Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/lJcWlTDgCP3pT6mI0O-ZjpxNp_4.roa
File: lJcWlTDgCP3pT6mI0O-ZjpxNp_4.roa (raw, json)
Hash identifier: CXArUa+lYvwCECh1OG8euHD2onqkWHf/Gt/AnHU2ovE=
Subject key identifier: 94:97:16:95:30:E0:08:FD:E9:4F:A9:88:D0:EF:99:8E:9C:4D:A7:FE
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018B1F7669654F4465D0597BB4225A641F7B
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/lJcWlTDgCP3pT6mI0O-ZjpxNp_4.roa
Signing time: Wed 11 Oct 2023 15:58:55 +0000
ROA not before: Wed 11 Oct 2023 15:58:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216173
IP address blocks: 2a0e:aa07:e130::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:76:69:65:4f:44:65:d0:59:7b:b4:22:5a:64:1f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Oct 11 15:58:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9497169530e008fde94fa988d0ef998e9c4da7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:12:25:e0:57:19:ae:d1:be:36:0a:2c:1f:
1b:d7:cc:80:0e:3f:df:f9:8e:e2:b2:f3:79:49:3b:
8f:be:70:89:b9:0c:93:97:be:79:af:9a:bf:84:6e:
b9:aa:04:ec:f7:33:8e:b5:9c:72:0c:37:ba:17:54:
80:3d:7b:ce:28:0c:a0:70:ee:cf:c4:da:96:1b:75:
f9:1c:81:77:64:50:57:45:cc:31:d1:78:a7:e2:ca:
1d:d9:e3:9a:68:62:2d:23:85:b2:77:42:bd:33:16:
7d:3d:4b:ca:64:ee:4a:04:54:09:b5:7d:d4:ea:f6:
f4:e2:1a:23:45:ab:3f:ba:b3:a9:70:3a:13:af:e2:
76:cf:4b:d8:3f:5a:aa:33:49:8c:38:7f:4e:86:d2:
58:06:9a:ef:67:2b:ca:37:48:fc:c1:ad:94:cd:14:
ba:60:cf:5a:0b:cd:fa:ef:c9:43:ce:a3:31:d5:41:
68:50:49:9c:db:1c:fc:69:64:10:f8:eb:80:62:ca:
19:ac:a8:f8:f0:85:81:d5:f2:98:eb:06:9a:84:6d:
b7:13:df:f9:c5:a4:b2:3e:26:0e:74:48:9b:09:85:
54:85:99:bc:d9:16:94:de:a5:b0:54:af:fd:2f:60:
2e:15:ab:98:26:7b:ab:19:3f:da:d0:6f:95:02:fa:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:97:16:95:30:E0:08:FD:E9:4F:A9:88:D0:EF:99:8E:9C:4D:A7:FE
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/lJcWlTDgCP3pT6mI0O-ZjpxNp_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e130::/44
Signature Algorithm: sha256WithRSAEncryption
a1:ec:d5:eb:bb:18:d2:2a:e9:79:03:89:47:62:0a:42:f8:48:
06:de:7e:ec:7d:84:a6:0e:a1:b6:57:83:4c:a1:4d:36:9d:97:
18:d9:18:bb:a5:06:0f:c7:9d:0f:d9:d3:c6:bc:e4:ae:7d:3a:
fb:1e:45:9d:41:35:5d:c7:c2:7c:76:5f:08:74:74:04:20:d7:
a1:76:6c:1a:36:f0:0f:94:ab:cf:48:1b:67:b2:70:da:94:ee:
74:93:1d:07:5e:d0:3f:66:2b:03:e4:b0:e3:a8:0f:67:cd:44:
5a:9e:30:fd:ce:e5:f5:f2:1d:86:07:71:03:b6:c8:65:cc:c0:
c4:69:8a:9f:83:e1:e0:f6:79:5c:4e:80:2f:5c:c3:5c:da:2b:
b8:97:e9:bd:ad:d1:63:6d:37:a0:2d:0c:4d:29:ac:31:bb:98:
eb:26:4e:e8:e8:2b:7a:93:81:c2:a6:5f:8a:43:42:c6:3a:45:
2b:09:6a:ae:fe:53:b5:0d:28:53:4c:58:c3:91:c8:97:74:e0:
85:82:18:dd:ab:c5:5f:49:92:99:d6:78:b7:12:08:9c:f3:65:
ae:10:fe:13:d8:b3:c8:7e:5f:15:f8:32:e0:ee:7b:9e:ae:69:
2b:95:67:35:e8:63:38:c2:06:1f:31:0b:c0:a4:9f:b1:40:17:
dd:be:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org