Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/isGgz46Dxfaz2fMK0iYE_q2dy-8.roa
File: isGgz46Dxfaz2fMK0iYE_q2dy-8.roa (raw, json)
Hash identifier: S6fp3QIaYyOhfEvBtm94UvWXXNqOeN039AvaTNtCX+4=
Subject key identifier: 8A:C1:A0:CF:8E:83:C5:F6:B3:D9:F3:0A:D2:26:04:FE:AD:9D:CB:EF
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 018577288263E4B5971CBCDCACE28C3614B3
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/isGgz46Dxfaz2fMK0iYE_q2dy-8.roa
Signing time: Tue 03 Jan 2023 10:23:41 +0000
ROA not before: Tue 03 Jan 2023 10:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13068
IP address blocks: 2a01:190:1505::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:28:82:63:e4:b5:97:1c:bc:dc:ac:e2:8c:36:14:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 3 10:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ac1a0cf8e83c5f6b3d9f30ad22604fead9dcbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:9c:2a:eb:df:21:d2:8b:22:41:20:fa:e3:
4e:ff:83:98:0d:43:f7:cf:cd:d9:a8:c3:2c:be:de:
a9:c8:9d:54:f5:98:2c:cd:dc:d8:29:8f:7c:ec:4d:
99:f4:94:89:b7:04:95:26:cb:82:ef:a2:b4:c3:74:
62:f3:6f:98:2e:9c:15:09:91:1e:6f:91:2e:0e:4c:
02:eb:91:33:99:e6:f5:a9:c7:dd:37:19:8d:b9:e5:
62:f8:8c:8c:4b:6c:90:51:f0:1b:17:7b:50:39:ca:
be:28:24:e7:bd:d5:14:4c:26:04:68:13:23:6f:17:
0f:80:bc:d4:ff:af:0b:15:26:01:0e:37:0e:32:32:
f4:d2:95:6f:33:69:92:fd:f3:eb:86:50:cf:e7:a8:
1f:8f:0c:38:39:1e:ec:d6:ff:c6:20:bf:a5:0a:18:
15:55:f5:d7:18:5e:85:0e:42:90:eb:e7:c5:30:20:
ff:07:d9:a4:56:b8:71:01:21:66:5d:30:5d:57:ef:
71:36:74:08:ed:13:03:8e:7c:1b:c6:96:07:61:41:
d3:68:54:a0:d8:3f:4d:e6:79:26:17:f8:f3:bc:47:
ff:0e:80:b0:52:d8:c3:ba:b3:a1:3a:03:ac:17:95:
0f:93:e6:ed:ef:aa:0b:50:52:36:75:4a:d9:f9:8f:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C1:A0:CF:8E:83:C5:F6:B3:D9:F3:0A:D2:26:04:FE:AD:9D:CB:EF
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/isGgz46Dxfaz2fMK0iYE_q2dy-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:1505::/48
Signature Algorithm: sha256WithRSAEncryption
02:5e:ef:7d:42:e8:94:76:93:3d:02:89:1f:aa:59:86:cd:4e:
9a:35:bd:23:d3:f4:46:9e:b9:4f:a8:db:93:49:6f:24:22:b3:
b8:6c:e7:18:d4:c1:a4:6b:3c:f0:58:bd:7e:a1:41:b7:3c:89:
fa:76:ec:77:63:08:bd:d8:6f:c0:9b:d4:77:b1:0c:93:d7:9a:
e9:d5:04:aa:d7:5f:52:d5:9c:ff:4f:23:b7:39:72:bd:a7:59:
65:bf:ed:13:b5:e9:ec:ac:df:35:d8:7c:e3:fe:51:4a:8d:80:
e6:48:22:57:46:9f:ff:d3:c2:e2:c0:05:fc:ea:1b:97:ec:4b:
bb:80:25:92:61:13:d9:47:82:be:e1:94:a6:aa:11:25:91:2d:
a1:fc:44:6a:a3:c1:4e:13:dc:9b:11:a6:5e:46:03:bf:01:38:
9a:b6:1b:9e:1d:7c:02:14:d6:81:b9:ad:c4:27:be:37:c3:21:
6d:34:44:88:47:be:4b:03:e0:4f:1a:50:35:c6:71:4c:4c:28:
93:28:32:bb:0c:28:51:1c:2a:86:54:9f:fa:1d:41:fe:f7:b2:
ca:ac:cd:73:bc:d0:b2:d9:26:7a:b6:07:6f:88:a5:07:fe:ab:
13:c3:10:17:08:8e:70:6f:cd:95:0b:70:88:1c:72:8c:88:78:
63:d9:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:14 2024 by rpki-client on console-ams.rpki-client.org