Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/n0DkXlhKYIsGCm5IhQMr-X0BPoE.roa
File: n0DkXlhKYIsGCm5IhQMr-X0BPoE.roa (raw, json)
Hash identifier: M55Ctk1DnktokFaeolbYDqhPhNsqrjuHV4608QGk68c=
Subject key identifier: 9F:40:E4:5E:58:4A:60:8B:06:0A:6E:48:85:03:2B:F9:7D:01:3E:81
Certificate issuer: /CN=7981ea4d507fb0ae07159f6f88def958430fd070
Certificate serial: 018BAF5B97ADDE725BAEE6D6282A40E1118C
Authority key identifier: 79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/n0DkXlhKYIsGCm5IhQMr-X0BPoE.roa
Signing time: Wed 08 Nov 2023 14:34:57 +0000
ROA not before: Wed 08 Nov 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42785
IP address blocks: 2a12:eb80::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 11 Nov 2023 11:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:5b:97:ad:de:72:5b:ae:e6:d6:28:2a:40:e1:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7981ea4d507fb0ae07159f6f88def958430fd070
Validity
Not Before: Nov 8 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f40e45e584a608b060a6e4885032bf97d013e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:68:ea:23:97:59:65:97:a1:b4:83:ea:2d:75:
98:fe:7e:b4:f1:46:0b:f2:8e:c3:3a:50:19:04:67:
95:05:62:a7:aa:42:18:ac:cb:15:37:45:13:d0:d2:
86:3a:a4:a0:3e:94:32:3e:5b:5c:80:62:f7:f7:dd:
1c:c9:c6:db:9b:eb:0b:7e:75:ea:5e:41:d2:d4:46:
0c:55:9f:44:1b:1f:13:a5:6f:7a:7f:08:70:5d:a6:
0b:a8:51:9a:eb:53:ad:91:73:de:72:27:c2:95:a3:
66:8b:66:40:73:b3:b4:80:07:66:3b:fb:1e:e3:14:
47:05:73:47:0a:0d:c6:22:2a:a2:71:81:ea:40:88:
dc:fb:6d:30:76:38:d7:70:4e:5a:94:36:07:85:4c:
77:58:57:7d:fb:24:63:fd:4c:24:ac:0e:79:01:90:
3f:d4:e3:72:89:6b:10:1d:42:41:f7:70:8a:15:94:
f6:0b:8c:f0:4d:17:1b:0d:7f:96:43:3d:42:4a:23:
98:ab:af:e4:18:94:a5:41:eb:01:a6:4b:87:22:7c:
61:d0:82:77:04:5d:a6:97:44:32:03:b4:80:70:23:
c2:ab:b3:01:5b:2c:b6:66:12:72:e7:5b:14:e2:c2:
3f:16:79:fb:3a:07:d6:5e:d8:6c:f0:eb:f3:45:94:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:40:E4:5E:58:4A:60:8B:06:0A:6E:48:85:03:2B:F9:7D:01:3E:81
X509v3 Authority Key Identifier:
keyid:79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/n0DkXlhKYIsGCm5IhQMr-X0BPoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/eYHqTVB_sK4HFZ9viN75WEMP0HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:eb80::/48
Signature Algorithm: sha256WithRSAEncryption
40:92:34:85:15:35:e9:b2:22:88:1e:18:41:53:36:56:d5:44:
fd:07:02:ea:73:42:fb:e2:c7:1f:b6:8c:2c:1e:14:7b:3d:d9:
a8:f5:2b:95:f7:58:9a:49:b0:94:5c:bf:d0:73:77:91:bb:d2:
27:be:ce:31:fe:bf:d9:c0:25:a1:02:53:70:bd:4c:2a:80:f3:
f2:e1:0a:fc:af:d0:e9:8a:1a:71:db:a2:fc:cd:e7:62:b8:a4:
f8:88:66:f6:d5:0f:f5:4c:90:a9:f8:e3:31:93:b8:3a:55:2b:
cb:f1:0c:91:f1:37:64:1f:e7:a5:75:77:69:8d:f3:bc:10:55:
fe:32:e0:ad:e0:f4:06:05:d1:2a:75:bd:9a:81:02:c6:4e:a3:
70:1e:bd:27:c9:0d:aa:61:13:76:c1:6a:58:73:96:ec:81:5b:
4d:c2:54:7f:4f:c0:c4:72:9f:e6:1c:ac:71:fc:07:a9:58:ab:
b7:78:06:f8:74:8e:2d:b0:9d:b1:e3:19:9d:87:43:21:40:87:
16:27:a7:d0:dc:37:2d:7d:34:c0:fe:d3:f0:ae:0e:f1:93:72:
25:15:2b:01:77:46:da:4d:e0:66:79:a3:d2:3f:36:47:9e:53:
03:86:9a:67:fd:78:64:90:89:1f:f2:03:79:01:70:21:f4:73:
d6:47:53:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:15 2024 by rpki-client on console-ams.rpki-client.org