Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/dAVOWsaQM83Suw8VNt0Wd0-4jF0.roa
File: dAVOWsaQM83Suw8VNt0Wd0-4jF0.roa (raw, json)
Hash identifier: 3WqvYrbbopTZegw89zzV9S8qp4ZssU9qRtRTEmtLziA=
Subject key identifier: 74:05:4E:5A:C6:90:33:CD:D2:BB:0F:15:36:DD:16:77:4F:B8:8C:5D
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 01856F42C0DFD90F9422F56E3122B62C57A8
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/dAVOWsaQM83Suw8VNt0Wd0-4jF0.roa
Signing time: Sun 01 Jan 2023 21:35:23 +0000
ROA not before: Sun 01 Jan 2023 21:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 2001:67c:798::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Apr 2023 08:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:c0:df:d9:0f:94:22:f5:6e:31:22:b6:2c:57:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Jan 1 21:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74054e5ac69033cdd2bb0f1536dd16774fb88c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:ea:e2:0a:4b:ab:d4:83:23:c3:ba:a1:6b:
ef:c0:6a:ab:b0:56:b8:c8:38:f4:f6:75:cb:53:ee:
eb:5e:fd:f8:bd:45:ea:e8:30:eb:61:34:e9:14:5a:
16:54:04:30:25:23:f0:34:ee:0a:dd:85:db:72:fa:
91:4d:cc:f8:f1:c5:8e:0a:a4:ea:5c:ed:e1:11:5d:
1d:cf:d2:86:24:31:79:96:20:f9:cd:13:52:bd:0b:
9a:3b:5c:94:eb:d0:2d:44:ee:0b:b4:d2:83:12:86:
60:59:9f:a0:f0:6c:ec:27:f4:1e:13:df:c0:2e:e2:
53:55:f1:32:90:a0:06:14:6b:6c:8a:08:2e:78:c2:
fd:3c:a4:08:d9:d9:e0:36:24:22:9c:3d:7b:e0:fc:
4c:c8:2b:3a:26:e8:35:2c:5a:23:7b:ec:28:b0:7a:
58:6a:b8:8f:0c:3a:d1:3f:9b:9f:bd:04:da:d9:0f:
8c:04:bb:78:80:37:fa:19:39:d0:cf:17:97:37:4a:
dc:dd:95:d4:93:87:77:7c:b4:b1:1e:9d:6b:ad:79:
12:ce:b6:d3:0f:55:f7:99:c8:46:c4:61:f3:79:50:
4f:43:a0:ac:b7:bd:ed:ad:25:45:fa:11:c6:b9:a0:
85:90:0c:3a:10:6f:23:52:f8:db:3f:5d:5d:3f:7f:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:05:4E:5A:C6:90:33:CD:D2:BB:0F:15:36:DD:16:77:4F:B8:8C:5D
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/dAVOWsaQM83Suw8VNt0Wd0-4jF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:798::/48
Signature Algorithm: sha256WithRSAEncryption
4f:cb:09:15:ba:87:e0:5a:93:2c:e5:84:a0:ed:77:f6:e0:b4:
83:0d:5c:04:c8:0c:d6:2a:77:17:5f:a3:97:7d:e1:25:74:44:
af:c0:4c:1a:e7:64:ca:9c:da:90:6c:18:97:f6:b4:c5:2f:c7:
54:1b:c2:73:34:7e:94:77:3a:fd:47:49:31:00:f6:c8:b0:07:
8d:11:85:b1:98:7d:89:2e:40:38:b5:5e:bf:08:ce:50:f1:5c:
eb:cc:b9:16:1d:f3:cf:71:1b:9a:e5:9d:22:4f:fd:41:a5:e0:
14:8f:e8:81:de:67:40:2c:3b:ad:3d:56:a0:4b:d0:1c:50:f4:
b5:b8:27:29:83:e8:7e:9b:cf:35:5c:e3:de:a9:00:59:74:c4:
2d:55:57:b2:08:9d:8e:ed:3a:6c:29:7a:cb:fb:0f:1d:12:cf:
87:5f:ca:86:e5:a1:be:b1:13:05:74:95:a2:3e:de:b6:cc:fe:
76:c3:7d:96:96:99:ef:bb:cf:92:8a:be:2c:5f:a7:6f:48:d9:
56:ed:04:5d:66:24:a2:b4:70:b7:43:76:bb:5e:8e:d8:26:b1:
6f:de:f1:b4:77:16:54:a2:60:84:67:e1:61:52:2c:55:4d:40:
3e:f5:58:42:03:04:c3:b0:45:db:63:34:c0:71:02:eb:d2:aa:
85:ef:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:46 2024 by rpki-client on console-ams.rpki-client.org