82:99:6b:11:52:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 10 13:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d91258d5259204c48a0892f6451871524c3ace72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:a0:a8:c7:21:b4:a1:66:b9:d9:c4:60:1b:
b6:71:79:75:9c:93:50:1a:ab:61:a7:1c:5a:a5:03:
a5:9c:f7:41:db:b3:d1:f4:01:ad:91:62:ef:e5:1d:
9d:49:ac:dc:4d:27:5a:47:1f:28:ec:58:00:bc:7e:
9b:89:16:4e:8a:e0:49:b4:e7:d3:b9:62:2c:de:ec:
e2:de:b5:db:05:ec:d6:91:63:9d:41:dc:72:35:bd:
12:47:36:0f:f4:39:65:b5:9c:dd:51:df:b1:26:aa:
04:d4:01:46:f6:96:46:71:30:b7:a8:52:fd:fc:35:
60:14:c6:8e:45:14:2b:bf:c2:67:25:05:87:ce:14:
81:51:86:ce:d0:92:d4:c8:59:fd:2f:3d:1a:61:5a:
9d:98:2b:f7:f6:50:8c:f9:fe:76:50:36:a4:b3:99:
52:47:08:de:61:bf:53:3e:47:80:0d:7b:8c:7c:49:
ca:dc:ca:da:a4:66:ac:85:eb:6f:9b:ca:ee:a4:8e:
59:f8:b4:ae:4f:41:fd:6d:d8:0b:36:e9:52:6e:9d:
be:21:a9:42:7b:2a:00:f0:31:ab:1a:86:35:5c:14:
56:d3:a9:70:9c:2e:15:1f:63:d9:3a:5a:1a:2c:78:
54:b3:62:41:8c:40:d5:f1:fe:be:80:a5:43:4e:ba:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:12:58:D5:25:92:04:C4:8A:08:92:F6:45:18:71:52:4C:3A:CE:72
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/2RJY1SWSBMSKCJL2RRhxUkw6znI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a280:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
8d:40:97:c4:ae:16:28:ea:47:25:c4:31:9e:9d:d8:fe:0d:d5:
58:41:e8:51:ab:87:09:44:b5:a0:41:ac:01:62:6f:ff:db:a5:
d3:ee:e7:db:1b:80:e1:f8:e1:36:fa:a6:3e:d3:6b:e1:f1:ee:
04:c8:8d:5c:73:b0:a7:8a:63:73:c5:c9:b0:ae:b8:35:88:1b:
5b:93:66:15:91:20:04:d7:73:0f:9d:ac:92:c9:ca:cd:48:13:
a8:21:16:31:9f:76:87:14:d8:ff:3d:1b:68:73:3f:cf:c9:45:
c1:0e:a2:eb:78:03:f1:d7:96:9b:4b:03:7c:ed:d6:31:bf:e0:
ad:5d:4e:1f:ad:ea:f8:00:b5:14:56:4b:cb:5f:f0:0c:98:9a:
01:41:77:ca:ed:bc:7f:72:d6:bf:6b:16:48:a6:ce:e9:63:44:
9f:fb:f2:85:69:86:5d:87:93:a0:96:a3:30:c0:47:6f:78:3b:
27:77:a8:7d:61:c2:70:d5:2c:68:13:1f:56:23:33:0f:47:fa:
63:46:c9:19:56:30:45:42:03:1b:a2:96:85:c0:d4:fe:1d:b8:
a5:26:a5:af:01:1c:74:af:c7:f1:83:cd:1d:9d:60:0e:03:21:
f3:f5:e4:62:b1:d7:27:97:f6:e1:00:24:a5:f1:3f:c0:75:12:
ad:61:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:24 2024 by rpki-client on console-ams.rpki-client.org