Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/C95QoPnYWsEeP_BzvfvrKtNu43Y.roa
File: C95QoPnYWsEeP_BzvfvrKtNu43Y.roa (raw, json)
Hash identifier: 2Hz4UWGlNaXXyCOfkkh4qgEc+dH/Iy1vZ4AKsRqEdFg=
Subject key identifier: 0B:DE:50:A0:F9:D8:5A:C1:1E:3F:F0:73:BD:FB:EB:2A:D3:6E:E3:76
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA89256B1EA6F1CC50168967FFC0E2
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/C95QoPnYWsEeP_BzvfvrKtNu43Y.roa
Signing time: Mon 02 Jan 2023 13:45:05 +0000
ROA not before: Mon 02 Jan 2023 13:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213377
IP address blocks: 2a0f:5707:aa70::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:89:25:6b:1e:a6:f1:cc:50:16:89:67:ff:c0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bde50a0f9d85ac11e3ff073bdfbeb2ad36ee376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:d5:37:b2:30:a4:63:c2:9b:3d:bf:b7:74:
b6:b9:25:57:aa:94:a7:e2:68:f4:59:fd:af:db:3c:
5c:a3:5b:38:6b:78:d9:bc:a4:de:87:25:eb:00:45:
06:37:5d:5b:ef:19:d2:7e:0d:9e:77:4f:83:a4:19:
77:ab:45:db:bd:9a:4d:12:2b:1e:42:66:f5:52:2c:
ea:c3:73:c2:46:01:30:de:95:6b:43:dc:c3:fc:30:
51:f7:c5:88:91:5c:26:f5:ea:f6:58:66:8a:c5:77:
da:1b:c9:e3:c1:1b:00:86:05:0e:5c:0a:b3:7b:68:
e2:cd:c5:1d:29:77:12:d9:73:b9:32:8e:a7:3e:e4:
5d:18:b1:33:c1:ca:7a:30:90:42:94:a3:17:90:4b:
f5:09:22:77:5d:59:7a:f8:de:14:cd:cf:7b:2b:72:
ea:40:88:ed:d4:16:3b:3b:da:aa:5d:3b:8e:26:ba:
33:e8:a8:d7:44:11:2a:55:cd:3f:91:25:48:2f:4b:
62:f8:c4:50:ea:52:d7:24:0a:ac:f8:c3:11:a3:b7:
dd:ac:16:89:7b:26:89:31:b7:88:0e:6f:d2:ee:e1:
33:3b:7a:24:58:33:0c:a1:aa:4c:86:17:ea:eb:40:
7b:11:16:a8:43:ca:75:55:8f:3d:a9:e9:d2:ed:4e:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DE:50:A0:F9:D8:5A:C1:1E:3F:F0:73:BD:FB:EB:2A:D3:6E:E3:76
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/C95QoPnYWsEeP_BzvfvrKtNu43Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aa70::/44
Signature Algorithm: sha256WithRSAEncryption
55:dd:f7:56:ae:1e:f7:0a:76:2a:34:2d:58:93:3a:cd:10:10:
6d:e5:20:14:ba:8f:48:fc:cf:fd:13:5b:bd:7c:bb:51:f1:87:
3a:e0:34:eb:a7:1c:45:72:c7:22:07:6d:94:5e:ea:bd:c6:05:
4a:f8:a3:d6:39:1f:89:b9:46:09:a9:84:5c:6e:a0:1d:ad:5b:
a0:ad:54:66:62:1b:3f:37:01:82:8b:bd:b8:ef:26:67:66:e9:
6b:78:8c:88:bc:54:1b:3d:05:48:2c:4e:77:ba:b5:34:29:5d:
45:31:06:27:30:a8:d9:7d:81:e9:02:43:75:4c:99:f7:e0:c0:
46:96:e1:13:f6:19:2c:51:26:c2:67:d6:b5:9d:8e:fd:49:d1:
9e:3e:cc:09:58:3d:2c:3c:02:f6:20:fd:33:22:23:ee:3d:4e:
a0:30:66:f9:24:5c:ad:53:0b:39:d9:e5:60:ba:86:7c:e8:4b:
3b:af:ba:0e:10:b0:d0:3f:b7:fa:bf:2a:f2:72:c2:7d:85:73:
16:ea:d9:cf:36:d0:c3:85:6f:e5:bb:f8:fe:27:47:46:58:ed:
c0:48:b6:49:c8:c8:5e:7e:f7:06:83:65:26:0b:6c:81:af:07:
24:f6:b2:db:9b:26:1f:f3:f4:77:2d:f9:2e:bc:5b:d2:32:85:
3f:70:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org