Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/ahtKbZrWLdjDIdxb-wPqK8LKB3c.roa
File: ahtKbZrWLdjDIdxb-wPqK8LKB3c.roa (raw, json)
Hash identifier: SNKoDHcy54t+8xgO7Ufjwd3d+KSuTOQAiAJ8RmgXYe4=
Subject key identifier: 6A:1B:4A:6D:9A:D6:2D:D8:C3:21:DC:5B:FB:03:EA:2B:C2:CA:07:77
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA834EFB1A5D9BC123A312D046521B
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/ahtKbZrWLdjDIdxb-wPqK8LKB3c.roa
Signing time: Mon 02 Jan 2023 13:45:03 +0000
ROA not before: Mon 02 Jan 2023 13:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210887
IP address blocks: 2a0f:5707:abc0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:83:4e:fb:1a:5d:9b:c1:23:a3:12:d0:46:52:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a1b4a6d9ad62dd8c321dc5bfb03ea2bc2ca0777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b8:03:06:0d:9f:49:e5:3d:91:c0:2b:c1:b2:
78:21:ed:6b:92:ef:b3:92:79:25:a0:08:ba:80:e7:
34:8f:3d:09:ab:f2:1f:51:84:48:f0:c1:f2:6c:2a:
ea:e5:0e:7c:32:ea:bd:c9:f5:19:51:fd:f2:ad:27:
7f:55:0e:51:91:a3:94:8b:77:24:d4:c0:fb:2a:ba:
b1:4e:16:67:d1:8b:a0:e5:b1:a6:21:7e:ea:8e:46:
09:11:b2:58:31:3a:81:fb:dc:ad:f0:32:8e:f1:07:
05:ea:6e:2a:1b:02:f8:93:cf:94:d9:28:a4:58:32:
d2:08:af:9f:77:d5:77:1d:1f:cb:a6:ea:7b:b1:8d:
e6:3e:66:21:c4:6b:0c:38:1e:6a:4d:14:86:82:92:
82:76:ed:2f:25:63:69:77:2e:9b:fb:5c:40:52:f0:
ea:18:12:fc:31:0b:c1:0f:0e:02:69:d1:c3:75:2f:
a9:0d:26:2b:d8:0c:35:b4:60:f0:24:bb:c2:83:be:
61:57:86:93:1b:c5:6c:e0:bf:03:18:e1:63:7f:dc:
ed:36:5c:d9:c7:6f:10:f6:19:7f:02:e6:78:43:43:
2e:ca:53:6e:ed:11:78:ed:02:4b:0f:f5:2c:ee:0f:
e3:d3:82:22:2b:7d:7e:b7:0c:e4:5f:b1:dc:80:3f:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1B:4A:6D:9A:D6:2D:D8:C3:21:DC:5B:FB:03:EA:2B:C2:CA:07:77
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/ahtKbZrWLdjDIdxb-wPqK8LKB3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:abc0::/44
Signature Algorithm: sha256WithRSAEncryption
66:b3:73:84:50:03:cf:8e:67:6d:ff:20:50:73:11:81:23:cb:
52:32:59:38:c4:07:39:90:2f:f6:f2:5a:aa:21:40:fa:19:62:
99:3b:37:b8:4e:ef:f9:86:7b:32:13:3c:67:ad:34:f5:e5:e1:
01:ee:b5:57:82:20:d4:9c:2b:d4:07:d9:02:0b:fd:a3:0d:6d:
3f:20:0e:3d:9c:48:b5:30:70:a0:88:ea:50:f7:a5:ed:1f:32:
a7:1e:98:25:c6:1c:60:1b:ec:85:9e:c0:97:3f:c1:ec:36:ac:
68:35:1d:cc:1c:83:7f:98:be:db:b1:cd:f2:73:3a:6a:d1:97:
c9:af:9d:b1:ff:73:f3:05:21:69:fd:cf:60:20:72:dd:78:bc:
23:9a:ff:4a:6e:99:a9:08:a6:57:1d:4e:cd:18:fd:cd:79:4d:
43:f6:6d:ac:6f:9d:76:ba:d8:e2:9f:e9:6a:84:87:f0:7d:ef:
18:f7:6d:49:e7:89:fd:3f:a8:c9:db:d9:bb:07:2f:d0:55:7f:
11:2b:12:0c:7b:8f:90:eb:fb:be:c7:b1:73:72:58:56:4e:20:
ec:b5:07:bb:01:89:73:8e:b3:36:eb:04:48:f0:2f:75:2e:14:
1e:4c:96:ca:12:fd:6c:c6:ec:89:9f:dd:a8:36:f2:ea:57:0f:
47:26:df:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org