Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/EFDvFIMOT9NGxaChTMiqm9CjIAI.roa
File: EFDvFIMOT9NGxaChTMiqm9CjIAI.roa (raw, json)
Hash identifier: saAS8MS8gnY0XENHKjZIsqAjbM1ZsJOld3/goZOxgFc=
Subject key identifier: 10:50:EF:14:83:0E:4F:D3:46:C5:A0:A1:4C:C8:AA:9B:D0:A3:20:02
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 01856DC1B8A3A1945F84E7131597FDC6154A
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/EFDvFIMOT9NGxaChTMiqm9CjIAI.roa
Signing time: Sun 01 Jan 2023 14:34:50 +0000
ROA not before: Sun 01 Jan 2023 14:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a0b:4581::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:b8:a3:a1:94:5f:84:e7:13:15:97:fd:c6:15:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Jan 1 14:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1050ef14830e4fd346c5a0a14cc8aa9bd0a32002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:ac:86:10:1b:07:54:93:c6:b5:41:a6:25:
54:b6:34:80:f2:21:73:6b:bf:4f:b4:10:49:51:ab:
fd:fa:9a:ca:4f:ef:58:1e:2a:15:04:de:b5:04:a2:
f7:82:e7:0b:d6:bf:4c:3a:1b:f8:88:a7:e8:f7:13:
74:90:cb:58:31:24:8b:0f:9f:23:19:c8:c7:cb:0b:
11:ec:93:7f:f7:cb:51:bb:63:61:1a:0f:f0:8e:98:
e2:b3:94:86:88:8c:dd:17:1a:b7:91:a5:9c:bd:3b:
8f:f1:e2:3a:eb:5e:fb:d1:75:da:8d:00:cc:5b:75:
82:5f:5d:a4:5c:d6:00:f1:86:fb:5a:55:e4:a6:28:
32:25:2c:b2:eb:96:c7:a9:07:7c:61:7a:60:0a:88:
bd:37:0e:b2:83:09:3a:3a:07:a4:04:da:87:75:1f:
f0:75:f2:88:c6:72:8c:04:d1:17:08:ae:ac:39:f1:
a9:df:73:77:fb:57:f2:6e:1f:57:8f:33:5b:ee:cd:
da:50:32:ef:4d:8a:8d:fb:ca:46:20:ca:de:ad:a4:
3e:83:ea:64:4f:64:90:86:67:06:04:53:05:0c:d6:
63:bc:bc:5c:43:e7:11:38:0a:c8:f9:eb:c9:7a:8a:
55:f3:df:91:f6:33:a3:07:5a:d5:bc:f5:8c:29:29:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:50:EF:14:83:0E:4F:D3:46:C5:A0:A1:4C:C8:AA:9B:D0:A3:20:02
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/EFDvFIMOT9NGxaChTMiqm9CjIAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4581::/48
Signature Algorithm: sha256WithRSAEncryption
85:e3:8f:a2:7c:25:43:e5:48:8f:f6:ac:87:df:91:38:61:45:
f8:b2:58:bb:16:5a:d1:20:0b:ef:dd:f0:c2:e5:34:a7:ba:41:
3b:ed:97:3d:68:28:4c:19:2a:c3:6b:dc:f8:84:94:66:cb:fd:
d1:a9:e2:cf:59:59:2c:69:76:b4:d6:69:58:0c:c9:89:b7:d9:
a5:02:18:08:2f:96:15:00:81:8c:f0:bf:29:57:87:b9:9c:c8:
28:bc:fb:90:ba:3a:1c:af:a3:f3:28:f0:47:23:b7:40:9f:bb:
9b:9e:7f:05:34:bc:20:d7:64:63:61:c1:25:72:0b:95:cc:af:
b6:e4:af:3c:2b:cc:8c:bf:5e:c7:42:6e:c7:da:64:aa:51:d7:
24:8a:40:a1:75:6c:e6:b7:e9:c1:c0:09:a3:9f:b6:49:8a:87:
c1:95:f0:04:f6:ba:74:be:bd:ca:23:d1:d5:47:b5:fd:13:a0:
6d:e6:f5:94:0c:0c:53:7b:cc:47:5b:cf:c2:54:1d:96:d9:74:
b8:5f:9c:aa:a4:19:12:8b:f6:9a:ee:a5:86:10:97:b2:7d:d0:
31:3a:d9:32:3d:ee:bd:c8:f5:99:56:6a:18:84:99:bb:00:6e:
35:c0:c8:81:78:b6:ca:3d:9b:43:d9:e7:24:35:f2:4f:b9:82:
2d:c0:3d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:11 2024 by rpki-client on console-ams.rpki-client.org