Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/uKoctQl_qTrw0S2JCMZUq5vtXk4.roa
File: uKoctQl_qTrw0S2JCMZUq5vtXk4.roa (raw, json)
Hash identifier: SuU4OUPsxwuMQTFnOR5SK4Dd6/wbaMJcHLWByld3AjU=
Subject key identifier: B8:AA:1C:B5:09:7F:A9:3A:F0:D1:2D:89:08:C6:54:AB:9B:ED:5E:4E
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA6B775EC46A62F987B546ED862198
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/uKoctQl_qTrw0S2JCMZUq5vtXk4.roa
Signing time: Mon 02 Jan 2023 13:44:57 +0000
ROA not before: Mon 02 Jan 2023 13:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 2a0f:5707:aae0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 31 Jul 2023 05:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:6b:77:5e:c4:6a:62:f9:87:b5:46:ed:86:21:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8aa1cb5097fa93af0d12d8908c654ab9bed5e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:c9:5e:bf:0a:40:2e:80:93:c6:2d:8d:35:
ba:b9:70:06:4f:0b:9e:1d:0b:6a:55:b7:43:5d:ad:
17:e4:ee:6f:69:b5:64:63:e5:39:68:83:2c:51:f0:
a7:63:7d:51:6a:ea:5a:42:0c:af:b2:2a:a4:ce:33:
c4:12:73:e5:b7:15:87:d1:0e:e3:9c:91:28:6b:fe:
13:90:c8:7d:43:5c:97:40:0e:6d:d4:f5:04:e9:98:
9e:5b:9d:a7:5f:79:42:99:02:d4:b4:2e:e9:1e:08:
86:a7:be:11:a3:75:f3:95:79:b8:c0:6c:f2:01:d0:
ae:a0:bb:1b:63:42:3c:ef:97:98:22:6a:fc:94:c5:
09:27:6b:34:1d:3a:0c:13:f2:50:81:1d:37:b3:39:
d8:36:7e:4a:c3:1e:59:41:ea:30:16:cc:c9:fa:d1:
e1:be:b7:5f:2f:ca:e5:89:3e:a8:9d:76:90:8f:8f:
d7:cc:17:2f:d4:32:73:b9:4b:ff:2b:0c:9c:e6:d2:
a2:6c:3a:d4:67:5d:1d:05:e4:d1:5f:ae:08:8e:a6:
ff:7a:ba:f0:b9:f1:a9:5b:77:d2:a4:47:4d:16:68:
38:bc:db:9c:a8:18:41:9e:9d:92:75:76:4f:90:a1:
27:d2:03:41:da:04:2d:33:82:44:3d:60:e7:b1:3f:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AA:1C:B5:09:7F:A9:3A:F0:D1:2D:89:08:C6:54:AB:9B:ED:5E:4E
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/uKoctQl_qTrw0S2JCMZUq5vtXk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aae0::/44
Signature Algorithm: sha256WithRSAEncryption
b2:20:7a:11:b8:a9:5c:50:64:91:9a:0a:d0:4c:f8:32:23:31:
0d:7b:16:b1:a3:5c:b6:e1:41:ea:ca:5d:f8:c3:0d:9b:2c:d9:
d3:36:c2:92:41:32:64:1a:17:2b:e3:a0:2b:ab:7b:92:44:e0:
9f:bf:67:fe:9a:81:67:c5:c5:c3:b4:e7:7b:83:e2:45:02:a8:
ef:43:ad:69:ee:30:d1:94:f7:fc:90:3a:e2:00:27:09:6e:3f:
56:51:db:37:ab:22:8e:0f:3c:e4:08:38:cb:b2:b0:56:57:1a:
ba:53:e8:9d:b0:92:23:0a:37:66:9d:58:e4:33:69:3b:0c:83:
b4:23:0a:31:65:2f:8a:b8:ea:03:f6:30:bb:7b:ba:d2:c7:16:
c0:5b:b9:2e:05:d2:d4:11:10:68:1a:5e:56:1e:65:13:dc:65:
c6:c0:83:05:fb:bb:90:a5:ff:a1:a4:00:b6:b4:78:bf:03:c1:
b7:1d:6f:05:d4:f9:c7:93:24:16:e4:eb:49:49:2b:d6:8c:2f:
64:9d:10:0e:f3:0c:4c:07:11:93:1d:f7:de:99:cc:36:cd:fc:
46:63:05:fc:06:c2:7d:f1:bf:89:ad:d1:8f:d8:e9:ac:64:80:
38:cf:51:cb:be:2d:24:af:ab:be:a0:2f:8b:26:ad:e1:30:d5:
a2:2f:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org