Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/i0zn86FznpAnd9AQXhVGiOau7Rw.roa
File: i0zn86FznpAnd9AQXhVGiOau7Rw.roa (raw, json)
Hash identifier: FoJmTdKSJ/dY8wJoMCPTS5qWxTQw6bP72ysGj5+YXJA=
Subject key identifier: 8B:4C:E7:F3:A1:73:9E:90:27:77:D0:10:5E:15:46:88:E6:AE:ED:1C
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01856CAF1408AA163FBC80973A797C945332
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/i0zn86FznpAnd9AQXhVGiOau7Rw.roa
Signing time: Sun 01 Jan 2023 09:34:51 +0000
ROA not before: Sun 01 Jan 2023 09:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 21 Mar 2023 20:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:14:08:aa:16:3f:bc:80:97:3a:79:7c:94:53:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 1 09:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b4ce7f3a1739e902777d0105e154688e6aeed1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:91:61:f5:b1:13:39:63:29:75:03:e3:f1:28:
7c:01:da:e4:0d:d5:c4:ec:10:72:43:63:0d:fd:b5:
eb:8f:20:73:6b:50:a5:11:c9:53:cb:81:6b:f8:e3:
aa:a3:49:50:bf:8c:5c:61:3c:e7:89:a9:0e:ee:b2:
21:d2:dd:c3:8b:b5:9b:2c:75:68:30:7a:a4:b8:1c:
03:f5:af:63:da:4d:91:48:fa:48:01:6c:28:44:e0:
97:4c:fc:42:4d:cc:93:31:6c:3d:b5:15:c4:80:8e:
c3:e0:2e:bd:bc:dd:70:70:e3:6e:00:85:c7:a1:aa:
5d:e2:6c:db:ed:e2:9f:7d:3e:8b:ba:6b:81:49:48:
68:a5:0f:70:6e:bb:32:0d:22:35:ae:62:88:ef:b6:
24:a6:e5:36:87:30:bf:38:df:12:73:ab:59:ea:9a:
33:99:26:62:d6:da:37:ee:5e:54:08:c9:c4:df:03:
ca:8e:10:b3:20:e2:35:bc:c8:2f:b9:8b:e2:1f:b3:
41:c6:ba:0f:af:40:cf:f5:24:4d:67:e7:df:ec:b9:
e9:c7:58:cd:15:32:4f:52:3b:b4:21:77:94:f2:14:
55:0b:ca:6f:76:4c:7e:14:17:21:75:af:12:fb:88:
ba:2c:f2:5e:d3:37:5d:53:d7:3a:39:f9:8b:99:20:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4C:E7:F3:A1:73:9E:90:27:77:D0:10:5E:15:46:88:E6:AE:ED:1C
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/i0zn86FznpAnd9AQXhVGiOau7Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7c41::-2a09:7c42:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4a:18:e1:cf:01:3c:6e:64:1f:ca:1e:0c:a9:4f:4d:62:ba:d6:
b2:4e:4a:91:a5:5f:a6:93:85:57:e9:45:d0:73:9a:3a:17:49:
8c:5e:11:99:31:01:f1:a9:33:ac:be:ab:f7:86:fc:58:9d:bb:
be:4b:de:1e:b5:5d:46:55:dc:34:0d:ad:08:87:f7:e7:b4:fe:
50:21:b2:79:7e:dc:5c:e9:d2:97:93:bb:af:13:90:10:4c:1a:
7c:a8:bc:cd:bf:12:15:e0:65:dd:d7:39:53:c9:fa:e2:78:cd:
d6:66:07:24:83:a3:85:93:37:25:9a:4b:51:07:0f:ef:4e:36:
f7:f9:b2:2b:b6:f5:85:23:48:08:9b:4f:40:fa:13:d4:aa:87:
bd:18:e8:d5:58:09:00:b5:ff:75:e0:4d:c5:74:62:73:3e:bb:
90:4d:9e:8a:61:64:00:88:bd:01:af:cf:ac:99:3a:90:a5:e2:
ce:ec:53:c6:35:b1:b3:02:95:f7:25:17:7e:3d:41:5f:30:5b:
af:00:b2:92:4b:95:52:3b:54:f5:23:2d:06:db:cd:66:f7:03:
da:0d:6a:f9:c9:2e:f5:0d:f0:61:53:75:38:e3:b5:94:5b:dd:
84:48:c9:12:0c:a5:49:89:9b:17:40:fb:68:62:ea:b0:60:92:
3e:23:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:28 2024 by rpki-client on console-ams.rpki-client.org