Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/i15RF5RaT1PjcAXcFJwJalYATH8.roa
File: i15RF5RaT1PjcAXcFJwJalYATH8.roa (raw, json)
Hash identifier: wlATPq2ewA7hfFHrmuQLKDtBtz01YzJrZJ6wk9Biw4M=
Subject key identifier: 8B:5E:51:17:94:5A:4F:53:E3:70:05:DC:14:9C:09:6A:56:00:4C:7F
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 0186F2F1A21BBA0348D7793E8CBEE89CFCBD
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/i15RF5RaT1PjcAXcFJwJalYATH8.roa
Signing time: Sat 18 Mar 2023 04:19:27 +0000
ROA not before: Sat 18 Mar 2023 04:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20860
IP address blocks: 2a04:ac0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 18 Mar 2023 07:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f2:f1:a2:1b:ba:03:48:d7:79:3e:8c:be:e8:9c:fc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Mar 18 04:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b5e5117945a4f53e37005dc149c096a56004c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:fc:a8:97:49:64:97:be:fc:1a:b8:47:63:
3c:bc:8a:02:b8:d0:62:05:fc:eb:89:e9:1f:0b:6a:
11:6a:8f:24:d4:0b:00:e6:b9:9d:ad:5c:0c:14:bd:
01:11:a9:53:47:59:c1:d6:8b:1f:7a:bd:d2:57:97:
a3:50:b4:8c:d4:fb:79:7f:32:5d:89:82:aa:86:d9:
c8:28:29:d9:47:73:63:bd:31:3a:97:ae:7d:cb:00:
0f:75:73:0a:d4:f4:8f:85:2c:16:b3:8d:ac:37:16:
5c:ab:47:43:bc:36:d7:f7:7c:14:ba:6b:5b:47:16:
fc:c0:bf:1f:bf:d8:fc:cc:07:13:ea:63:d2:8c:b8:
b9:82:99:45:17:9c:20:32:bd:05:7b:09:97:7b:a5:
5c:f1:b8:94:58:6e:f1:67:bc:dc:be:37:c8:c4:1e:
de:89:2d:10:c6:9e:4a:37:e2:81:9f:20:89:ed:96:
d8:84:61:d5:36:4c:43:e2:c2:fe:81:5e:d0:46:e7:
08:a9:12:91:58:fc:0b:5e:99:24:4e:6a:da:bb:6e:
08:5a:55:fa:27:33:e6:63:1f:3e:54:0d:a2:0d:5d:
eb:82:82:aa:a7:08:b6:13:88:8f:43:8d:93:b1:b6:
18:f7:e2:e0:a3:b0:e7:80:99:b4:a8:09:09:e2:14:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5E:51:17:94:5A:4F:53:E3:70:05:DC:14:9C:09:6A:56:00:4C:7F
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/i15RF5RaT1PjcAXcFJwJalYATH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac0:1::/48
Signature Algorithm: sha256WithRSAEncryption
a5:e6:2e:d4:2f:89:53:34:2f:71:81:63:6b:ee:7e:21:ce:e1:
78:d6:6e:33:0c:0f:2e:fb:7b:18:fd:f3:e6:98:04:56:db:52:
53:3d:bf:0b:dc:89:0e:8e:c7:6f:9d:01:93:0a:f3:65:63:9f:
f8:67:03:df:32:a8:24:5a:89:f4:38:7d:64:f1:5d:00:6a:c0:
3f:a8:9d:c0:d4:c2:5f:bb:ac:c2:8b:46:a0:b7:38:b3:e9:01:
0c:d8:89:c3:ed:5f:de:32:da:ef:db:4d:ee:38:70:eb:c1:ff:
bd:18:56:77:e1:99:80:a0:5b:05:1a:bd:a3:f9:35:3e:01:ce:
e3:9a:b1:ce:ae:32:58:e1:5c:77:f1:2a:3d:c4:57:76:9b:92:
39:8a:4f:b6:59:2b:9c:89:dc:13:be:9d:0c:86:a6:7a:4b:62:
eb:de:64:91:9f:7c:ed:82:bb:29:42:86:18:67:fd:41:bb:da:
86:15:7b:fb:18:bb:60:23:57:45:e3:3c:87:c5:02:33:ec:b3:
44:af:ff:6b:28:41:db:9b:58:78:10:a4:11:17:e6:48:23:41:
05:0a:f9:18:ff:4d:b1:99:87:2d:4a:a1:dc:0e:09:e2:3b:e5:
ec:60:b0:83:a6:34:7e:ac:50:fb:73:64:c1:6d:44:72:4b:71:
49:62:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:54 2024 by rpki-client on console-ams.rpki-client.org