Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/IK1fck0wIO4mnm1znKyo2taMhMc.roa
File: IK1fck0wIO4mnm1znKyo2taMhMc.roa (raw, json)
Hash identifier: XkCii54bBx+5yQm+FRPLvwv+e3l82Cnl2tsXLC/gPmc=
Subject key identifier: 20:AD:5F:72:4D:30:20:EE:26:9E:6D:73:9C:AC:A8:DA:D6:8C:84:C7
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0189F6B1B2772508CFD4892BE6AEB3A9A9DC
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/IK1fck0wIO4mnm1znKyo2taMhMc.roa
Signing time: Tue 15 Aug 2023 00:56:27 +0000
ROA not before: Tue 15 Aug 2023 00:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 2a11:840:24::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f6:b1:b2:77:25:08:cf:d4:89:2b:e6:ae:b3:a9:a9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Aug 15 00:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20ad5f724d3020ee269e6d739caca8dad68c84c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:f1:cb:cc:db:ce:23:80:b1:2a:ad:9f:17:
8e:d6:09:ef:b2:c8:b9:17:3a:60:b7:8f:a5:b2:a0:
ab:d0:de:91:6b:8a:3a:7d:03:46:a6:83:d5:0d:d0:
a4:eb:47:ab:83:61:f8:4e:ee:c0:16:d1:93:36:dd:
87:b1:90:a6:c7:68:ca:ce:b0:28:16:7d:9c:6e:19:
a5:53:c9:e7:c6:3d:ce:4c:b8:9c:3e:19:46:31:c6:
2a:b8:c1:60:2e:10:66:67:57:a9:19:ba:cc:13:3f:
08:2f:94:2e:3c:0f:aa:ca:b1:63:7a:4e:03:71:41:
b8:f6:37:19:8f:0d:9b:f9:79:ec:4b:d4:ce:70:4e:
95:e5:fa:22:6e:a2:8b:a9:b7:3b:b0:d0:37:17:e8:
4e:7e:00:65:5c:74:53:23:5d:c8:18:25:3b:97:24:
ee:47:d5:67:54:93:84:b8:bd:20:69:8b:df:99:10:
2d:80:c0:97:c0:d2:e2:2e:09:f3:86:4c:6e:40:26:
7b:84:c5:c1:13:70:9c:b2:12:fd:e9:f5:11:78:0c:
bf:c4:e3:61:57:31:b2:ff:f5:bc:8b:af:63:aa:0a:
84:ee:d8:80:7c:0f:7f:a5:dc:ae:36:0c:48:44:9e:
15:35:6e:44:f9:7d:73:21:c9:15:15:e6:8f:82:39:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:5F:72:4D:30:20:EE:26:9E:6D:73:9C:AC:A8:DA:D6:8C:84:C7
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/IK1fck0wIO4mnm1znKyo2taMhMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:24::/48
Signature Algorithm: sha256WithRSAEncryption
83:39:74:6a:18:75:da:f0:78:ce:6b:2c:5c:dd:dd:63:ec:de:
5a:dd:c6:cb:cd:b0:67:da:df:86:c2:2e:60:fc:c7:8c:99:28:
74:1a:f7:13:b3:87:c4:1a:9c:ac:81:12:b7:d7:fb:ae:76:d6:
e0:4d:8a:a6:51:1e:75:d8:14:33:bf:22:e8:2c:c3:84:5f:29:
eb:db:4f:5d:c5:79:28:f5:ac:a9:e8:d3:9e:a1:9f:a2:ce:91:
b4:31:67:96:62:b0:72:8b:24:01:c3:34:1e:14:3a:26:e1:6a:
8a:cd:8a:f4:a5:a9:f5:3a:b3:47:72:40:a4:48:0a:eb:3f:6c:
1d:a9:19:fb:e9:be:79:34:86:3f:ea:a1:c1:ab:27:dc:ec:e9:
3f:4d:66:0e:d6:7c:54:69:2a:04:bf:2b:f4:67:3b:5a:c6:b8:
65:85:17:76:b3:ac:21:71:ed:df:9d:e2:fc:06:43:72:99:c1:
5d:62:06:2b:95:16:0a:55:89:58:89:c9:17:61:58:de:e9:db:
eb:33:a8:d4:37:65:02:94:a7:27:68:7e:9f:25:e9:7a:fb:1d:
78:c9:eb:0a:22:c9:2e:86:c0:ad:51:81:8b:0a:af:f9:29:37:
75:5a:fd:5e:45:8c:5c:c8:11:6e:bb:6e:ed:fd:eb:0e:aa:31:
21:89:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org