Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/6UYrcPegOXGBiEnCOJ0LfGJseWE.roa
File: 6UYrcPegOXGBiEnCOJ0LfGJseWE.roa (raw, json)
Hash identifier: Hr5/h5y7huxJnmAA65rkGExUDrtNwjQ1tBeG8S36CJg=
Subject key identifier: E9:46:2B:70:F7:A0:39:71:81:88:49:C2:38:9D:0B:7C:62:6C:79:61
Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial: 0188F8318A8F3A68111C422A3BEC88DC3DD0
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/6UYrcPegOXGBiEnCOJ0LfGJseWE.roa
Signing time: Mon 26 Jun 2023 14:52:56 +0000
ROA not before: Mon 26 Jun 2023 14:52:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a04:1f42::/32 maxlen: 48
2a04:1f41::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:31:8a:8f:3a:68:11:1c:42:2a:3b:ec:88:dc:3d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Validity
Not Before: Jun 26 14:52:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9462b70f7a03971818849c2389d0b7c626c7961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7c:4c:0a:9b:e2:42:64:5a:b1:cd:5c:c3:99:
3f:b1:01:ec:1d:cc:ae:cf:b3:38:48:5b:59:6d:81:
a2:b9:62:43:e7:32:08:d2:3b:b5:00:29:dc:49:13:
70:c1:5c:55:b5:48:d8:de:b9:67:e5:e8:f7:e8:48:
ca:46:f8:9f:6e:da:44:e5:7b:46:5d:e9:4a:94:6b:
d1:29:4d:bd:3f:50:1d:97:d4:09:b2:d9:20:c6:5f:
d1:b8:21:71:93:09:76:7a:34:e3:49:e3:33:e7:a8:
de:8d:01:7f:e0:82:f5:63:fe:9d:01:c3:9f:01:00:
ac:32:05:4c:34:00:48:de:8a:c0:88:94:5c:1c:18:
de:83:90:62:0f:9a:9d:2e:1c:69:5c:7c:48:7f:93:
02:8d:e4:c5:73:cd:94:ce:a9:45:e4:02:d9:51:a4:
3c:93:22:33:83:09:d7:1d:68:03:8d:d4:38:a3:63:
5a:2b:8f:3e:2a:a4:02:ee:d6:a2:3e:d7:11:84:b5:
80:9b:4f:b4:13:18:eb:0a:7e:d4:92:98:c7:1d:ee:
17:9a:97:7b:41:ef:1b:c9:e4:9b:a5:14:c2:2e:ca:
3c:7d:27:a7:b7:ac:96:58:a5:fa:22:d1:22:35:e3:
71:e0:21:72:c2:f4:e1:f3:9d:54:d7:69:5d:f3:20:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:46:2B:70:F7:A0:39:71:81:88:49:C2:38:9D:0B:7C:62:6C:79:61
X509v3 Authority Key Identifier:
keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/6UYrcPegOXGBiEnCOJ0LfGJseWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:1f41::-2a04:1f42:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3e:6a:b4:82:d7:58:47:6c:89:2e:18:47:51:12:da:d9:65:c3:
ff:fa:9e:21:db:02:82:87:c0:2d:0e:19:74:6a:34:f5:7f:27:
73:17:1a:64:01:c8:05:27:36:d6:cb:f9:b4:a0:34:d2:03:c9:
22:90:fd:23:fa:bd:8e:3a:4b:be:3c:39:73:5f:9d:62:92:99:
1d:bc:30:a0:e0:bf:96:bb:6b:24:91:ad:f0:f5:09:16:b7:56:
54:c3:0b:e3:60:25:bf:fd:47:a7:71:98:b9:9c:be:d2:db:9f:
db:5d:6e:ac:2f:eb:26:75:84:97:f0:9a:38:08:3c:2b:9c:b4:
70:da:87:21:fd:80:4b:d2:ff:2f:da:0e:56:55:c1:61:00:50:
1c:66:f4:03:11:6b:b8:20:ea:62:e2:cd:4c:c1:59:21:51:47:
f0:32:b1:58:8b:1f:a7:32:72:d0:53:86:33:f5:5a:50:8f:34:
48:95:1b:e3:df:a2:8d:6f:e7:30:b9:df:d0:20:1a:69:52:29:
7a:df:98:c8:d5:ed:66:4f:c3:ec:1a:05:0a:69:85:d5:00:00:
a6:df:30:28:33:5f:01:c5:20:ae:87:32:fc:8e:03:5c:9b:99:
99:18:b5:bc:f8:18:3c:f7:7e:43:7b:cf:1b:4d:54:68:a2:f5:
5a:8e:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:26 2024 by rpki-client on console-ams.rpki-client.org