Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/Dv3xKrDs0CYODD73vwplvr6YIXM.roa
File: Dv3xKrDs0CYODD73vwplvr6YIXM.roa (raw, json)
Hash identifier: Op/u14tzPqKIfWgxXqEgQ1bCi3VLFSsIYbrPw2NCV84=
Subject key identifier: 0E:FD:F1:2A:B0:EC:D0:26:0E:0C:3E:F7:BF:0A:65:BE:BE:98:21:73
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 01856F26BA2639CEE3ED97E6AEF881DC3301
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/Dv3xKrDs0CYODD73vwplvr6YIXM.roa
Signing time: Sun 01 Jan 2023 21:04:47 +0000
ROA not before: Sun 01 Jan 2023 21:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59747
IP address blocks: 2001:148f:fffc::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:ba:26:39:ce:e3:ed:97:e6:ae:f8:81:dc:33:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Jan 1 21:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0efdf12ab0ecd0260e0c3ef7bf0a65bebe982173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:27:9d:0c:65:2b:d3:1b:84:9f:6d:5a:41:0a:
f9:4f:1b:79:b0:23:9d:7d:38:50:15:be:9d:ab:0c:
3b:1f:6d:87:46:fb:0f:4d:10:78:72:04:4f:4a:3f:
8a:b8:2c:8d:9b:a9:2a:a9:c6:88:69:2f:60:e4:7d:
04:c9:6b:34:7b:f7:b5:e5:ce:4f:7e:61:df:88:6e:
c7:82:fd:a9:01:de:54:dc:52:77:dc:89:c2:29:cc:
2e:e0:c9:7b:ce:8b:fb:6d:7c:1b:15:3a:30:1b:54:
32:e6:2e:62:c5:29:e2:d8:a3:8f:eb:28:e8:9a:e2:
68:9e:51:b2:c8:50:4b:5d:d8:9c:cb:76:22:f8:27:
79:8c:7f:d5:64:21:1d:44:f6:fe:8c:c9:a2:25:47:
70:7c:95:d0:33:fc:6c:11:ac:2c:9d:75:e4:57:4d:
73:d9:d1:c0:b2:bf:23:c7:d5:97:d6:f8:cd:ba:a3:
b3:92:f2:dd:a5:e2:ea:bb:a5:dc:eb:67:c3:d2:06:
25:31:9a:fb:50:81:b5:68:31:b3:64:1e:1e:9d:fb:
12:c4:95:32:fd:59:d6:a7:21:7b:37:ab:98:8e:9d:
82:96:08:39:ce:ef:90:bc:17:4d:54:0f:4b:67:d7:
05:0b:06:7e:f8:e1:33:c3:46:79:6d:e7:c8:b8:7a:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FD:F1:2A:B0:EC:D0:26:0E:0C:3E:F7:BF:0A:65:BE:BE:98:21:73
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/Dv3xKrDs0CYODD73vwplvr6YIXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:148f:fffc::/48
Signature Algorithm: sha256WithRSAEncryption
0c:c7:ed:e9:8d:fa:8e:cc:03:b0:8f:0c:ec:23:42:6e:fa:18:
3b:d1:e0:72:18:c2:90:df:a5:a3:9f:13:61:84:0e:e2:3e:c0:
0d:ef:bb:8f:66:d3:6b:df:e4:bd:97:4e:f9:4d:a8:a6:97:a9:
2a:ba:ff:5f:f4:22:82:d8:3b:55:8b:e9:39:84:12:f0:14:54:
87:6a:4c:fd:fb:0e:14:ea:3c:bb:02:e4:f7:6c:80:37:3e:55:
48:41:64:aa:c2:7e:65:a3:e7:70:26:28:07:13:14:3c:23:d7:
d4:35:cf:e0:03:22:43:56:fd:2d:54:40:a3:23:61:18:56:98:
5f:09:36:a6:3f:e6:b5:28:a7:6d:c2:1a:5c:77:a0:05:90:a0:
27:ea:e9:08:62:58:83:26:c0:89:b3:68:1b:ce:99:4b:dd:70:
a0:76:b5:39:12:8c:a6:e9:a4:b5:2f:27:0b:c0:cc:64:63:dc:
d9:73:66:e8:c1:14:55:2d:a9:1c:77:da:d5:ea:e4:00:e5:c4:
a1:e9:b1:5f:e5:5b:c5:de:2c:42:17:98:c3:96:e4:17:ad:d8:
88:f8:b0:02:d9:33:0b:ce:e6:86:ea:5c:79:0d:44:34:60:b7:
ba:23:00:bc:72:b2:4f:eb:2a:aa:78:36:25:69:f5:56:c4:e5:
4b:a6:a5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:54 2024 by rpki-client on console-ams.rpki-client.org