Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/c21ncZ2ZnT4qjjdcXoFpMtOdvq8.roa
File: c21ncZ2ZnT4qjjdcXoFpMtOdvq8.roa (raw, json)
Hash identifier: IRsfCYnPTvwxsrcsHGV24r+Ov5rE1SkER7sXxzql2Gs=
Subject key identifier: 73:6D:67:71:9D:99:9D:3E:2A:8E:37:5C:5E:81:69:32:D3:9D:BE:AF
Certificate issuer: /CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Certificate serial: 01856D385F0134C6F9EE99CD27AAC9C092F4
Authority key identifier: 4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/c21ncZ2ZnT4qjjdcXoFpMtOdvq8.roa
Signing time: Sun 01 Jan 2023 12:04:48 +0000
ROA not before: Sun 01 Jan 2023 12:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204810
IP address blocks: 2a0c:4b80:4000::/34 maxlen: 34
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:5f:01:34:c6:f9:ee:99:cd:27:aa:c9:c0:92:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Validity
Not Before: Jan 1 12:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=736d67719d999d3e2a8e375c5e816932d39dbeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cb:e2:ce:f5:6c:dc:9a:31:a9:3e:c5:93:cd:
74:7e:27:85:85:63:ac:08:89:92:e1:19:6f:ca:b2:
38:fb:7d:62:08:78:28:44:3b:94:fc:5c:45:b3:ff:
b2:6b:e3:17:33:1e:4d:2d:8a:82:ba:1d:b0:3e:1c:
3d:55:a6:00:95:30:b7:74:79:72:44:77:51:97:3c:
76:25:37:64:b8:7b:9c:e2:76:68:07:00:14:21:98:
94:64:da:72:84:4b:1f:e8:bb:4e:2f:6f:b9:4a:fa:
29:ce:7e:4f:8b:a1:83:07:1e:09:0f:c3:3a:54:f4:
07:25:15:81:af:d0:5d:41:5e:4b:e4:a4:a8:97:bf:
76:cc:d8:02:f7:f7:9c:40:b3:ad:e5:c7:9f:4e:b6:
cd:0f:d2:84:7c:ca:a9:7b:a9:da:bc:78:8a:9a:35:
00:e5:bc:9e:cd:e1:b2:f6:17:70:c6:ca:8e:f4:53:
a0:79:b5:39:fa:db:b2:5e:ca:9a:0a:89:43:ce:ec:
e0:2f:4d:f2:93:db:93:39:a7:f7:6a:31:63:22:e8:
1a:04:27:f6:28:b5:7c:df:b8:eb:8f:eb:81:f1:0b:
e8:88:d1:c5:2f:da:19:75:0a:39:af:bd:89:3e:90:
fa:bc:4c:8e:f6:88:fd:4f:66:14:bb:9f:76:63:d8:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6D:67:71:9D:99:9D:3E:2A:8E:37:5C:5E:81:69:32:D3:9D:BE:AF
X509v3 Authority Key Identifier:
keyid:4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/c21ncZ2ZnT4qjjdcXoFpMtOdvq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4b80:4000::/34
Signature Algorithm: sha256WithRSAEncryption
04:3e:93:9a:ef:0c:ea:b8:67:e3:f4:55:e3:fb:54:c4:ab:db:
d5:6d:6b:61:2a:a0:ec:33:1c:1e:21:5d:0d:87:bf:dd:f9:bd:
c2:35:6d:a9:57:51:31:9f:d0:c7:07:66:4b:f3:7a:40:4f:8d:
ca:88:f8:ba:ee:c5:dc:36:6d:b8:78:84:74:4c:92:8a:03:df:
2d:c5:0d:f9:a8:ce:ad:5e:48:f2:f7:be:dc:08:8e:88:40:62:
6a:99:7e:eb:d7:e1:cb:da:d3:c8:6c:4b:4d:d8:a9:96:d0:46:
f9:32:21:a2:dd:81:5b:2d:72:5a:93:6f:79:49:77:8c:ad:88:
83:30:bb:e5:2d:ad:4e:17:f9:85:0f:b5:f3:a6:b5:db:57:32:
74:f6:25:3f:1a:7b:ec:4c:a6:4f:30:9c:cd:a2:47:ac:ff:46:
61:bd:f4:e8:f3:35:13:90:df:12:a0:99:0a:b6:d0:f2:ed:5b:
37:56:fc:b0:d6:a6:3b:ea:5d:3e:ed:af:1e:30:dd:4d:1a:50:
de:4b:1b:8c:cc:b1:05:f7:c9:13:4d:b2:a2:b7:76:0e:83:c4:
6f:01:4b:22:35:a7:2a:53:d6:b5:cf:58:59:49:37:89:c3:5b:
9d:5d:c1:e6:01:b4:f1:6d:66:9c:db:59:e6:9b:a1:c0:44:a2:
1f:2f:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:03 2024 by rpki-client on console-ams.rpki-client.org