Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Elbb00hjhGuAlB6qYgqGEZBuHQ0.roa
File: Elbb00hjhGuAlB6qYgqGEZBuHQ0.roa (raw, json)
Hash identifier: zauKmF5R+56iGTOaC5gWqd5X/DGL/pHFeTwjo3Y8rsg=
Subject key identifier: 12:56:DB:D3:48:63:84:6B:80:94:1E:AA:62:0A:86:11:90:6E:1D:0D
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F05908B6823030828F1583EF49D4F
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Elbb00hjhGuAlB6qYgqGEZBuHQ0.roa
Signing time: Sun 01 Jan 2023 08:24:53 +0000
ROA not before: Sun 01 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137509
IP address blocks: 2a0e:46c4:2c20::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:05:90:8b:68:23:03:08:28:f1:58:3e:f4:9d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1256dbd34863846b80941eaa620a8611906e1d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:f9:1c:2f:b3:c8:95:c5:bd:0b:51:8f:a3:
1b:ad:96:bc:0e:6c:f6:76:59:45:d0:79:11:68:72:
cc:27:7f:f8:8f:ab:89:62:b0:88:09:f3:b9:41:2d:
c1:5d:9d:aa:51:9b:a2:db:2c:53:2c:02:63:c4:4c:
9d:60:ea:81:ed:34:3a:ce:2d:73:f3:32:f1:e7:ab:
84:ce:d9:25:6b:55:d3:47:fb:fe:8e:03:2a:69:90:
70:40:08:d4:4e:e4:0e:94:35:36:8b:f8:30:24:11:
f9:22:eb:65:b4:e9:a5:85:22:97:3e:74:b9:3f:a9:
f0:76:a0:90:5f:8e:83:0b:7d:50:9d:eb:13:3a:42:
73:c6:9c:cb:05:a6:e4:24:09:c0:58:d1:57:fb:5f:
a5:3a:06:e2:0d:33:e7:eb:02:35:f2:07:98:48:87:
16:8f:36:03:0c:6f:93:37:f2:1c:5c:00:10:b0:69:
83:91:24:f1:c8:15:dd:11:2c:04:3e:fa:2c:94:c9:
41:35:cb:b6:48:eb:17:c0:14:39:6d:1b:c5:b7:d6:
00:1d:7d:0c:c6:db:09:05:47:03:7e:b8:a7:02:90:
11:32:10:83:97:f0:c3:a8:b5:6e:41:25:e5:12:0b:
72:8b:35:25:a1:5d:6b:fc:f7:74:05:87:ec:be:f6:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:56:DB:D3:48:63:84:6B:80:94:1E:AA:62:0A:86:11:90:6E:1D:0D
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Elbb00hjhGuAlB6qYgqGEZBuHQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:2c20::/44
Signature Algorithm: sha256WithRSAEncryption
56:ff:8d:45:62:f4:31:28:49:86:db:49:5c:1e:c8:8d:88:5f:
06:4a:a0:9d:38:d8:08:a2:e3:41:27:62:24:e4:12:a2:c0:6c:
56:9c:bc:76:59:d8:1c:a2:14:fc:90:57:2c:48:ce:79:11:e9:
be:a4:7a:52:d2:47:d4:98:5c:7d:70:b3:a5:c8:28:10:72:0d:
94:5b:f8:65:e6:fe:aa:cb:b1:e4:27:1e:4f:25:34:01:9a:87:
04:25:dd:bb:9e:81:64:a8:58:c4:1b:64:d4:92:af:53:4d:52:
e0:4b:62:a6:78:bc:60:39:f3:86:46:4b:8e:72:b3:a3:4d:92:
9d:bc:b9:b4:8b:52:ea:83:26:f7:a8:58:55:fb:70:c1:a2:24:
f9:2a:c2:d2:ad:d4:b3:9c:a7:d1:2b:aa:b2:e8:05:76:e7:c5:
62:19:74:f5:0e:c9:7d:7a:58:71:d0:c2:95:a1:2e:46:14:c9:
f0:24:0a:ae:26:30:b3:74:bd:ac:8d:c8:88:c8:04:f5:a8:c1:
2c:65:93:28:c6:ba:fb:95:81:a8:24:50:0f:88:45:f8:d3:cc:
b1:57:e6:37:07:ab:b8:c8:a4:94:40:f5:b7:2d:46:35:3d:28:
c9:cc:76:ce:f1:af:9b:29:15:d3:36:a1:4d:5f:f3:22:86:c7:
7d:ea:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:39 2024 by rpki-client on console-ams.rpki-client.org