Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Pf576jI0miYwlkb63Da6GlFixmI.roa
File: Pf576jI0miYwlkb63Da6GlFixmI.roa (raw, json)
Hash identifier: OdU+tLo1wvJKRCsHTFEgq1D75e7LAgnl3MMX5rsHals=
Subject key identifier: 3D:FE:7B:EA:32:34:9A:26:30:96:46:FA:DC:36:BA:1A:51:62:C6:62
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C3179E8157578400A0211AB918B7E8
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Pf576jI0miYwlkb63Da6GlFixmI.roa
Signing time: Mon 02 Jan 2023 09:14:49 +0000
ROA not before: Mon 02 Jan 2023 09:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53667
IP address blocks: 2a06:e881:9100::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:17:9e:81:57:57:84:00:a0:21:1a:b9:18:b7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dfe7bea32349a26309646fadc36ba1a5162c662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:70:1f:e8:80:26:b6:5d:a1:e5:ac:62:92:
ab:f9:65:c4:35:7e:08:d0:60:4d:a3:a1:f1:71:27:
5e:79:a3:fc:23:37:5d:6e:30:1f:d9:22:f3:c3:74:
eb:63:dc:28:92:41:0c:76:d7:a2:bd:d9:ae:93:52:
91:5e:26:17:22:c0:32:91:8f:64:65:31:27:79:60:
d9:b8:45:a6:61:05:32:68:97:ab:f5:ae:cf:3a:bc:
f9:d9:b5:69:83:79:5a:0a:fa:f9:5b:66:2e:06:05:
9b:f7:68:8c:ae:d4:58:1a:7e:c1:ab:39:ff:cf:25:
9d:b4:97:3c:c5:1d:fa:60:aa:0f:34:24:fa:cb:f6:
3a:e1:93:66:22:72:78:03:79:68:5d:54:2e:ea:1e:
90:3d:2d:e8:2b:c0:6b:96:51:35:5f:82:88:6b:c9:
35:81:7b:03:8c:10:0e:b1:4c:e2:85:0c:f9:ad:85:
9e:fd:b4:c2:86:83:9a:a4:a8:cc:d4:27:ac:1f:20:
30:61:5e:88:9a:3d:f4:f6:d5:d1:85:89:67:f3:76:
2a:2c:85:5d:5e:5c:39:e2:5c:a2:72:60:3a:18:dc:
28:b3:40:40:44:53:00:9e:14:f0:51:c6:18:af:20:
b3:97:e0:18:68:a2:7f:ac:92:9c:70:bd:97:c0:41:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:7B:EA:32:34:9A:26:30:96:46:FA:DC:36:BA:1A:51:62:C6:62
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Pf576jI0miYwlkb63Da6GlFixmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:9100::/40
Signature Algorithm: sha256WithRSAEncryption
7e:a2:4f:6d:23:20:6d:e6:d6:47:a8:b6:b2:46:b3:c6:4f:f1:
7d:12:8b:48:f8:a4:17:0d:2d:4c:5c:2c:39:5b:1f:cc:53:eb:
30:8f:28:d8:37:40:53:4f:00:e8:75:ba:4e:c2:41:bd:3c:40:
24:35:df:36:44:85:8b:a1:2d:a6:0e:b6:1e:ee:47:a8:f1:88:
93:95:da:16:5f:97:33:73:c9:2f:e5:b1:f4:3b:0b:22:2e:d3:
3a:5b:d1:ac:e5:a5:de:57:9c:29:7c:8a:81:9a:5a:c2:0c:c4:
67:83:b0:0e:67:72:d7:2b:d0:58:80:ff:1e:13:3d:f9:43:1c:
be:ee:10:cf:fd:7b:f3:2e:14:fd:7f:84:06:d7:04:8f:0b:d5:
c1:a9:4d:cf:19:9e:5a:fc:e3:f5:c1:36:ca:c0:0d:ac:d6:19:
ac:0e:1e:39:29:3f:66:f9:9f:83:6c:01:63:83:f8:66:de:3a:
b5:13:d4:2f:84:49:25:2b:af:94:d5:4e:64:1c:ee:12:0f:57:
1c:fc:c6:19:4a:41:cf:8b:b0:15:5b:91:31:f5:0e:db:6f:f4:
d8:3e:d1:41:13:f3:f1:cb:76:f3:09:57:52:eb:c9:e0:b9:46:
c9:2d:5e:76:b5:71:38:78:77:46:5f:2e:27:e9:89:6c:65:a6:
e0:6e:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:40 2024 by rpki-client on console-ams.rpki-client.org