Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/lIxfjDc2Ogj1CKGJ0tXeiVz7Qog.roa
File: lIxfjDc2Ogj1CKGJ0tXeiVz7Qog.roa (raw, json)
Hash identifier: m5zh20VA0zkLgmX69JqWvzuM7yeJNZKtC4yMPMlNcyA=
Subject key identifier: 94:8C:5F:8C:37:36:3A:08:F5:08:A1:89:D2:D5:DE:89:5C:FB:42:88
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 018571DE8D399FDDBD285E452E1B87661984
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/lIxfjDc2Ogj1CKGJ0tXeiVz7Qog.roa
Signing time: Mon 02 Jan 2023 09:44:48 +0000
ROA not before: Mon 02 Jan 2023 09:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212390
IP address blocks: 2a04:2b00:14dd::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:8d:39:9f:dd:bd:28:5e:45:2e:1b:87:66:19:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 2 09:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=948c5f8c37363a08f508a189d2d5de895cfb4288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:a8:0c:dc:09:cb:61:2f:00:20:84:a1:99:
55:08:d5:59:ea:e7:ce:d9:15:fa:bb:3e:3c:c6:9f:
d4:83:57:07:1d:90:d2:6d:be:f6:f0:2b:6c:06:d7:
4b:53:a5:4e:8c:0c:50:9e:1d:9c:58:e9:d5:d7:c8:
60:47:2a:e4:3e:80:a3:4b:95:78:cc:88:44:ec:44:
82:9b:e2:c4:4a:84:e1:0a:1a:86:42:fa:cc:79:3d:
21:56:91:35:70:e2:ff:d8:06:fd:69:fe:73:43:84:
9c:cd:0d:ba:81:b5:3f:85:04:a1:ce:49:05:89:2b:
7a:bd:a3:af:92:b7:2a:86:34:15:a8:20:48:9a:63:
0d:03:f4:ee:4b:f0:66:04:89:e4:cc:25:23:17:ae:
d4:fa:3f:bd:f9:43:8f:b4:ef:27:06:8d:56:52:a2:
13:6c:d1:ce:5d:51:a7:b0:4a:6c:99:2f:0c:5b:ef:
94:1e:34:1b:cb:c6:57:01:b6:0b:de:0d:49:0e:ec:
10:82:a5:2e:88:a8:9f:f8:d8:e5:78:31:49:c4:76:
2b:02:92:38:13:ab:95:b6:1b:85:aa:2a:98:e7:3a:
c2:17:77:22:99:b3:0b:12:d0:95:4d:78:ad:7f:e2:
d7:fe:ff:72:53:2b:0b:24:79:ee:03:95:9c:1a:10:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:5F:8C:37:36:3A:08:F5:08:A1:89:D2:D5:DE:89:5C:FB:42:88
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/lIxfjDc2Ogj1CKGJ0tXeiVz7Qog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2b00:14dd::/48
Signature Algorithm: sha256WithRSAEncryption
8b:0c:14:13:e6:42:3a:86:6b:1e:e2:b2:2b:82:60:74:3d:8a:
c3:4b:07:96:7d:6b:36:3d:e5:36:5b:b4:ca:28:ab:26:09:1c:
7b:42:dc:ec:04:c8:2d:f5:f1:f0:51:a4:29:3d:ec:55:46:72:
9e:35:50:db:a6:80:bd:8a:91:81:24:77:ee:78:e3:cb:cb:4e:
1c:62:f5:50:98:5d:0e:8e:e9:06:34:ae:69:c7:ec:01:8b:97:
08:c9:8b:01:c6:ea:7e:a9:f3:f1:0e:a2:a5:c9:8e:de:58:d7:
77:91:ec:6d:fb:15:0a:76:0f:e6:aa:6d:13:b8:e3:f7:b1:09:
52:ce:19:11:98:12:07:c8:5e:a6:79:0c:1d:30:40:a0:94:8d:
4c:87:fb:db:4b:33:05:74:86:71:94:8d:4d:da:38:5c:3b:de:
83:93:63:d0:99:ca:9c:70:bd:38:2f:00:ac:4b:f9:10:42:b7:
97:3f:25:bc:7e:38:b6:3a:9e:c6:46:13:77:28:00:24:ed:41:
36:69:4a:6d:85:c7:ff:4a:40:01:f4:9b:39:3e:2f:6e:60:9a:
31:80:9b:33:cf:c3:20:73:84:96:49:38:cb:0f:59:f8:38:de:
9c:2e:d5:2b:d3:64:8c:f2:47:ea:71:cd:a4:63:8f:e5:9c:1d:
4f:bd:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:32 2024 by rpki-client on console-ams.rpki-client.org