Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/a6Tmvnd8bJSvrwvq-BaVUy6qE7U.roa
File: a6Tmvnd8bJSvrwvq-BaVUy6qE7U.roa (raw, json)
Hash identifier: AhwtgXkUfDEuctSjRMmAzTN8NNpynlsbGITHYWbFl6U=
Subject key identifier: 6B:A4:E6:BE:77:7C:6C:94:AF:AF:0B:EA:F8:16:95:53:2E:AA:13:B5
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 01856FC28206A0F77B6B8A5789293AA4ADA7
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/a6Tmvnd8bJSvrwvq-BaVUy6qE7U.roa
Signing time: Sun 01 Jan 2023 23:54:56 +0000
ROA not before: Sun 01 Jan 2023 23:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 217.14.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:82:06:a0:f7:7b:6b:8a:57:89:29:3a:a4:ad:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Jan 1 23:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ba4e6be777c6c94afaf0beaf81695532eaa13b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:fe:31:95:69:cf:c6:94:5d:d4:c1:52:a3:
44:94:15:14:07:51:a1:a2:f8:5e:90:e2:9f:ba:ec:
e9:8e:24:49:54:c6:0e:64:21:77:d5:19:7f:eb:e6:
f2:1b:b5:91:37:5a:b7:c2:b8:c1:ee:23:3b:7b:8f:
1c:b1:41:7f:2c:b1:b7:da:8f:38:43:e1:d6:e9:be:
b2:3a:48:96:9d:ac:41:73:c0:fb:e7:d6:2a:a1:3b:
5e:88:85:6b:97:c1:dc:13:dc:63:72:22:cb:79:4d:
fd:d2:9f:3e:08:07:2a:1c:e1:bd:70:5d:a7:ba:16:
01:64:de:30:85:a5:b8:a8:c9:7a:ba:18:63:42:68:
2b:2a:ba:2a:93:9e:a6:b8:84:5d:2c:12:79:23:1a:
9b:b2:88:de:30:03:77:c5:52:e7:96:68:54:34:89:
ac:a4:45:29:5b:25:70:cf:60:51:b0:e4:6b:ff:22:
a9:9b:b3:83:a4:a4:4f:c0:8a:43:68:2f:b5:a8:7d:
c2:bf:1d:22:c3:04:e2:4a:aa:ad:7a:09:7c:c2:b8:
a2:f8:2b:74:48:8b:68:48:0d:94:2c:22:b8:88:76:
8d:ac:07:d0:92:48:a9:23:be:68:4e:18:e1:44:f4:
3d:a9:45:bc:c0:9d:0d:89:d5:61:59:60:57:7d:bf:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A4:E6:BE:77:7C:6C:94:AF:AF:0B:EA:F8:16:95:53:2E:AA:13:B5
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/a6Tmvnd8bJSvrwvq-BaVUy6qE7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.14.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:1a:e3:35:39:c4:bd:e1:33:99:a1:a0:45:fc:01:90:cc:eb:
66:1b:e3:c2:9f:80:d9:c4:f6:40:f9:92:f5:1c:87:c1:7a:00:
c5:34:94:85:dc:81:f5:b0:5f:84:b1:00:e6:cd:58:03:77:45:
30:80:c6:19:2a:ad:55:37:20:15:4b:18:46:d6:fc:a8:a3:52:
08:ca:ae:5f:4b:90:a7:f9:1c:22:76:8b:3f:b5:02:ee:76:b6:
16:2e:e4:f1:cd:38:97:18:a6:18:a8:14:73:03:9d:85:9f:de:
90:77:2f:42:a1:07:65:bb:96:22:c0:6f:38:6f:f9:36:16:55:
95:4a:ab:c2:ae:9b:08:42:e6:cb:88:ea:fd:71:4b:f9:25:15:
7f:f0:77:cc:0a:10:08:cc:69:3e:d1:b5:a8:39:70:c4:cf:b6:
12:8f:2b:ba:15:eb:db:e4:b6:c1:1d:84:cf:a2:f8:ee:64:37:
e4:1f:3a:bb:22:d3:d2:f9:2f:6e:33:8c:03:49:71:61:b3:0c:
04:c7:bf:d7:85:54:63:d5:6e:26:00:b7:18:b8:dd:5f:0d:ee:
0e:f0:a3:b2:b1:0e:43:d8:d0:4d:f1:c6:4a:84:60:2c:f6:4c:
b5:2d:a8:12:ef:eb:93:59:c8:96:cd:67:6d:41:9d:b0:f2:0f:
1f:e0:79:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:38 2024 by rpki-client on console-ams.rpki-client.org