Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/8S1wx5e1AkIqdY4mQ4N81GaXreM.roa
File: 8S1wx5e1AkIqdY4mQ4N81GaXreM.roa (raw, json)
Hash identifier: 7J/JLFSRDuaCGiXHe9l423b9BaVNhGsgIbSKPovtVqM=
Subject key identifier: F1:2D:70:C7:97:B5:02:42:2A:75:8E:26:43:83:7C:D4:66:97:AD:E3
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA81E290F3C465A4F7B1E311759E9E
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/8S1wx5e1AkIqdY4mQ4N81GaXreM.roa
Signing time: Mon 02 Jan 2023 13:45:03 +0000
ROA not before: Mon 02 Jan 2023 13:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210633
IP address blocks: 2a0f:5707:b130::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:81:e2:90:f3:c4:65:a4:f7:b1:e3:11:75:9e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f12d70c797b502422a758e2643837cd46697ade3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:93:5e:da:d3:34:e8:ec:b4:0c:5a:55:2f:
3a:50:09:66:2d:64:c0:9c:30:83:61:d4:f1:ed:2d:
1b:64:eb:56:b0:c9:fb:ce:a2:66:49:2b:cf:72:53:
0c:07:12:64:95:06:91:93:fc:55:99:18:54:b6:c2:
30:68:ad:c9:e9:e0:85:9c:f3:0d:5c:f9:53:87:b6:
34:95:5d:fe:14:2b:6d:3b:c5:aa:2c:ca:1c:9a:7d:
2c:0e:d0:de:2b:63:8c:b5:24:83:2c:0b:60:7f:01:
3f:90:29:ea:1a:02:c6:e4:b3:a4:05:aa:8f:66:ba:
17:18:c3:2d:d0:b5:ba:42:0a:95:14:d7:34:82:fc:
55:ef:97:a4:72:6a:4c:ab:43:c7:db:af:07:a0:52:
c5:3e:d8:d5:bc:f7:fe:42:44:2b:66:ab:82:a3:85:
e4:84:ad:e7:4e:a2:89:35:53:c3:42:f1:18:4c:be:
74:31:37:8f:6b:c5:c3:ab:8d:de:1b:09:81:ee:cf:
e5:e5:3f:df:73:88:58:65:1e:38:8f:ba:41:c9:4d:
ba:55:22:ed:80:ab:17:22:64:53:9a:53:de:fe:a4:
2f:64:de:36:82:26:c4:dc:b8:c8:3b:98:99:e0:d6:
8f:d1:73:e8:be:e5:5a:d1:da:a1:c9:f4:7e:4b:1d:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:70:C7:97:B5:02:42:2A:75:8E:26:43:83:7C:D4:66:97:AD:E3
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/8S1wx5e1AkIqdY4mQ4N81GaXreM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:b130::/44
Signature Algorithm: sha256WithRSAEncryption
76:95:94:6c:64:fe:80:c5:12:b6:4e:55:31:e2:27:44:a6:01:
a8:df:25:34:51:93:d4:e1:bd:31:0d:d5:39:61:bd:fe:c4:a8:
1b:f9:a2:47:92:dd:2c:a0:57:13:d1:05:62:7f:c0:3d:60:3b:
28:36:65:6a:d2:3f:99:d5:b0:b4:b7:c6:70:8e:2f:ef:a2:b3:
cf:08:25:43:41:94:a5:3e:c9:15:38:87:4f:b1:49:bc:36:c7:
9b:d6:46:0c:f1:53:5e:b2:fc:6e:30:9e:b9:90:e9:2b:23:3d:
de:c7:db:bb:c6:a4:06:d3:83:7c:fa:5a:4e:da:7d:52:1e:85:
02:84:8c:43:11:cd:25:fb:13:da:06:9e:75:0b:03:39:be:dd:
44:a3:71:02:a0:d8:47:30:e0:47:ea:2d:a7:d2:09:8b:84:a2:
c9:31:7d:e1:6e:26:f7:cc:2b:ab:0a:1e:20:52:a7:f2:2b:5a:
cb:48:73:8c:47:4c:2d:8b:c9:7a:ef:3d:df:09:7d:f8:c3:3c:
38:69:30:dc:b6:f5:7c:4b:3c:56:73:72:fa:49:a8:ee:27:34:
01:1b:f6:65:54:1e:f3:35:9b:7c:c5:4b:5d:f4:37:1e:c4:0e:
ad:0b:a3:6f:b5:1d:06:da:bf:fa:99:17:94:51:ff:65:fd:ae:
df:33:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org