Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6poprtlzpCGqevNY_H96U7D1MQQ.roa
File: 6poprtlzpCGqevNY_H96U7D1MQQ.roa (raw, json)
Hash identifier: pXKQ+qCrTynR1PJkGyqMzMrAZtpegsK9bzl5KfoFqBM=
Subject key identifier: EA:9A:29:AE:D9:73:A4:21:AA:7A:F3:58:FC:7F:7A:53:B0:F5:31:04
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA854708F5B48011CF3DA365F0A64D
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6poprtlzpCGqevNY_H96U7D1MQQ.roa
Signing time: Mon 02 Jan 2023 13:45:04 +0000
ROA not before: Mon 02 Jan 2023 13:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211684
IP address blocks: 2a0f:5707:b100::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:85:47:08:f5:b4:80:11:cf:3d:a3:65:f0:a6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea9a29aed973a421aa7af358fc7f7a53b0f53104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:39:58:5d:9b:f7:c9:ae:53:be:21:ec:a3:
2c:3e:cd:e4:47:65:54:e8:68:7c:bb:69:a8:ad:7f:
61:9a:1e:55:00:45:ee:92:48:a8:84:80:b8:a3:2c:
ab:99:7b:3a:76:3d:b7:81:69:7d:d0:ba:a4:d9:c6:
cc:93:05:27:bb:0b:98:7f:04:74:fa:d0:0b:e1:46:
43:b3:61:d2:8f:91:2b:9e:4f:eb:dd:27:6f:7b:26:
3b:5b:a0:92:20:37:76:1a:5a:00:9b:e5:0a:ea:a3:
bd:0b:26:78:98:fa:fb:71:be:da:8b:8e:db:60:7b:
a5:9e:9c:0c:fc:b0:01:55:b2:3c:5d:47:e6:cd:36:
d7:5c:38:cd:5e:91:84:1b:e5:4e:f0:d6:83:59:7f:
ab:80:d0:1f:4a:a5:2b:01:f7:5f:cc:de:42:eb:48:
3c:d6:6b:4d:6a:e6:77:72:dc:8e:44:81:76:75:35:
ae:0a:f7:e9:0c:9c:6f:81:a1:2d:76:39:c9:1b:34:
5d:88:10:26:4a:05:05:31:19:2b:ed:ab:13:68:c6:
62:f8:b8:ae:f5:c8:4b:9a:ad:0f:3d:24:8b:40:17:
0d:08:ab:31:cd:4c:76:93:18:1b:9f:61:4d:66:e0:
dd:73:6b:8a:8f:88:13:44:4c:81:17:9b:8d:90:46:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:29:AE:D9:73:A4:21:AA:7A:F3:58:FC:7F:7A:53:B0:F5:31:04
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6poprtlzpCGqevNY_H96U7D1MQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:b100::/44
Signature Algorithm: sha256WithRSAEncryption
2f:3c:71:8d:02:12:b3:ef:50:58:b6:2d:8b:2f:b4:98:03:78:
c6:8c:dd:d5:09:3d:20:46:28:8a:61:a4:53:a1:46:67:7d:bc:
44:3d:1f:2b:67:fc:70:30:a3:dc:98:d7:2f:18:ca:e3:53:b0:
53:e1:fa:ee:29:94:0d:dd:90:9b:87:1b:22:5c:06:9a:06:cf:
1e:b1:ab:49:ae:39:9a:08:e8:d6:89:99:aa:d2:20:3a:08:75:
d8:c4:46:6b:22:1c:cc:89:95:a6:63:2b:fc:bb:01:82:73:c8:
eb:0b:90:45:29:d2:c9:e7:10:af:9b:66:18:4e:89:1b:38:54:
bf:ab:7a:1c:b6:41:70:d0:cb:78:e2:b7:39:0b:46:96:6e:a0:
85:9e:39:16:aa:f9:22:58:2b:f8:88:b1:af:43:47:44:59:87:
3d:ec:01:d8:82:4c:ff:aa:58:43:2f:24:f0:dc:3d:23:a7:72:
9d:88:c7:f5:ca:db:06:35:61:35:b8:44:bf:44:cc:c8:c7:21:
e7:00:76:3e:65:e3:ed:3a:25:93:01:8c:28:0d:a8:57:64:42:
49:bd:ea:97:9a:a7:e6:37:3b:10:68:ce:c8:c3:96:cd:bb:91:
5d:f7:f7:89:6f:d5:4a:72:aa:3c:8c:33:c0:6c:20:d8:db:0a:
99:2f:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org