Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/_OgOZ4yE3YGcVdIiaiSdok_-h8M.roa
File: _OgOZ4yE3YGcVdIiaiSdok_-h8M.roa (raw, json)
Hash identifier: HUa5naACo3P5efD2u2rvfnOxFA3OonuKfHhjwjM3jFE=
Subject key identifier: FC:E8:0E:67:8C:84:DD:81:9C:55:D2:22:6A:24:9D:A2:4F:FE:87:C3
Certificate issuer: /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial: 01856DEF6825B5F11C968969649B03845C83
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/_OgOZ4yE3YGcVdIiaiSdok_-h8M.roa
Signing time: Sun 01 Jan 2023 15:24:44 +0000
ROA not before: Sun 01 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200299
IP address blocks: 2a09:3a00:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:68:25:b5:f1:1c:96:89:69:64:9b:03:84:5c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
Validity
Not Before: Jan 1 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fce80e678c84dd819c55d2226a249da24ffe87c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:9c:e0:e6:a6:4c:eb:41:73:ee:0b:3e:e7:
b1:cc:6b:cb:85:22:36:78:b5:c9:d3:52:15:28:aa:
d8:58:68:92:c5:2e:16:c6:c7:28:de:82:fe:70:8f:
ba:82:59:02:93:76:78:c0:0c:83:4e:00:a1:ce:df:
22:bb:9d:9d:93:f4:50:0c:d2:62:ae:b6:38:aa:a5:
cb:82:f8:23:9e:fc:76:9d:57:1b:be:d6:ee:76:ad:
6b:bf:a6:c0:58:6e:b9:85:7e:8e:8f:9c:22:47:7b:
23:a6:94:b6:a7:dc:23:2d:ea:5e:86:4a:54:d7:f2:
1d:9d:6d:22:ab:7e:1a:59:ff:dd:25:67:c3:76:6b:
94:36:03:65:d5:bd:af:68:b7:52:e2:2d:44:27:51:
db:30:4c:1c:f4:a5:55:87:f9:78:f7:66:50:32:c6:
f1:61:3a:53:b5:0f:2c:fc:62:af:5c:07:cd:cc:67:
b2:0f:7f:88:70:1e:7a:9a:97:5f:34:5a:83:59:97:
80:db:c2:b6:c6:7e:25:b9:0d:0d:30:9b:f6:ba:ac:
18:72:23:53:61:f6:53:50:00:f8:e4:35:07:23:49:
34:01:c3:1d:36:e2:23:89:dc:49:82:21:06:77:63:
06:96:6c:b6:17:c4:c5:85:c8:3b:69:aa:bc:66:8f:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E8:0E:67:8C:84:DD:81:9C:55:D2:22:6A:24:9D:A2:4F:FE:87:C3
X509v3 Authority Key Identifier:
keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/_OgOZ4yE3YGcVdIiaiSdok_-h8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3a00:2000::/48
Signature Algorithm: sha256WithRSAEncryption
7d:11:34:a9:6d:c3:10:ae:c0:fd:67:d2:a7:02:48:d4:87:8d:
c1:32:ea:2a:d9:a3:b4:5d:2f:0b:0e:74:d4:7e:65:a8:d9:42:
88:cf:ea:34:21:3f:76:af:a2:cf:51:02:cf:cd:86:a8:c3:3e:
b6:bf:15:b6:d2:9e:97:3f:28:e8:27:3c:a7:23:3b:90:21:1a:
e7:71:fa:7c:16:28:02:7f:6f:10:79:1e:7a:7e:ee:73:c8:c1:
d7:39:e7:03:6d:df:8d:75:c9:ce:24:48:52:cd:51:95:46:0f:
4d:55:ff:0e:c5:9e:db:54:e3:54:5a:5a:59:cc:71:f4:6c:04:
2a:95:d6:aa:0c:99:0e:7f:dd:04:ae:04:58:1f:18:49:00:2f:
55:b9:e1:a4:3c:e9:ed:37:37:1e:28:18:d8:43:d3:c9:c0:a1:
ae:82:55:05:e5:0d:df:ca:f4:bc:37:c6:13:90:71:bc:da:53:
58:4f:67:f4:da:8d:4f:f5:d4:00:82:ae:ca:95:9f:55:1b:88:
4b:96:0f:e9:48:3e:9a:c2:cc:50:04:5b:e9:d5:7a:5d:23:d6:
ab:80:02:c7:f8:72:6c:4c:d1:fc:ae:b4:aa:8b:c3:8b:de:b1:
11:df:89:de:08:09:cf:dc:ca:33:74:0a:bc:ef:82:b7:cb:da:
17:90:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:26 2024 by rpki-client on console-ams.rpki-client.org