Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/otaLXjDaGvaCmt_JMXKWOzG_uRs.roa
File: otaLXjDaGvaCmt_JMXKWOzG_uRs.roa (raw, json)
Hash identifier: 3bB6R9i/XhGkWN4thFQ4UdtKSoD2Dq0zvilcy4Ky1OI=
Subject key identifier: A2:D6:8B:5E:30:DA:1A:F6:82:9A:DF:C9:31:72:96:3B:31:BF:B9:1B
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FDFEC40435D51E580DDD3E2F85673
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/otaLXjDaGvaCmt_JMXKWOzG_uRs.roa
Signing time: Sun 01 Jan 2023 21:14:46 +0000
ROA not before: Sun 01 Jan 2023 21:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59566
IP address blocks: 2a0e:aa07:e017::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:df:ec:40:43:5d:51:e5:80:dd:d3:e2:f8:56:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2d68b5e30da1af6829adfc93172963b31bfb91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:8a:38:99:09:91:7d:8d:94:63:49:ab:6a:
ad:24:d4:fe:88:09:c7:e7:4c:93:4f:f2:4f:71:3b:
eb:a7:ed:f5:91:6d:d4:90:f2:d7:e0:c8:ff:5b:65:
02:1a:60:2d:3a:68:c7:f0:1e:76:28:1b:19:9d:1c:
88:d8:85:25:a7:d6:d2:33:9b:30:03:db:8a:cf:b5:
95:9e:89:5c:11:59:3a:36:5e:3b:cb:fe:12:e8:ba:
55:ec:92:60:aa:a3:c3:f3:bb:14:ce:f5:b9:3d:8a:
53:3e:49:1d:00:10:17:ad:b7:15:87:63:b1:23:49:
9e:90:57:c4:04:8a:24:0a:ad:02:45:c7:a5:ce:28:
a8:e9:8f:39:c2:16:c8:67:55:57:96:1b:f3:9e:cc:
12:07:67:15:f0:d6:59:00:7e:18:24:b7:52:b1:f9:
5b:22:e1:3e:d4:74:e9:c7:47:99:1f:b9:59:13:7d:
de:2c:43:71:be:65:dc:03:6f:c4:54:8d:b0:a3:86:
ba:38:ab:a8:fd:3c:29:85:9d:d1:7b:e5:29:b1:7c:
54:e2:82:57:68:43:f2:f5:6b:24:4f:ce:d6:97:7f:
ab:64:38:24:69:ab:9e:92:d6:47:8d:90:11:c9:12:
ad:8e:d0:6e:f3:67:fe:9a:05:09:ec:f5:cd:32:4d:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D6:8B:5E:30:DA:1A:F6:82:9A:DF:C9:31:72:96:3B:31:BF:B9:1B
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/otaLXjDaGvaCmt_JMXKWOzG_uRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e017::/48
Signature Algorithm: sha256WithRSAEncryption
62:0c:18:d0:0e:12:cd:35:b5:8f:66:d9:55:d3:b8:d5:28:d8:
3a:6c:5c:27:53:4c:a7:4e:86:35:7f:e5:07:7b:ca:4f:b2:b3:
8a:cb:2f:b2:92:d8:b5:01:08:e9:18:7e:29:ea:c1:cf:00:22:
4e:32:40:4f:cd:ab:83:e7:e7:14:de:92:21:0b:49:80:13:a4:
d5:3a:52:83:bb:e8:f0:06:2f:37:58:fd:ef:d3:44:41:5f:1c:
00:01:00:b8:59:9e:39:28:cd:d7:89:a9:bf:50:67:8b:1d:2a:
b6:05:e1:a6:78:13:ce:88:16:ed:b7:83:85:30:10:43:be:f0:
56:dc:15:8c:37:3b:0d:da:e8:b1:7c:1e:4d:99:e9:42:f0:43:
e8:5e:f8:e4:df:62:fd:22:16:e9:4e:d6:1d:13:d4:c1:c2:90:
e2:fb:42:50:ca:2c:59:a1:d9:26:61:e2:ca:85:ff:17:05:3a:
68:0a:19:15:8b:8f:f7:26:d2:de:74:5f:1b:27:d0:dc:7d:1d:
6c:79:49:82:cf:30:8a:ed:5b:f5:d3:2e:ec:49:2c:9d:9b:03:
c2:5a:54:18:7e:2d:f5:54:77:72:fd:54:37:4b:59:b5:55:81:
6a:b4:18:c3:2a:77:47:f8:ae:c6:62:e2:88:94:b5:5e:f1:c5:
00:09:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org