Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/1-outoDrLpSFnxiIqbVdjAOsS2bY.roa
File: 1-outoDrLpSFnxiIqbVdjAOsS2bY.roa (raw, json)
Hash identifier: tGOuXvz2aU59awb6JFh8Rmago0d5ZfIHVREHLHX1Elk=
Subject key identifier: FA:8B:AD:A0:3A:CB:A5:21:67:C6:22:2A:6D:57:63:00:EB:12:D9:B6
Certificate issuer: /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial: 01856CB85E61CD6123090F0F15DF718EAE8B
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/1-outoDrLpSFnxiIqbVdjAOsS2bY.roa
Signing time: Sun 01 Jan 2023 09:45:00 +0000
ROA not before: Sun 01 Jan 2023 09:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15474
IP address blocks: 130.208.0.0/16 maxlen: 16
2a00:c88::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:5e:61:cd:61:23:09:0f:0f:15:df:71:8e:ae:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Validity
Not Before: Jan 1 09:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa8bada03acba52167c6222a6d576300eb12d9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:a9:09:f8:ed:4e:39:0e:10:e9:ad:1b:dc:
16:14:d2:62:c0:ff:01:31:8e:d7:07:9a:02:61:66:
0b:8a:f3:8c:d8:94:cd:a3:c6:6c:9d:d0:55:47:8f:
bf:9a:fb:4c:e0:77:66:14:df:1a:fc:e6:4f:4d:53:
2b:2c:ae:18:51:07:b2:05:5e:c7:a7:85:c1:4b:2c:
2c:6a:65:4e:58:db:c6:51:68:4f:ba:60:4b:ab:b6:
f2:b8:db:38:dc:2c:cb:49:85:9d:a0:e1:75:c9:4c:
2f:45:91:70:88:cc:6c:04:50:48:cb:fb:78:2b:f5:
86:6c:68:7f:bf:df:29:de:56:bd:2d:94:ca:a0:c5:
bb:5d:b6:5c:90:b7:f8:46:69:df:96:5f:55:22:20:
34:37:5d:65:a2:de:a3:9e:70:dc:b0:e0:16:17:14:
04:ae:ad:f9:d6:6c:dd:d1:6e:c4:82:d1:c1:87:b7:
67:fc:8e:b3:b8:dc:0b:7d:62:64:71:5f:87:44:a6:
32:39:5d:50:d2:6d:c2:6d:a0:68:14:20:ff:4e:85:
2c:4f:73:61:65:ec:86:e3:a1:af:c2:05:0e:65:db:
ab:c4:71:6e:6a:7c:a4:16:0a:a2:10:dc:9e:3d:ca:
79:9a:5e:10:33:21:1f:3b:a4:d3:0d:c2:f3:d2:b0:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8B:AD:A0:3A:CB:A5:21:67:C6:22:2A:6D:57:63:00:EB:12:D9:B6
X509v3 Authority Key Identifier:
keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/1-outoDrLpSFnxiIqbVdjAOsS2bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.208.0.0/16
IPv6:
2a00:c88::/32
Signature Algorithm: sha256WithRSAEncryption
0e:fb:19:e3:6f:3b:70:dd:88:1d:f7:4b:df:35:8c:a5:e4:08:
35:62:6e:34:2c:94:70:69:6f:98:82:95:fe:8d:b0:6c:da:01:
f2:bc:f1:53:b9:f2:15:85:a9:6f:17:be:d7:f1:0c:08:76:40:
b9:17:45:38:c0:be:6b:06:c6:a7:2d:f1:de:e7:ec:b0:3f:73:
79:e0:2c:13:57:84:b2:98:81:c3:15:1c:13:29:fa:4b:47:d0:
b8:cc:15:c3:fa:06:4d:e2:fe:5d:ba:12:12:36:09:6c:0e:71:
55:64:7f:21:62:ec:b5:06:8c:8e:cb:43:bf:ad:80:f8:d4:f5:
9d:0b:37:a8:fd:61:8e:32:a4:a0:60:40:d2:98:6e:54:96:01:
34:90:ed:c2:c9:95:f7:db:b7:4f:40:60:32:94:bc:23:63:e2:
35:94:a9:fc:9a:e1:bb:0f:26:f0:0e:dc:ea:2a:b1:68:68:12:
7a:11:47:13:be:9a:81:c8:a9:b1:f7:3e:e4:89:eb:d9:c3:ee:
20:34:55:74:d6:3a:7f:4d:3f:05:4c:82:2c:fb:39:15:a2:c1:
bf:70:1a:45:20:17:55:8c:77:ed:f4:2b:10:74:cd:cb:8e:ac:
27:ac:74:e5:c6:b1:ae:0b:51:ad:db:9e:ce:d1:40:87:3d:5f:
04:11:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:42 2024 by rpki-client on console-ams.rpki-client.org