Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/1-ZXMQ7Xn9UFVk-L8tpfMJXBOjr0.roa
File: 1-ZXMQ7Xn9UFVk-L8tpfMJXBOjr0.roa (raw, json)
Hash identifier: gnOG3pW5yGgxPMSmwimq1N4PyMxqyXchPPRd0eTpn3E=
Subject key identifier: F9:95:CC:43:B5:E7:F5:41:55:93:E2:FC:B6:97:CC:25:70:4E:8E:BD
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018571D7CDD5A3DFD976E0CC1535E23E35C7
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/1-ZXMQ7Xn9UFVk-L8tpfMJXBOjr0.roa
Signing time: Mon 02 Jan 2023 09:37:26 +0000
ROA not before: Mon 02 Jan 2023 09:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 2a11:840:21::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:cd:d5:a3:df:d9:76:e0:cc:15:35:e2:3e:35:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 09:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f995cc43b5e7f5415593e2fcb697cc25704e8ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:ad:52:33:64:92:59:8a:90:22:5a:65:c2:
e1:32:16:23:fc:d0:59:dc:cb:96:c6:07:21:92:68:
30:d2:43:9d:6e:ce:f5:92:8d:f6:19:cd:5e:1d:93:
ad:db:40:60:99:67:36:0e:1f:ab:75:f7:19:7c:90:
ea:88:13:ff:14:77:31:a9:94:46:41:55:89:12:0a:
52:73:8c:b7:ed:ca:01:9c:d9:97:a6:60:19:51:c5:
da:68:d6:63:aa:63:ec:f9:a2:10:d7:12:dc:89:9f:
83:7d:41:cb:ff:49:92:69:4d:00:80:e3:c3:d2:25:
70:58:8e:26:c7:2a:24:20:b2:0f:39:cf:da:9a:dd:
d1:a6:f4:1b:a4:16:bc:5e:4b:2c:3e:5f:67:7f:30:
34:35:9d:e9:36:fb:0f:b5:7f:92:f7:2d:84:ca:71:
63:75:dc:ea:80:c1:01:0c:00:76:4c:ac:e2:3b:38:
c7:e9:fa:da:1f:ff:a7:73:c3:62:ae:bc:ba:82:36:
2c:67:02:5c:78:6c:29:0a:3a:6a:ec:75:3e:87:2a:
27:c0:e9:9f:d2:d4:75:de:fd:c5:d7:d3:04:98:b4:
4a:29:a0:53:81:62:8c:ec:2c:ae:fb:ed:15:b0:1b:
37:7e:7c:10:7c:4c:54:64:c6:fe:2f:f3:53:f9:a9:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:CC:43:B5:E7:F5:41:55:93:E2:FC:B6:97:CC:25:70:4E:8E:BD
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/1-ZXMQ7Xn9UFVk-L8tpfMJXBOjr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:21::/48
Signature Algorithm: sha256WithRSAEncryption
90:4d:03:a4:d5:57:46:78:28:2c:f7:a7:da:f9:0b:fe:95:86:
d1:82:14:b6:a6:82:2a:45:3c:58:04:43:7e:d0:c2:be:63:26:
fb:e7:5b:3e:56:bb:f7:18:c7:af:00:4f:d6:eb:01:cd:be:c5:
1f:55:04:19:2a:67:98:82:a1:ce:ed:8c:0d:f5:15:73:a8:bc:
19:61:7d:7b:fe:10:b5:55:c5:36:2c:5a:03:07:f9:86:d0:ee:
f8:27:98:3f:91:0a:c9:21:6f:74:37:21:79:b0:19:fe:ee:cf:
c5:77:6c:8d:07:3c:96:f6:f9:ee:6a:d1:a7:7d:5e:37:20:ef:
5e:a1:ca:62:3f:a9:9f:b8:f3:16:4b:a2:9c:32:f9:be:49:a2:
46:a2:56:9b:a0:34:75:34:ef:75:ec:52:f6:9d:21:b3:f2:fd:
40:42:f8:26:56:6c:b1:7f:65:40:0f:bd:58:b2:dc:8c:74:0a:
dd:71:70:84:ba:5f:47:bf:c3:6a:34:54:da:7a:30:ef:c0:85:
36:58:f8:b2:88:90:5e:c2:41:97:d9:50:09:a2:19:9b:14:9f:
82:0f:70:ad:7d:6b:83:ad:70:65:2f:b5:1b:52:e3:fa:8d:fb:
9b:f8:5a:0e:19:1c:a5:6e:36:f2:4b:23:04:6f:3f:f4:d9:42:
b4:ed:c5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org