Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/H7M9Wxa7AEyAORuxbZZ17vt9eHQ.roa
File: H7M9Wxa7AEyAORuxbZZ17vt9eHQ.roa (raw, json)
Hash identifier: pXg8L6Nmyx+IWGYlnhw8J+GxdFUw0rUxerK+WjhVD6M=
Subject key identifier: 1F:B3:3D:5B:16:BB:00:4C:80:39:1B:B1:6D:96:75:EE:FB:7D:78:74
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01856F26D585D4CD0E34DBF168D57AA4D607
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/H7M9Wxa7AEyAORuxbZZ17vt9eHQ.roa
Signing time: Sun 01 Jan 2023 21:04:54 +0000
ROA not before: Sun 01 Jan 2023 21:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10929
IP address blocks: 2a02:c6c1:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d5:85:d4:cd:0e:34:db:f1:68:d5:7a:a4:d6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 21:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fb33d5b16bb004c80391bb16d9675eefb7d7874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:d1:84:83:23:08:e5:c0:59:35:09:1c:c1:
e8:f2:ad:c2:6c:ee:42:d3:65:f0:b6:b6:d0:6a:c8:
c9:51:71:29:0c:87:63:34:c2:fb:7d:4e:1c:ec:69:
9a:4f:28:b9:bd:b7:57:90:4a:2b:c9:c5:eb:f3:f4:
7c:64:35:96:a1:44:5d:2b:8a:f6:b3:85:1d:02:ca:
ea:9f:af:f2:17:48:6f:20:cd:d3:dc:d3:32:82:25:
87:4c:4d:f1:4d:1d:4e:20:87:2c:b3:fb:36:98:21:
e1:1e:b3:5c:a6:2e:64:8f:cd:66:ad:1a:82:be:22:
c1:f0:45:6f:6f:1f:4e:96:b0:b2:c5:69:52:42:97:
d2:b1:eb:8e:7e:92:af:14:ab:a0:8c:24:f7:6b:96:
a5:ab:8f:7b:05:d5:c9:82:80:13:64:68:4e:42:e9:
3a:5f:cb:1b:7b:3d:f9:64:b9:3b:f8:d5:7d:45:5e:
59:e6:29:27:35:9f:a1:85:c7:c7:e2:6d:3e:f8:48:
4d:60:d3:5f:81:de:96:a7:3b:e3:07:e6:7e:94:e5:
37:98:6d:d3:d1:09:ec:6d:ab:5f:68:ea:ed:9f:34:
20:1d:e2:5f:5b:d5:47:9d:f7:9c:ae:cc:23:4b:da:
3a:a6:71:35:3b:18:38:72:24:f8:e5:d4:28:fb:09:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B3:3D:5B:16:BB:00:4C:80:39:1B:B1:6D:96:75:EE:FB:7D:78:74
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/H7M9Wxa7AEyAORuxbZZ17vt9eHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:c6c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
81:b9:80:2f:30:a2:57:09:ab:1a:65:66:2a:1b:39:36:62:9d:
e4:08:9f:f4:cf:11:21:18:23:ee:4b:62:1c:21:89:10:25:cf:
80:a2:fa:b8:e6:08:ce:d9:af:6c:78:7c:39:f9:1f:bf:b8:18:
ef:7e:56:f8:e3:5b:db:4c:46:3d:5d:80:ca:ab:a3:d3:b0:83:
9d:dc:45:82:6a:90:0b:f1:76:95:10:d2:b3:17:5e:ca:e1:51:
e0:3c:90:96:d8:be:b0:3a:8e:dc:55:0d:2b:02:08:9c:1d:56:
3d:6a:b1:cf:80:c8:41:c4:34:e6:f2:c8:b9:2a:f7:b1:ff:72:
d7:29:5a:54:16:c9:db:1a:0e:cd:0d:11:ca:1d:59:75:26:75:
b0:6f:e8:9e:3c:cc:f8:77:40:35:2f:11:8e:2b:9e:28:95:6e:
f2:58:6b:ac:5f:42:dc:3a:08:85:d2:d1:5e:71:9f:5d:d3:dc:
2b:43:7a:02:e0:90:75:c1:4d:8c:6b:86:50:13:2b:2f:9f:0f:
95:23:9e:18:6d:eb:62:cf:ef:f4:82:d8:dd:d3:0a:bf:67:b7:
eb:14:de:fb:04:09:6a:4d:49:50:10:f7:81:10:af:cb:e9:4c:
09:47:2e:38:a8:e9:94:1a:c9:4a:56:b1:81:02:1a:a4:a2:62:
54:1b:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:42 2024 by rpki-client on console-ams.rpki-client.org