Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/IA0D-mWfNAgZyZuZmwfCkVomNqk.roa
File: IA0D-mWfNAgZyZuZmwfCkVomNqk.roa (raw, json)
Hash identifier: +wpRUHQc1RAPaXPkAxzA1/OJzA6eeBZW28EHILsaD70=
Subject key identifier: 20:0D:03:FA:65:9F:34:08:19:C9:9B:99:9B:07:C2:91:5A:26:36:A9
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C416448856A1334FA3031ECD360C1C4
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/IA0D-mWfNAgZyZuZmwfCkVomNqk.roa
Signing time: Sun 01 Jan 2023 07:35:02 +0000
ROA not before: Sun 01 Jan 2023 07:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141237
IP address blocks: 2a0d:2580:2000::/35 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:64:48:85:6a:13:34:fa:30:31:ec:d3:60:c1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=200d03fa659f340819c99b999b07c2915a2636a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:ef:7a:1b:35:ca:0d:b4:41:b9:10:cf:52:
97:4e:6a:06:55:a8:8b:c4:ab:34:e4:f5:15:25:2c:
ab:18:ae:03:fa:ec:4c:7a:ad:44:c5:38:1b:11:a3:
d4:7c:e2:13:93:d6:13:40:31:75:c9:01:fa:c6:79:
8f:ef:2b:52:97:34:1c:1f:ee:3a:29:94:3b:ad:fc:
26:f2:0b:56:a4:60:49:4d:18:44:ea:40:68:96:45:
57:e7:e2:d0:8d:57:08:2b:1f:da:62:b9:0e:fc:39:
16:91:d0:f6:c6:d7:13:8a:19:35:d5:2c:fb:5b:75:
72:b7:8f:b4:b8:95:22:03:8a:2e:7d:b0:13:a4:33:
be:88:cf:89:00:e0:25:96:cc:f7:1e:e3:6c:7a:ab:
7c:ba:11:b2:42:41:59:9e:d0:e4:a9:84:81:cd:a6:
c7:93:86:13:3b:ab:b1:2f:78:33:23:dc:ad:12:e4:
d8:69:42:90:9c:7f:c0:29:bb:db:6c:eb:ad:1b:3e:
04:0e:23:97:66:2b:da:47:5d:ec:1b:df:60:fd:38:
80:7b:49:a1:c9:b0:1e:09:b1:10:bd:7f:99:6d:39:
49:02:92:bb:66:e5:79:fa:41:20:dc:ac:62:9e:4c:
af:0d:1d:28:02:be:58:fa:90:01:76:f3:88:78:05:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:03:FA:65:9F:34:08:19:C9:9B:99:9B:07:C2:91:5A:26:36:A9
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/IA0D-mWfNAgZyZuZmwfCkVomNqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2580:2000::/35
Signature Algorithm: sha256WithRSAEncryption
1a:ee:b0:66:5a:62:41:ca:ef:36:c6:55:8e:5c:0e:d0:01:48:
84:10:9a:03:2c:13:49:3b:be:a9:af:5f:14:49:f9:85:37:63:
53:77:87:22:a3:a0:0e:87:f0:30:dc:cb:7a:ee:01:ab:9a:33:
7d:e1:95:6b:8b:31:98:7e:0c:c7:69:5a:0a:65:51:f7:49:47:
d1:df:f5:99:bf:04:93:20:89:73:e0:1d:d8:b4:99:61:63:c6:
14:30:e4:21:6b:66:85:df:a7:4e:39:4f:dd:1f:da:33:28:05:
d5:cd:0e:73:49:7a:11:cd:7d:ab:73:98:0d:14:3b:de:c6:82:
ac:05:11:79:73:a3:a7:7f:8e:e5:74:93:49:fc:ba:5c:9a:d2:
6b:7b:61:aa:a7:da:dd:fe:f2:77:8e:63:6a:bf:ab:91:39:6d:
7f:76:b5:62:47:67:82:a6:21:f6:b3:24:fa:bc:e1:58:9c:3a:
d5:08:7e:54:38:2d:bc:14:0f:f5:b5:22:b7:23:a5:08:0a:9f:
68:60:df:16:d2:04:17:00:63:69:6f:5a:ef:87:f1:f3:f0:7d:
f7:09:51:d1:6b:4d:ee:8c:6d:05:04:55:e4:de:5f:3d:92:d0:
2e:25:a3:5b:64:72:e7:24:9a:84:5c:cc:a9:e2:26:b6:2e:ec:
1d:45:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org