Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1A2z7dMEvm3MLlcfIOB8nfFuNB8.roa
File: 1A2z7dMEvm3MLlcfIOB8nfFuNB8.roa (raw, json)
Hash identifier: qSDpFsQTtqEbATniRz7EONWeTl4WCNaKIkghYwd1uFY=
Subject key identifier: D4:0D:B3:ED:D3:04:BE:6D:CC:2E:57:1F:20:E0:7C:9D:F1:6E:34:1F
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FEA4F47091B97D5BAAAE761AE0B7E
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1A2z7dMEvm3MLlcfIOB8nfFuNB8.roa
Signing time: Sun 01 Jan 2023 21:14:49 +0000
ROA not before: Sun 01 Jan 2023 21:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203804
IP address blocks: 2a0e:aa07:e043::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:ea:4f:47:09:1b:97:d5:ba:aa:e7:61:ae:0b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d40db3edd304be6dcc2e571f20e07c9df16e341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:27:c9:30:3c:ac:c3:90:57:cd:c4:ca:e9:
ee:52:d5:06:e5:6d:ce:d0:eb:72:61:39:46:ae:9c:
52:c2:5b:97:a8:03:45:7a:53:5b:6c:fa:75:4e:05:
dd:b1:30:82:4a:08:4d:c5:fa:56:82:87:39:5e:8c:
a2:b2:df:1f:f5:9b:53:4e:e8:1d:7d:e0:fd:a4:0d:
e3:4d:00:7b:5f:68:da:cc:08:e2:44:4e:a2:fd:1e:
8b:85:b0:00:1a:a7:3e:1c:90:cd:c8:a6:c3:90:ea:
4e:57:65:a7:f2:a5:27:ce:86:35:26:84:93:1a:40:
05:48:88:f8:ac:03:6b:1d:dc:fb:2f:06:e9:da:c3:
61:9e:70:40:6f:f8:10:f5:19:eb:8a:d2:92:16:ab:
5f:9b:24:33:28:0c:da:4f:f9:45:f3:8d:01:45:bc:
43:d8:52:ab:c6:3f:3b:85:aa:ca:e7:63:e4:b9:17:
24:62:1c:90:c0:69:11:e0:82:52:67:60:b5:2d:e7:
71:15:79:29:0f:78:c8:7c:78:32:d4:75:61:df:95:
3a:09:80:d7:4a:68:3a:17:da:72:11:4f:4b:f1:38:
eb:40:eb:1a:c9:7e:b2:5b:8f:93:22:6a:12:62:c3:
e8:03:c9:83:20:0c:36:61:2a:b9:36:94:d7:97:b8:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0D:B3:ED:D3:04:BE:6D:CC:2E:57:1F:20:E0:7C:9D:F1:6E:34:1F
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1A2z7dMEvm3MLlcfIOB8nfFuNB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e043::/48
Signature Algorithm: sha256WithRSAEncryption
15:4d:0b:e7:cc:5d:ea:09:e5:93:e6:ed:b6:20:ba:48:fb:d8:
7c:b4:87:b2:81:9c:56:60:98:16:e3:ad:49:62:28:b8:b5:18:
b7:45:bf:47:72:de:c5:c5:c9:36:7f:5a:3e:2a:c1:6a:bd:5c:
4c:cb:7f:90:06:58:60:e7:ab:d5:47:b1:ca:b8:4e:b9:08:6f:
e1:67:43:24:db:d9:18:80:8e:be:39:b8:21:45:e2:ae:b8:63:
f6:28:bb:69:b5:23:74:37:47:d9:df:f9:22:28:0a:5f:fb:33:
72:66:83:9d:85:7a:4b:66:52:1d:9e:b1:76:ef:69:31:36:1d:
03:41:ef:59:f2:a5:d1:fa:0f:27:de:fb:14:cc:95:4d:52:7e:
39:5a:15:91:b2:b9:37:54:df:05:d2:3a:b9:f6:20:30:c3:ce:
2f:16:ce:7c:cc:f8:86:15:b5:70:04:28:5c:97:30:87:fb:58:
09:48:6d:b6:7a:9e:5d:2a:21:ed:7b:91:e2:24:12:c1:e4:1a:
ba:a1:de:09:b4:79:42:1e:ef:4b:a4:d1:32:97:b5:9e:5c:c6:
e9:fc:ab:45:20:26:f8:2c:22:5c:ae:93:f8:82:20:6f:0c:03:
49:a2:14:69:b8:70:55:16:09:85:46:78:7f:d0:2b:ad:e7:50:
ae:95:7e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:10 2024 by rpki-client on console-ams.rpki-client.org