Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/Cr0Q01kcN3uDIGZUMVq-egVuzQ8.roa
File: Cr0Q01kcN3uDIGZUMVq-egVuzQ8.roa (raw, json)
Hash identifier: NRZH8NTZuvRgH7KzRQ3IpYHs07bYmwsWK56JR2s1otA=
Subject key identifier: 0A:BD:10:D3:59:1C:37:7B:83:20:66:54:31:5A:BE:7A:05:6E:CD:0F
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 018C7DC12504A58790C34B695D7AD9285FCC
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/Cr0Q01kcN3uDIGZUMVq-egVuzQ8.roa
Signing time: Mon 18 Dec 2023 16:27:39 +0000
ROA not before: Mon 18 Dec 2023 16:27:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44534
IP address blocks: 2a0e:fd87:5::/48 maxlen: 48
2a0e:fd87:7::/48 maxlen: 48
2a0e:fd87:4::/48 maxlen: 48
2a0e:fd87:9::/48 maxlen: 48
2a0e:fd87:1::/48 maxlen: 48
2a0e:fd87:6::/48 maxlen: 48
2a0e:fd87:3::/48 maxlen: 48
2a0e:fd87::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:c1:25:04:a5:87:90:c3:4b:69:5d:7a:d9:28:5f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Dec 18 16:27:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0abd10d3591c377b83206654315abe7a056ecd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:e3:c5:07:0d:7a:0a:8d:82:23:c6:11:65:
a2:32:89:3b:e5:41:4b:58:6c:50:c3:4e:74:9b:5a:
bb:b1:64:28:73:c9:dd:31:a6:31:02:db:c5:55:0c:
d3:c7:6f:72:eb:4f:ca:83:4c:bd:02:c6:c6:91:9c:
a9:35:51:d3:3d:a5:75:2f:b7:46:7f:bc:c1:37:2c:
41:cc:f0:7f:f9:51:d9:8d:93:52:4b:04:cf:71:bc:
5a:3d:d2:db:be:4f:8f:e0:df:a5:12:d1:1b:2e:7c:
8c:c0:f2:25:fa:94:22:a7:c7:64:fe:17:10:98:58:
a4:48:bd:56:06:13:0a:23:c6:eb:c4:d2:57:11:32:
33:f2:cb:fb:79:12:39:87:7e:5a:71:46:f2:11:75:
6f:17:ef:6a:cd:6a:b1:50:39:eb:b9:2d:49:9f:8c:
af:46:73:5a:af:51:1a:d7:01:10:6e:13:04:f5:51:
00:80:d4:42:d6:b4:43:b2:f6:fb:d5:49:ec:c7:a6:
95:89:7c:e6:1e:02:97:45:77:53:94:41:b9:e9:37:
2a:59:89:94:05:e5:7d:e6:8f:aa:72:fe:fe:d4:e3:
78:ce:9b:1f:15:99:28:6a:05:76:60:d2:c9:53:e1:
7e:d6:e8:7d:a0:a4:40:bd:c1:06:e8:89:1d:5f:1f:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:10:D3:59:1C:37:7B:83:20:66:54:31:5A:BE:7A:05:6E:CD:0F
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/Cr0Q01kcN3uDIGZUMVq-egVuzQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fd87::/47
2a0e:fd87:3::-2a0e:fd87:7:ffff:ffff:ffff:ffff:ffff
2a0e:fd87:9::/48
Signature Algorithm: sha256WithRSAEncryption
80:1f:6f:5b:a3:c2:fb:24:09:c7:eb:bd:62:15:52:30:23:a4:
58:8f:70:d4:e3:e5:87:47:5f:dc:9f:92:0c:d9:4e:ee:d4:de:
dc:c1:fb:80:5c:17:92:cc:c4:ba:bb:41:f4:d1:58:4f:0b:ac:
4d:d1:6f:f2:5c:37:2e:27:df:80:2e:35:74:ce:1b:5d:27:7f:
8f:30:ae:13:36:cd:f5:94:3b:39:c3:d9:b8:58:f1:78:d3:c9:
38:ca:21:7c:dc:77:bf:f5:9a:bc:7c:72:6c:b1:30:d2:8a:e9:
ea:98:aa:4a:27:f3:ec:a2:e1:83:bd:7d:01:73:7e:4a:15:95:
e3:be:cf:55:f9:a0:4c:16:e2:80:58:ab:33:7a:bc:d6:fe:f4:
4d:62:85:43:e5:1e:a0:9e:de:4c:8a:37:0e:a4:b1:d1:af:21:
f1:a8:07:8b:63:1f:96:a1:7c:4b:d6:20:aa:e3:23:c8:7d:8b:
44:1b:af:88:e0:78:30:7c:64:a3:a5:40:47:20:8f:eb:81:9c:
ab:3a:06:0f:bb:2a:d6:a1:7e:41:a5:1d:54:2b:75:05:41:bb:
86:8c:a2:c6:91:6f:e0:52:30:84:3f:e3:4f:ed:14:f4:e2:bf:
19:59:5f:f5:bd:8f:7d:db:54:d4:8b:4c:df:53:e6:ee:89:bf:
f9:4a:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:14 2024 by rpki-client on console-ams.rpki-client.org