Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/6wesyGRkcgPgmQ9IKV6OexYppVg.roa
File: 6wesyGRkcgPgmQ9IKV6OexYppVg.roa (raw, json)
Hash identifier: CAp4yD5J0lR/Jg9t/r+xsO9llAuZIQl3D63hF3CV9x0=
Subject key identifier: EB:07:AC:C8:64:64:72:03:E0:99:0F:48:29:5E:8E:7B:16:29:A5:58
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 01856E2FACF00B35CCCD74E22B9944A9B427
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/6wesyGRkcgPgmQ9IKV6OexYppVg.roa
Signing time: Sun 01 Jan 2023 16:34:56 +0000
ROA not before: Sun 01 Jan 2023 16:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205055
IP address blocks: 2a07:9443::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:ac:f0:0b:35:cc:cd:74:e2:2b:99:44:a9:b4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Jan 1 16:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb07acc864647203e0990f48295e8e7b1629a558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5f:23:dc:26:e1:11:25:fc:f8:c6:b3:d7:ba:
95:15:9b:d4:4e:c8:c4:86:5a:ae:83:09:60:52:a5:
85:15:9c:cc:e8:1f:53:b8:6b:15:7c:9a:fd:55:05:
f1:d7:26:91:6a:df:77:20:f9:c2:24:d8:68:89:04:
a5:4f:84:9f:f1:7b:49:ea:a3:1a:31:85:30:5d:cb:
b1:98:8f:ee:9e:76:21:9a:77:2c:54:b4:e1:bd:70:
dc:66:ea:2c:72:b3:cd:6a:e0:92:70:72:c1:2e:32:
b1:db:6f:66:95:26:4e:67:4f:62:3e:63:53:7a:6e:
00:d3:ee:47:a0:95:2a:f8:38:ac:a5:02:fe:16:8f:
7c:5c:f8:ac:4b:0a:94:09:04:f3:0c:9e:be:ba:11:
ee:fa:af:3c:a8:e0:3e:85:6a:46:1e:1c:fd:84:8f:
66:e9:2f:fc:56:2d:8d:0c:25:6f:95:f3:25:d5:fe:
7b:b5:f8:4e:73:f0:34:5a:f7:73:2d:c5:9f:9d:5c:
d4:e3:f4:88:87:fa:ac:e4:ae:64:c7:62:9e:7f:72:
7e:0b:b1:3e:c6:30:91:64:a3:dd:2b:97:6e:6c:9d:
d0:b5:ff:7f:49:16:a4:39:2d:7c:1e:8b:8b:f1:9f:
f3:26:cc:ec:67:7b:10:9e:b6:20:5a:b7:cf:1e:c1:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:AC:C8:64:64:72:03:E0:99:0F:48:29:5E:8E:7B:16:29:A5:58
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/6wesyGRkcgPgmQ9IKV6OexYppVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:9443::/32
Signature Algorithm: sha256WithRSAEncryption
29:23:b6:99:84:8a:81:f3:58:76:98:3c:80:b9:bf:5c:50:f8:
24:db:03:23:dc:61:d5:7b:af:85:2c:26:1c:84:dd:5f:58:33:
57:94:8f:70:3f:c4:77:94:5f:ce:79:e3:7f:3a:4d:e7:67:d9:
9e:c8:a4:3e:bc:d8:f8:89:8b:e9:93:a3:20:44:e4:84:e0:a1:
22:6b:62:0d:03:8c:e3:e8:6d:b0:4d:7d:14:f4:1d:9e:85:14:
2f:46:89:ee:e0:06:b2:2b:09:23:55:0b:11:a7:0f:74:f7:d9:
1f:8f:34:e8:20:62:b0:0b:6d:0c:17:82:72:f7:72:31:6e:be:
91:65:f2:b1:38:ae:a4:1a:cc:5d:66:07:50:8f:9b:23:a4:fb:
d2:1c:ae:31:e1:a0:15:f6:64:a9:38:65:e0:ab:47:15:f1:67:
50:a3:46:73:1f:52:90:b3:17:4a:1f:a2:6e:ce:ff:1f:54:4d:
1b:2c:78:e8:c6:cd:6e:5a:27:e4:20:fa:d7:a5:c8:5f:0c:56:
4c:c3:8d:65:65:42:20:a9:70:f1:86:55:8b:f9:58:ed:f1:fa:
3e:f6:86:b1:6e:cc:dd:f7:1e:c8:a0:25:39:a1:29:86:6d:1a:
33:10:5d:d0:42:58:8f:b1:fe:54:4b:a0:8c:48:c2:3c:e4:9f:
c5:39:5b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-fra.rpki-client.org