Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/OMkUAwq5O1JWhKUEesq0DPwAQR0.roa
File: OMkUAwq5O1JWhKUEesq0DPwAQR0.roa (raw, json)
Hash identifier: CzizEYDvPq2krHSfCE80VZvId+x62Xh/E97Kr9+K2G4=
Subject key identifier: 38:C9:14:03:0A:B9:3B:52:56:84:A5:04:7A:CA:B4:0C:FC:00:41:1D
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 0185DDDAFDA29FFB71E0CA2DCDEF57540164
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/OMkUAwq5O1JWhKUEesq0DPwAQR0.roa
Signing time: Mon 23 Jan 2023 08:59:54 +0000
ROA not before: Mon 23 Jan 2023 08:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203071
IP address blocks: 2a13:4e80::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 23 Jan 2023 14:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:da:fd:a2:9f:fb:71:e0:ca:2d:cd:ef:57:54:01:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Jan 23 08:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38c914030ab93b525684a5047acab40cfc00411d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:21:13:c0:57:e3:3d:7f:75:27:34:f1:11:
79:f4:21:5f:87:5f:40:d6:ed:ed:a4:3f:0d:ea:e1:
a3:66:f5:2c:9d:0c:23:1d:a4:b6:dd:69:0c:e1:6a:
aa:97:6f:e5:92:08:71:50:d9:38:c6:17:31:a3:83:
ec:be:1b:45:a9:a2:04:a7:0e:96:5d:1b:53:40:70:
4c:c7:4a:be:42:45:4f:74:21:f4:f7:cb:65:0f:ac:
d9:12:7d:2d:a4:38:87:24:87:7b:60:40:a4:ae:2d:
18:e5:e4:1c:a0:24:3f:7f:c4:0a:af:9b:30:e1:dc:
d5:c7:2c:b1:c1:70:90:39:85:4b:5f:20:9f:ba:0e:
05:1f:9d:51:73:89:4f:f0:45:f0:ca:eb:ec:7e:e1:
2c:5b:92:b3:d4:e1:3a:1e:25:68:65:85:51:82:c5:
47:22:9c:39:4a:db:d0:af:77:fd:de:85:d1:1e:86:
87:15:97:ae:86:5d:00:9e:a9:53:05:2c:84:13:19:
55:d3:25:f1:70:92:bf:1b:0f:40:b3:9a:2b:f5:f6:
ac:c0:30:61:44:97:01:9d:dd:94:16:c2:02:32:4f:
84:6d:cc:a3:34:a5:77:93:14:fc:2d:c5:39:cf:66:
21:a7:5b:75:49:2a:e6:cb:40:22:54:4d:38:de:3b:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C9:14:03:0A:B9:3B:52:56:84:A5:04:7A:CA:B4:0C:FC:00:41:1D
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/OMkUAwq5O1JWhKUEesq0DPwAQR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4e80::/40
Signature Algorithm: sha256WithRSAEncryption
c6:90:2d:d1:85:d0:64:90:93:82:6d:46:d7:e5:57:18:c7:5f:
60:13:32:09:f2:2e:1a:7d:81:74:e7:e7:ae:4f:69:ee:ca:75:
a9:88:11:9d:54:1b:f2:bb:19:26:70:b8:b5:f1:03:c7:09:b5:
52:c7:73:9c:62:a0:21:97:19:3a:c4:79:dc:b1:72:f8:17:36:
ac:f1:19:47:82:12:4e:76:48:dc:21:6c:2b:fe:c5:be:6b:d2:
6b:7e:59:19:0c:28:5a:5d:cb:ee:7c:a1:25:2c:60:45:01:cd:
7f:18:a0:01:63:6b:ca:26:a0:57:88:40:84:e9:f7:bd:8b:7b:
a3:2e:63:ab:9a:0e:ba:b0:6b:79:90:42:db:17:3d:85:56:43:
1f:7a:ef:03:59:33:67:d1:3a:79:85:7b:73:aa:26:51:ca:85:
b0:38:8a:6f:78:a8:11:84:63:c7:9f:ae:30:be:f9:d7:80:bd:
e3:1a:41:20:9b:6a:90:df:0e:d7:60:d4:2f:49:9a:73:5e:33:
8f:e0:75:ab:cc:68:9c:ac:5f:64:f8:67:6d:4e:d0:4b:ff:67:
a6:fd:c6:9d:ed:07:0f:11:ea:20:a6:97:cf:2c:df:fb:1a:61:
4e:e9:09:50:f6:6d:83:f7:25:a7:e4:c2:e1:ec:a8:c6:94:9f:
51:0a:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-fra.rpki-client.org