Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/AEVAy0VlvE4I4cBLn7DcwYWZVRw.roa
File: AEVAy0VlvE4I4cBLn7DcwYWZVRw.roa (raw, json)
Hash identifier: QWI0zHnbaSfJ60HZ4VNdCjkoiQVk6csN3BPaPXpTpgo=
Subject key identifier: 00:45:40:CB:45:65:BC:4E:08:E1:C0:4B:9F:B0:DC:C1:85:99:55:1C
Certificate issuer: /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial: 01856D8ABDBE788675772985917910759A2D
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/AEVAy0VlvE4I4cBLn7DcwYWZVRw.roa
Signing time: Sun 01 Jan 2023 13:34:47 +0000
ROA not before: Sun 01 Jan 2023 13:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60404
IP address blocks: 2a0b:b600:1000::/38 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:bd:be:78:86:75:77:29:85:91:79:10:75:9a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Validity
Not Before: Jan 1 13:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=004540cb4565bc4e08e1c04b9fb0dcc18599551c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:7d:7b:40:3f:0c:9a:7f:d5:8a:f5:a0:72:
c0:d9:39:e0:d2:39:e4:5a:1a:10:af:c6:2e:6e:1e:
f0:42:3d:a4:7d:11:26:f7:da:75:68:3e:9e:a3:09:
0a:7c:0f:89:a2:bf:71:c1:20:0f:ce:b0:34:3a:c3:
78:7d:da:0d:21:61:85:83:d7:60:71:43:53:b9:5c:
44:f6:dd:dc:1f:e0:d4:da:28:a6:cc:bc:ed:cd:92:
bd:a1:9a:52:82:d1:a1:0f:1d:86:28:b1:38:c9:43:
b5:9d:10:da:53:e5:20:0f:73:c3:c1:71:8f:db:11:
3d:05:08:b3:48:a2:5e:b6:7a:c4:d7:c6:db:43:3e:
ee:5a:48:d9:78:1e:3d:a7:90:fe:9b:6c:9e:20:ad:
36:2d:7a:6e:3d:98:73:8d:83:d0:ff:65:4d:b3:21:
e3:65:e2:ed:55:80:a7:e6:2a:2f:b5:59:1b:b6:a4:
7e:94:c6:93:49:25:a0:52:a2:f2:22:07:f5:dc:86:
4d:97:e4:bc:1d:05:6e:e9:04:af:57:dd:18:3e:c5:
95:bb:2d:83:84:60:c3:89:76:c0:16:1f:1e:c1:2e:
1d:13:ee:81:dd:d5:4f:0c:cd:f9:69:37:15:5b:34:
b7:2d:62:6f:5d:40:bc:96:34:c1:cf:c4:5c:05:16:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:40:CB:45:65:BC:4E:08:E1:C0:4B:9F:B0:DC:C1:85:99:55:1C
X509v3 Authority Key Identifier:
keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/AEVAy0VlvE4I4cBLn7DcwYWZVRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b600:1000::/38
Signature Algorithm: sha256WithRSAEncryption
a6:92:7b:d4:2b:e4:d8:e8:55:23:e2:ff:20:5d:55:a5:a9:59:
20:a7:89:e7:93:da:e8:f3:ba:69:5a:25:fa:da:8b:ab:37:78:
f1:1c:eb:39:2e:f2:cc:f3:8a:d5:e5:6a:87:4b:f8:73:9f:3f:
1b:ac:f9:63:b0:f9:4b:e4:85:cc:f3:55:6e:9b:00:a7:a4:d5:
a4:24:bd:c4:2c:a2:2d:63:48:1e:9d:4d:7f:3c:b0:67:ec:02:
11:e9:21:94:06:04:8d:63:d9:72:a9:67:41:c8:b4:5f:4b:e5:
2c:4a:f0:39:7e:12:88:c4:66:21:84:67:cf:a3:56:dd:db:26:
51:71:d1:b3:dc:cd:1f:ba:46:f1:19:d3:a3:7d:3d:0e:f3:e3:
e2:53:e1:b8:7b:2c:73:e2:42:ae:90:25:c7:62:1b:ad:57:52:
6e:90:9f:c6:b9:01:aa:4c:10:9a:60:08:f3:72:ed:a7:e5:e5:
36:9f:79:a5:5f:75:02:47:29:7e:28:b7:42:db:68:67:1c:cd:
8a:b9:a2:89:e6:cc:fa:b4:d4:ae:26:c8:7d:29:a6:cd:47:a7:
de:8d:08:cb:a5:a1:f8:f2:83:b0:c4:c2:18:cf:60:bc:d3:08:
05:e3:3e:cc:8c:f8:4d:05:5f:a5:cd:4c:b3:a7:82:e9:99:6a:
e5:74:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:14 2024 by rpki-client on console-fra.rpki-client.org