Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/p8qZo_FzV6-lcJIqeVsxMSzK4U8.roa
File: p8qZo_FzV6-lcJIqeVsxMSzK4U8.roa (raw, json)
Hash identifier: zBajn/mprWOVMELVdRGYMSUFJ+v2z6gEyxJaXIigL+c=
Subject key identifier: A7:CA:99:A3:F1:73:57:AF:A5:70:92:2A:79:5B:31:31:2C:CA:E1:4F
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA72C0BFCAE1F4C80B2E8D0FD6C7B6
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/p8qZo_FzV6-lcJIqeVsxMSzK4U8.roa
Signing time: Mon 02 Jan 2023 13:44:59 +0000
ROA not before: Mon 02 Jan 2023 13:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139949
IP address blocks: 2a0f:5701:fe06::/48 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:72:c0:bf:ca:e1:f4:c8:0b:2e:8d:0f:d6:c7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7ca99a3f17357afa570922a795b31312ccae14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:a4:58:b2:bf:42:34:2c:d9:6b:60:dd:4b:
6f:65:ab:61:f0:70:81:0c:0d:b3:06:13:60:90:a8:
ff:3b:50:05:a7:58:06:46:a0:3e:76:a0:ef:04:84:
07:2e:0b:59:25:54:4f:f7:e4:b8:2c:5a:10:1c:d1:
4f:14:e8:33:e0:f4:9c:dc:c4:aa:be:52:48:5a:ec:
75:28:71:e3:03:14:77:56:c4:ff:67:60:3c:49:33:
ec:81:d9:5e:ab:cf:d3:68:c0:93:d1:30:2d:70:e8:
29:58:ed:cc:b0:bd:7e:f8:eb:f2:31:b2:72:79:71:
a3:77:c5:9d:5d:67:36:9d:0d:b2:b7:69:3f:58:e7:
d7:65:c0:79:35:2a:36:9e:27:e9:57:90:59:f8:3e:
06:1a:f4:92:29:55:1c:8f:ee:d5:bb:de:cf:33:af:
e6:cf:58:88:ef:33:2b:25:30:5f:1f:be:28:45:4a:
c3:84:78:8b:cd:93:53:b7:f8:d9:55:4e:e9:f3:23:
8e:0b:3a:2e:61:8b:7b:60:6f:77:15:01:31:b0:dc:
95:e6:6c:4a:ff:d2:d0:76:f4:c4:72:36:9e:37:9a:
d8:2e:44:bc:9a:b0:0e:65:20:07:f5:fa:16:41:15:
9c:23:da:e9:52:3b:6e:d1:93:4a:8e:58:fc:cb:50:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CA:99:A3:F1:73:57:AF:A5:70:92:2A:79:5B:31:31:2C:CA:E1:4F
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/p8qZo_FzV6-lcJIqeVsxMSzK4U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5701:fe06::/48
Signature Algorithm: sha256WithRSAEncryption
5a:f2:75:95:18:63:fa:b6:58:e2:cf:b1:07:5e:60:2d:95:47:
63:1b:c6:18:7a:a4:c8:64:3a:f7:73:78:e5:35:dd:e2:d5:a2:
3b:90:69:ef:e6:93:d5:65:c5:b6:fa:c4:41:22:53:72:43:9d:
3b:a0:76:33:7c:e8:55:3e:23:a7:e8:84:ae:b3:4d:51:16:0b:
6f:4e:af:91:af:25:1c:6f:b5:fd:8e:86:1c:4d:6c:96:48:39:
ef:4e:60:e5:4d:8c:14:bd:ba:4c:0b:d6:2b:fa:11:86:be:03:
dc:97:4d:24:95:55:ed:84:92:1c:b5:a4:39:af:a7:4a:74:0a:
78:85:f0:e8:b4:91:b1:27:82:0b:49:cc:2c:ae:5d:36:31:ce:
c4:ec:50:61:38:cc:65:fe:17:26:be:9d:71:c5:3a:8e:f5:e7:
ae:36:5c:15:7d:02:0d:58:bc:17:f0:e8:69:e8:5d:6d:8e:03:
1b:47:5f:59:7b:88:9e:91:f5:04:ea:56:85:06:10:8b:24:2e:
8c:a9:07:50:2e:e5:d4:ff:28:17:4b:1e:00:99:02:ec:78:93:
79:03:34:70:5e:78:0f:98:3b:c8:bf:b7:db:52:a7:4a:e7:0c:
85:c0:83:f9:57:ee:fa:a2:3d:df:89:cf:15:78:67:14:1b:4d:
c3:61:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org