Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6rrwWDK287wbsv_x4SfFTk4pBsY.roa
File: 6rrwWDK287wbsv_x4SfFTk4pBsY.roa (raw, json)
Hash identifier: wAnYpzzL3GX5AsCg8b3GMgIq0eUKRFyUMmIIZ4GojJk=
Subject key identifier: EA:BA:F0:58:32:B6:F3:BC:1B:B2:FF:F1:E1:27:C5:4E:4E:29:06:C6
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F300838AF4AB7AC2E1135B854008E27
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6rrwWDK287wbsv_x4SfFTk4pBsY.roa
Signing time: Sun 01 Jan 2023 21:14:56 +0000
ROA not before: Sun 01 Jan 2023 21:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211843
IP address blocks: 2a0e:aa07:e01b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:08:38:af:4a:b7:ac:2e:11:35:b8:54:00:8e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eabaf05832b6f3bc1bb2fff1e127c54e4e2906c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:19:2e:e9:7f:5b:63:2c:0e:86:01:6f:4c:
ae:bd:ef:1c:8e:c8:77:14:dc:c1:f6:79:20:ef:a2:
eb:28:d9:fd:89:c7:67:1a:c4:96:c0:51:de:50:bb:
5f:c1:b1:33:cc:d6:da:6a:c8:5e:0a:aa:a8:5c:53:
fb:63:37:fe:68:e7:ca:19:67:fd:fe:13:0d:21:fa:
2c:3a:4e:11:9c:ed:a0:a5:9e:e0:69:53:84:5c:1c:
c9:db:a0:ce:d6:07:c1:af:7a:14:da:09:e5:f5:b5:
e6:44:bd:27:35:56:22:17:2d:43:02:77:ac:6c:54:
a8:88:d6:be:fc:0b:24:fa:ca:ed:f2:8a:e2:16:a4:
7c:0a:18:b6:83:2d:df:55:8b:e3:e9:63:a9:dc:09:
21:40:d0:ce:cb:39:ca:21:76:bb:a1:dd:36:8e:5a:
a5:a6:8e:4c:2c:81:cb:9d:38:17:cd:70:1b:80:a0:
a7:78:d2:8a:c9:82:c8:13:45:9e:16:c4:84:2c:e3:
4f:bd:10:c3:2f:c9:0a:56:ee:f2:68:3a:af:c7:e1:
ce:23:fd:e3:ef:be:24:ae:b0:03:09:ac:f0:75:ae:
40:c0:14:33:c7:4f:46:75:bb:67:0c:dc:ef:c2:22:
dd:82:9e:2c:e0:14:fd:51:40:02:8a:8e:c4:ef:8e:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BA:F0:58:32:B6:F3:BC:1B:B2:FF:F1:E1:27:C5:4E:4E:29:06:C6
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6rrwWDK287wbsv_x4SfFTk4pBsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e01b::/48
Signature Algorithm: sha256WithRSAEncryption
4c:c5:47:56:0f:90:6c:53:81:03:7a:6a:a9:db:68:47:8b:07:
1a:ff:4a:c9:ae:a3:60:38:47:d9:2c:d6:a7:b5:29:c8:a9:59:
1b:6b:7a:32:9a:de:54:81:d2:33:fa:b4:33:fc:a4:59:9f:aa:
44:d4:d7:bc:20:1e:6b:35:e3:7c:f0:c0:7d:c0:0a:51:11:76:
c2:d8:ad:d7:bb:74:ed:43:9c:21:e3:c2:61:7a:89:9c:a3:8f:
35:77:82:4d:0a:af:74:d9:54:c2:b1:d7:0f:b3:4a:cd:7c:d7:
5d:cc:9d:6f:96:fb:e3:68:a8:af:18:19:85:6a:5c:d5:a4:58:
20:3b:da:2d:b3:32:66:0d:89:d3:f5:b2:07:ce:e2:a2:5b:b5:
cb:d0:4f:4c:fd:c1:00:4e:21:50:3e:a5:9f:17:1a:c4:a9:0c:
b0:fe:ac:90:11:7f:ac:20:fe:e3:87:bf:0b:37:ab:91:26:f2:
f0:b6:70:64:57:62:6f:9d:e1:0c:f2:5a:a8:ea:c0:c8:e7:3a:
b8:c6:5b:8c:bf:54:bc:b4:a7:69:aa:9a:ae:78:96:c7:73:be:
3d:1f:df:ee:25:4d:da:c2:aa:a5:9c:4e:73:c1:01:c9:18:34:
2f:85:6c:8b:69:cb:b0:f0:9a:8a:41:df:e8:7e:e7:fe:a7:09:
ff:3e:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:10 2024 by rpki-client on console-ams.rpki-client.org