Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/toEYXYVugWsJfauTs36iCA5O-zY.roa
File: toEYXYVugWsJfauTs36iCA5O-zY.roa (raw, json)
Hash identifier: NbigIvxB0l+cRYjgQHAClvJXyDMHmDNX63YcnZwKMGk=
Subject key identifier: B6:81:18:5D:85:6E:81:6B:09:7D:AB:93:B3:7E:A2:08:0E:4E:FB:36
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA868C38E9AAFC67F1BDD86A3B9F72
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/toEYXYVugWsJfauTs36iCA5O-zY.roa
Signing time: Mon 02 Jan 2023 13:45:04 +0000
ROA not before: Mon 02 Jan 2023 13:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212049
IP address blocks: 2a0f:5707:aaff::/48 maxlen: 48
2a0f:5707:aaf0::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:86:8c:38:e9:aa:fc:67:f1:bd:d8:6a:3b:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b681185d856e816b097dab93b37ea2080e4efb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:24:b2:cc:64:8a:03:09:a2:7c:88:d2:5a:
4d:da:95:f8:88:c1:45:48:36:91:88:02:d1:b9:31:
a0:5b:35:35:82:c8:30:51:54:8f:84:b5:30:5e:99:
00:6a:ac:98:de:51:a4:59:d1:78:02:e7:20:af:df:
88:43:8f:e0:94:de:a3:24:f6:43:10:d0:f2:cd:52:
9e:ce:06:11:d7:00:a0:c3:01:66:56:b6:ed:b7:2c:
e6:69:21:9d:09:0a:a6:3e:57:02:ce:8f:28:d1:78:
1e:aa:12:68:87:9e:af:f2:9a:55:ff:ad:34:25:62:
15:c9:44:1f:a8:ca:72:15:62:7d:6a:20:69:32:a2:
98:a3:c2:cb:97:99:a7:f0:2d:31:9a:5e:38:0b:be:
f8:63:94:13:b1:f5:25:bc:67:54:c6:92:0e:d8:56:
12:7b:73:db:b0:23:ea:43:0e:2c:36:97:0f:27:e1:
98:71:96:cd:9d:2a:ae:13:f5:e4:36:f6:e7:8a:6a:
ee:4d:f1:b0:4c:2a:80:fc:6e:53:9d:94:f5:52:34:
7e:00:26:d7:69:39:32:41:50:a4:c6:8a:12:5b:a0:
1f:49:0b:83:aa:dd:36:0a:27:0a:38:26:43:e5:ba:
6d:61:a0:a2:a7:be:14:fe:43:84:24:34:8b:8f:98:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:81:18:5D:85:6E:81:6B:09:7D:AB:93:B3:7E:A2:08:0E:4E:FB:36
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/toEYXYVugWsJfauTs36iCA5O-zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aaf0::/44
Signature Algorithm: sha256WithRSAEncryption
6f:c9:c6:bb:73:32:79:ea:9c:c5:52:4f:37:6d:8d:e1:b0:17:
31:a6:ae:e3:cb:0e:38:8f:b5:8a:ed:a2:2c:96:eb:57:38:85:
fe:d3:e2:5d:2e:4d:34:3a:c1:f0:4f:11:2b:be:49:03:eb:bd:
3c:d4:88:df:d7:fb:0a:2f:32:ae:af:d1:c1:3d:1e:fd:23:95:
97:ef:04:38:75:93:98:97:b7:e3:ef:8c:77:93:8f:1a:38:fa:
34:d7:cf:b1:96:4d:ea:2b:b6:6b:61:74:90:bd:31:0d:3d:10:
9c:d7:bd:4e:bf:79:33:e2:62:5a:ae:ad:9b:5d:4a:a6:3d:e8:
02:f7:8f:b0:a6:d9:ce:7d:76:60:05:92:42:58:49:8c:ff:ec:
2c:ca:55:25:75:8e:8e:79:f8:76:75:1a:07:d6:31:c2:44:d0:
81:40:8f:c0:71:0d:db:48:df:fb:16:b2:35:2c:32:de:30:b3:
d2:3a:64:ad:d9:fe:50:d8:84:ac:68:a6:13:1d:31:e4:2c:1c:
a6:05:26:3d:a8:93:94:61:a7:e8:f1:dd:90:b4:c9:10:79:39:
d2:af:1c:86:be:b5:26:47:a5:bd:aa:65:70:03:a6:ee:d0:ad:
8b:3d:c4:50:ac:1f:94:46:4c:b0:63:23:82:04:b1:fd:08:53:
04:e9:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org