Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/2iy0ZfgvqvxPxlOc4UW3uDEvAMU.roa
File: 2iy0ZfgvqvxPxlOc4UW3uDEvAMU.roa (raw, json)
Hash identifier: zIUVNzlOgqUNvZs/+5CQ9oreEd8Ji+Gq5wGgMMcKDik=
Subject key identifier: DA:2C:B4:65:F8:2F:AA:FC:4F:C6:53:9C:E1:45:B7:B8:31:2F:00:C5
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA69EC668573F4E79CA8F202C4C78A
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/2iy0ZfgvqvxPxlOc4UW3uDEvAMU.roa
Signing time: Mon 02 Jan 2023 13:44:57 +0000
ROA not before: Mon 02 Jan 2023 13:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34924
IP address blocks: 2a0f:5707:aa00::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:69:ec:66:85:73:f4:e7:9c:a8:f2:02:c4:c7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da2cb465f82faafc4fc6539ce145b7b8312f00c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:63:c5:ac:a1:eb:6f:84:4c:b5:c1:74:c7:
92:a4:33:94:54:5d:e5:6c:97:7b:76:90:23:79:da:
85:6a:85:50:40:ef:58:52:0a:2d:1d:5e:e9:1b:96:
ef:5a:99:73:5c:97:a5:a8:57:e8:59:87:7a:93:8a:
75:a8:0e:cd:09:ab:75:6f:94:9e:9f:78:99:31:db:
c3:4f:76:48:cd:91:de:ba:63:74:f2:0b:3f:e0:e4:
ff:e3:c5:aa:70:b3:db:ce:2a:7c:41:f7:be:aa:24:
ae:30:6b:3a:4e:b8:33:c7:63:c2:b3:9e:31:32:81:
ed:95:0d:90:74:b1:1e:39:3e:15:19:9d:09:57:e9:
cf:1f:19:ae:26:6e:39:3f:fa:28:ee:80:72:b5:98:
f5:82:09:22:70:8d:6a:a4:6a:1d:8a:fa:fd:4d:6a:
7f:c7:c9:7b:09:18:75:58:2b:18:3c:e3:76:9d:0c:
71:4b:39:a4:92:ef:d9:9c:02:64:94:f6:e6:e2:16:
59:54:0e:9f:4b:d5:29:0d:1a:98:5e:59:d6:7d:6e:
37:42:f7:57:69:ab:86:43:f1:dc:2d:96:60:3f:cc:
36:99:2a:32:f8:5e:15:94:38:d6:c0:b0:91:8e:b7:
21:48:2e:97:cb:22:a8:a0:58:c1:76:8c:50:ad:80:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2C:B4:65:F8:2F:AA:FC:4F:C6:53:9C:E1:45:B7:B8:31:2F:00:C5
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/2iy0ZfgvqvxPxlOc4UW3uDEvAMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aa00::/44
Signature Algorithm: sha256WithRSAEncryption
64:06:c7:46:8d:71:a8:60:0e:3e:a6:16:09:a3:5c:b4:cf:7b:
cd:0a:ef:bc:35:a0:10:da:41:97:6e:23:39:fa:1b:38:20:8a:
e0:24:51:4c:25:9f:9b:5c:ca:dc:1a:10:3d:b8:82:d0:5b:ee:
24:ce:cd:47:03:f2:94:2e:9b:64:85:6d:38:00:5d:91:93:0d:
b4:26:97:0e:d9:06:6a:09:83:d6:c6:ac:b6:97:84:02:e9:6a:
bc:43:5c:48:30:70:c0:c1:0d:a7:20:87:75:43:8d:a3:c1:aa:
ef:a8:7c:ea:90:90:fd:43:e9:2e:3d:21:44:f1:aa:5c:a0:69:
13:99:ae:c6:fd:f1:d8:3e:e4:45:bd:6c:32:07:79:89:e3:20:
f8:42:ea:f4:f0:d4:7c:60:4b:61:7d:e3:91:11:93:c2:10:3e:
8c:3b:1b:19:ed:38:8d:18:e3:e4:46:24:f2:fb:e5:f8:b1:d7:
03:40:01:bd:e8:7d:d4:35:4a:ce:f2:cf:71:7b:69:2c:cc:4f:
e7:36:13:4f:9a:c1:79:be:ff:3a:06:cd:ac:06:da:cc:e8:00:
4d:8a:61:33:b2:c5:3e:f2:1d:5c:8e:30:28:34:5b:d6:53:00:
4f:ab:a9:0c:69:44:88:36:bb:6d:5c:6b:2b:17:a0:bf:89:8e:
7d:98:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org